Privacy Policy - VillageOneArt

Effective Date: February 4, 2026

Last Updated: February 4, 2026

VillageOne Art (“we,” “us,” or “our”) is committed to protecting the privacy of individuals who interact with our services. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information obtained through our website (www.villageoneart.com), physical galleries, events, and business operations.

BY USING OUR WEBSITE, VISITING OUR GALLERIES, OR ENGAGING WITH OUR SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS PRIVACY POLICY AND OUR TERMS OF USE. IF YOU DO NOT AGREE, PLEASE DO NOT USE OUR SERVICES.

1. INFORMATION WE COLLECT

1.1 Information You Provide to Us

We collect information that you voluntarily provide when you:

Contact us via email, phone, or in-person at our galleries
Register for an account on our website
Subscribe to newsletters, marketing communications, or event invitations
Inquire about, purchase, consign, or sell artwork
Participate in auctions, exhibitions, or events
Complete forms, surveys, or provide feedback
Enter into contracts or agreements with us

This information may include:

Contact information (name, email address, telephone number, mailing address)
Financial information (bank account details, credit card information, payment history)
Identification documents (government-issued ID, proof of address)
Biographical information (date of birth, profession, collecting interests)
Transaction history (purchase records, consignment details, artwork preferences)
Artwork information (for artists: portfolio, exhibition history, sales records)
Communications and correspondence with us

1.2 Information Collected Automatically

When you visit our website or galleries, we automatically collect certain information:

Website usage data: IP address, browser type and version, device information, operating system, referring URLs, pages viewed, time spent on pages, click patterns, and access times
Location data: Geographic location information derived from your IP address
Cookies and tracking technologies: Information collected through cookies, web beacons, pixels, and similar technologies (see Section 10)
Security surveillance: Video and photographic images captured by CCTV cameras in our galleries and at events for security, safety, and loss prevention purposes

1.3 Information from Third Parties

We may receive information about you from third parties, including:

Credit reference agencies and fraud prevention services
Art market databases and registries
Public databases and government registries
Social media platforms (information you make publicly available)
Business partners, affiliates, and service providers
Legal and regulatory authorities

2. HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

To provide, operate, and improve our services
To process transactions, payments, and deliveries
To communicate with you about your account, transactions, or inquiries
To send marketing communications, newsletters, and event invitations (with your consent where required)
To personalize your experience and tailor our services to your interests
To verify your identity and conduct “Know Your Customer” (KYC) and anti-money laundering (AML) checks as required by law
To assess creditworthiness and manage financial risk
To maintain security, prevent fraud, and protect against illegal activity
To analyze website usage and improve our digital platforms
To comply with legal obligations, court orders, and regulatory requirements
To enforce our Terms of Use and other agreements
To establish, exercise, or defend legal claims
To facilitate business transactions such as mergers, acquisitions, or asset sales

3. LEGAL BASIS FOR PROCESSING (GDPR/CCPA COMPLIANCE)

We process your personal information under the following legal bases:

Contract performance: Processing necessary to fulfill our contractual obligations to you or to take steps at your request before entering into a contract
Legitimate interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, direct marketing to existing clients, business analytics) where such interests are not overridden by your privacy rights
Legal compliance: Processing required to comply with our legal and regulatory obligations (e.g., KYC/AML requirements, tax reporting, court orders)
Consent: Processing based on your explicit consent (which you may withdraw at any time)
Vital interests: Processing necessary to protect your vital interests or those of another person
Public interest: Processing necessary for tasks carried out in the public interest

4. DATA SHARING AND DISCLOSURE

We may share your personal information with the following categories of recipients:

4.1 Within Our Organization

Affiliated companies and subsidiaries within the VillageOne Art group for business operations, global service delivery, and internal administration

4.2 Service Providers

IT and cloud service providers
Payment processors and financial institutions
Shipping and logistics companies
Art conservators, framers, photographers, and appraisers
Marketing and communications service providers
Security and surveillance providers
Professional advisors (lawyers, accountants, auditors, insurers)

4.3 Legal and Regulatory Authorities

Law enforcement agencies
Regulatory bodies and governmental authorities
Tax authorities
Courts and tribunals
Fraud prevention and credit reference agencies

4.4 Business Transfers

In connection with any merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to successor entities or third parties. You will be notified of any such change via email or prominent notice on our website.

4.5 Other Disclosures

We may also disclose your information:

To establish, exercise, or defend legal claims
To protect our rights, property, or safety, or that of our clients, employees, or the public
With your explicit consent
As otherwise required or permitted by law

5. INTERNATIONAL DATA TRANSFERS

Your personal information may be transferred to, stored, and processed in countries outside your country of residence, including the United States and other jurisdictions where VillageOne Art or our service providers operate. These countries may have data protection laws that differ from those in your country.

When we transfer personal information from the European Economic Area (EEA), United Kingdom, or Switzerland to other countries, we implement appropriate safeguards, including:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions by relevant authorities
Other legally compliant transfer mechanisms

For more information about our international data transfer safeguards, please contact us using the details in Section 13.

6. DATA RETENTION

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods are determined based on:

The nature of our relationship with you
Legal and regulatory requirements (e.g., tax, anti-money laundering, financial records retention laws)
The need to defend or bring legal claims (statute of limitations periods)
Business operational needs

Typical retention periods include:

Transaction records: Minimum 7 years (tax and financial regulations)
KYC/AML documentation: Minimum 5-7 years after relationship ends
Marketing communications: Until you withdraw consent or we determine retention is no longer necessary
CCTV footage: Typically 30-90 days unless required for investigations or legal proceedings

7. DATA SECURITY

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Regular security assessments and audits
Access controls and authentication procedures
Employee training on data protection
Physical security measures at our facilities
Incident response and breach notification procedures

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. You acknowledge and accept this inherent risk when using our services.

8. YOUR PRIVACY RIGHTS

Depending on your location, you may have the following rights regarding your personal information:

8.1 Rights Under GDPR (EEA/UK Residents)

Right of access: Request a copy of your personal information
Right to rectification: Correct inaccurate or incomplete information
Right to erasure (“right to be forgotten”): Request deletion of your information under certain circumstances
Right to restriction: Limit how we use your information
Right to data portability: Receive your information in a structured, machine-readable format
Right to object: Object to processing based on legitimate interests or for direct marketing
Rights related to automated decision-making: Request human review of automated decisions
Right to withdraw consent: Withdraw consent at any time where processing is based on consent

8.2 Rights Under CCPA (California Residents)

Right to know: Request disclosure of categories and specific pieces of personal information collected
Right to delete: Request deletion of your personal information
Right to opt-out: Opt-out of the sale of your personal information (Note: We do not sell personal information)
Right to non-discrimination: Not receive discriminatory treatment for exercising your privacy rights

8.3 Exercising Your Rights

To exercise any of these rights, please contact us using the information in Section 13. We may require verification of your identity before processing your request. We will respond to verified requests within the timeframes required by applicable law (typically 30-45 days).

Please note that certain rights may be limited or unavailable if fulfilling your request would infringe on legal obligations, contractual requirements, or the rights of others.

9. MARKETING COMMUNICATIONS

With your consent (where required by law) or where we have a legitimate interest, we may send you marketing communications about our services, exhibitions, events, and artworks.

You may opt-out of marketing communications at any time by:

Clicking the “unsubscribe” link in our emails
Contacting us at info@villageoneart.com
Updating your communication preferences in your account settings

Please note that even if you opt-out of marketing communications, we may still send you transactional or administrative messages related to your account or purchases.

10. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar tracking technologies to enhance user experience, analyze website traffic, and deliver personalized content.

Types of cookies we use:

Essential cookies: Necessary for website functionality
Performance cookies: Collect information about website usage
Functional cookies: Remember your preferences
Advertising cookies: Deliver relevant advertisements

You can control cookies through your browser settings. However, disabling certain cookies may limit website functionality. For detailed information, please see our Cookie Policy available on our website.

11. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites, plugins, and applications. We are not responsible for the privacy practices or content of these third parties. When you leave our website, we encourage you to read the privacy policy of every website you visit. This Privacy Policy applies only to information collected by VillageOne Art.

12. CHILDREN’S PRIVACY

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us immediately.

13. CONTACT INFORMATION

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

VillageOne Art

150 West 25th Street, #403

New York, NY 10001

United States

Telephone: +1 917 410 6893

Email: info@villageoneart.com

14. CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time. Changes will be effective immediately upon posting on our website. We will update the “Last Updated” date at the top of this policy. For material changes, we may provide additional notice (such as email notification or a prominent website notice). Your continued use of our services after changes are posted constitutes acceptance of the updated Privacy Policy.

15. COMPLAINTS AND SUPERVISORY AUTHORITIES

If you believe we have not handled your personal information properly, please contact us first so we can attempt to resolve your concerns.

You also have the right to lodge a complaint with the relevant data protection supervisory authority:

EEA residents: Your local Data Protection Authority
UK residents: Information Commissioner’s Office (ICO) – www.ico.org.uk
California residents: California Attorney General – oag.ca.gov/privacy

16. LIMITATION OF LIABILITY

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, VILLAGEONE ART SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES RESULTING FROM: (A) YOUR ACCESS TO OR USE OF OR INABILITY TO ACCESS OR USE OUR SERVICES; (B) ANY UNAUTHORIZED ACCESS, USE, OR ALTERATION OF YOUR PERSONAL INFORMATION; (C) ANY DATA BREACH OR SECURITY INCIDENT; OR (D) ANY OTHER MATTER RELATING TO OUR SERVICES OR THIS PRIVACY POLICY.

17. GOVERNING LAW AND JURISDICTION

This Privacy Policy and any disputes arising from or related to it shall be governed by and construed in accordance with the laws of the State of New York, United States, without regard to its conflict of law provisions. You agree to submit to the exclusive jurisdiction of the state and federal courts located in New York County, New York for resolution of any disputes.

18. CALIFORNIA-SPECIFIC DISCLOSURES

For California residents, we provide the following additional information as required by the California Consumer Privacy Act (CCPA):

Categories of Personal Information Collected (Previous 12 Months):

Identifiers (name, address, email, phone, IP address)
Financial information (payment details, transaction history)
Commercial information (purchase history, preferences)
Internet/network activity (browsing history, website interactions)
Geolocation data
Audio/visual information (CCTV footage)
Professional information (for artists)

We do not sell personal information to third parties.

19. DO NOT TRACK SIGNALS

Some web browsers incorporate a “Do Not Track” (DNT) feature. Because there is not yet a common understanding of how to interpret DNT signals, our website does not currently respond to DNT signals. We continue to monitor developments around DNT browser technology.

20. ACKNOWLEDGMENT AND AGREEMENT

BY USING OUR SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND AGREE TO ITS TERMS. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, YOU MUST NOT USE OUR SERVICES.

Last Updated: February 4, 2026