Privacy
Policy

1. Introduction & Data Controller

The Local Art Hub ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, in accordance with Regulation (EU) 2016/679 ("GDPR") and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended).

The data controller for personal data processed through this Platform is The Local Art Hub, reachable at goartconnect@gmail.com. If you do not agree with the terms of this policy, please discontinue use of the Platform.

2. Information We Collect

Information you provide directly:

• Account registration details (name, email address, password)
• Profile information (bio, location, category, portfolio content)
• Booking and transaction information
• Communications between users and with our support team
• Payment information (processed securely through our payment provider — we do not store card details)

Information collected automatically:

• IP address and device information
• Browser type and operating system
• Pages visited and time spent on the Platform
• Referring URLs
• Cookies and similar tracking technologies

3. How We Use Your Information & Legal Basis

Under the GDPR, every processing activity must rest on a legal basis (Art. 6 GDPR). We process your data as follows:

• To create and manage your account — performance of a contract (Art. 6(1)(b))
• To facilitate bookings and transactions between artists and clients — performance of a contract (Art. 6(1)(b))
• To display your artist profile and portfolio to potential clients — performance of a contract (Art. 6(1)(b))
• To send transactional emails (account confirmation, booking notifications) — performance of a contract (Art. 6(1)(b))
• To send marketing communications — your consent (Art. 6(1)(a)), which you may withdraw at any time
• To improve and personalize the Platform experience — legitimate interest (Art. 6(1)(f))
• To detect and prevent fraud and abuse — legitimate interest (Art. 6(1)(f))
• To comply with legal obligations — legal obligation (Art. 6(1)(c))

4. Sharing of Information

We do not sell your personal information. We may share your information in the following circumstances:

• With other users: Artist profile information is publicly visible. Booking details are shared between the relevant artist and client.
• With service providers: We use third-party providers (such as Supabase for authentication and database, and payment processors) who process data on our behalf under strict confidentiality agreements.
• Legal requirements: We may disclose your information if required by law, court order, or to protect the rights and safety of The Local Art Hub or others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

International transfers: Some of our service providers (including Supabase for database/authentication, Cloudinary for media hosting, and Resend for email delivery) may process data outside the European Economic Area. Where this occurs, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision (Art. 44–49 GDPR).

5. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze Platform usage. You can control cookie settings through your browser. Disabling cookies may affect the functionality of the Platform.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a portable format
• Objection: Object to processing of your data for marketing purposes
• Restriction: Request restriction of processing in the cases set out in Art. 18 GDPR
• Withdraw consent: Withdraw consent at any time, without affecting prior processing

To exercise any of these rights, contact us at goartconnect@gmail.com. We will respond within one month, as required by Art. 12 GDPR.

Right to lodge a complaint: If you believe your data has been processed in violation of the GDPR, you have the right to lodge a complaint with your local supervisory authority. In Italy, this is the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).

8. Security

We implement industry-standard security measures to protect your information, including encryption in transit (HTTPS) and secure authentication. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Local Art Hub is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the Platform. Your continued use of the Platform after changes take effect constitutes your acceptance of the revised policy.

11. Contact

For privacy-related questions or requests, contact us at goartconnect@gmail.com.