Patroniks Ltd – Privacy Policy

Last updated: 26/01/2026

1. Introduction

   This Privacy Policy explains how Patroniks Ltd ("Patroniks", "we", "us", "our") collects, uses, stores, and protects your personal data when you use our online platform connecting artists with patrons.

   We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

   By using Patroniks, you agree to the practices described in this Privacy Policy.

2. Data We Collect

   We collect the following categories of personal data:

   1. Information You Provide

      • Name
      • Email address
      • Postal address (for purchases and shipping)
      • Profile information
      • Uploaded content (artwork, images, descriptions)
      • Payment details (processed securely by Stripe and Klarna – we do not store full card details)

   2. Automatically Collected Data

      • IP address
      • Device information
      • Browser type
      • Usage data
      • Cookies and similar technologies
      • Analytics data via Google Analytics

   3. No Direct Messaging

      Patroniks does not provide or store private messaging between users.

3. How We Use Your Data

   We use your personal data for the following purposes:

   1. Platform Functionality

      • Creating and managing user accounts
      • Enabling artists to upload and sell artwork
      • Processing payments and subscriptions
      • Delivering purchased items
      • Providing customer support

   2. Marketing (Opt-In Only)

      If you opt in during sign-up, we may send:

      • newsletters
      • promotional updates
      • artist highlights
      • platform announcements

      You may unsubscribe at any time.

   3. Analytics & Improvement

      • Monitoring platform performance
      • Understanding user behaviour
      • Improving features and security

   4. Legal & Compliance

      • Fraud prevention
      • Regulatory compliance
      • Enforcement of Terms & Conditions

4. Legal Basis for Processing

   We process your data under the following legal bases:

   • Contractual necessity – to provide the platform and process transactions
   • Legitimate interests – analytics, security, platform improvement
   • Consent – marketing communications
   • Legal obligation – tax, accounting, fraud prevention

5. Cookies

   We use cookies to:

   • enable core functionality
   • remember preferences
   • analyse usage
   • improve performance

   You can manage cookie preferences through your browser settings.

6. Sharing Your Data

   We share data only with trusted third-party providers necessary to operate the platform.

   1. Payment Processors

      • Stripe
      • Klarna

   2. Analytics & Hosting

      • Google Analytics
      • Amazon Web Services (AWS)

   3. Legal Requirements

      We may disclose data if required by law or to protect our rights. We do not sell personal data to third parties.

7. International Data Transfers

   Because we use AWS and other global service providers, your data may be stored or processed outside the UK.

   We ensure all transfers comply with UK GDPR through:

   • adequacy decisions
   • Standard Contractual Clauses (SCCs)
   • equivalent safeguards

8. Data Retention

   We retain personal data only for as long as necessary for:

   • providing the platform
   • fulfilling legal, accounting, and tax obligations
   • resolving disputes
   • enforcing agreements

   When data is no longer required, it is securely deleted or anonymised.

9. Your Rights

   Under UK GDPR, you have the right to:

   • access your data
   • correct inaccurate data
   • delete your data ("right to be forgotten")
   • restrict processing
   • object to processing
   • withdraw consent (for marketing)
   • request data portability

   To exercise your rights, contact: support@patroniks.com

   To request account and associated data deletion, use: Request account deletion

10. Security

    We use industry-standard security measures to protect your data, including:

    • encrypted connections (HTTPS)
    • secure AWS infrastructure
    • restricted access controls
    • regular monitoring and audits

    However, no online platform can guarantee absolute security.

11. Children's Privacy

    Patroniks is intended for users aged 13 and over.

    We do not knowingly collect data from children under 13.

12. Changes to This Policy

    We may update this Privacy Policy from time to time. Continued use of the platform indicates acceptance of the updated policy.

13. Contact Us

    For privacy questions or data requests: support@patroniks.com