Privacy Policy

Wallerist ("we", "us") is a platform that matches artists and venues and enables collectors to discover and purchase art. For data protection law, we are the data controller for the personal data described below.

Account & identity data

• Name, email address (for login, contact, and account communications).
• Password (stored as a hash via our authentication provider).

Profile & content

• Artist portfolios (images, titles, descriptions, dimensions).
• Venue profiles (wall dimensions, lighting, location details you choose to share).

Transactional & operational data

• Placement approvals, shipping/installation windows, and logistics status.
• Order details and communication history related to purchases or placements.

Communications

• Messages you send us (e.g., via the contact form or email).
• Newsletter sign-ups: we store your email in our "newsletter" collection.

Device & usage data

• Log data (IP address, browser type, device identifiers, pages viewed, timestamps).
• Cookies and similar technologies (see Section 5) for session management and analytics.

Optional location information

If you choose to share a venue location or allow geolocation features, we may process coarse location to improve matching and discovery. You can disable this in your browser/device.

We process personal data under one or more of the following legal bases: performance of a contract, legitimate interests, consent, and legal obligations.

• Provide the Service (match artists & walls; coordinate logistics; manage accounts; process orders). Legal basis: contract.
• Improve the platform (analytics, troubleshooting, product development). Legal basis: legitimate interests, with privacy safeguards.
• Security & fraud prevention (detect abuse, protect accounts). Legal basis: legitimate interests / legal obligation.
• Communications (service emails, operational updates). Legal basis: contract / legitimate interests.
• Marketing (e.g., newsletter) with your opt-in consent. You can unsubscribe anytime. Legal basis: consent.
• Compliance (tax, accounting, legal claims). Legal basis: legal obligation.

We share data with service providers (processors) who help us operate the Service—e.g., hosting, authentication, databases, analytics, shipping/installation logistics, and payment processing. They process data under our instructions and appropriate contracts.

We also use Firebase (Google) for authentication and Firestore for certain records (including our newsletter collection). Where needed, we may work with carriers and installers to deliver and install artworks.

We may disclose data if required by law, to protect the rights and safety of users and the Service, or in connection with a corporate transaction (e.g., merger or acquisition), subject to applicable law.

We use essential cookies for secure sign-in and session continuity, and (where enabled) optional analytics cookies to understand usage. You can control cookies through your browser settings and, where available, our cookie banner preferences.

• Essential: authentication/session cookies (cannot be switched off).
• Analytics (optional): usage measurement to improve features.

We keep personal data only as long as necessary for the purposes described here, including complying with legal, accounting, or reporting requirements. Order records may be retained to meet legal obligations, while newsletter emails are kept until you unsubscribe or we remove inactive contacts.

Our providers may process data in countries outside your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect your data in those transfers.

We use administrative, technical, and organizational measures to protect personal data, including encrypted transport (HTTPS), role-based access, and least-privilege practices. No system is 100% secure; please use a strong, unique password and keep your account details confidential.

Depending on your location, you may have rights to access, correct, delete, or port your data, and to object to or restrict certain processing. Where we process data based on consent, you can withdraw that consent at any time.

The Service is intended for individuals who have reached the minimum age required in their jurisdiction to create an online account and enter into agreements. We do not knowingly collect personal data from individuals below that minimum age. If you believe such data has been provided, please contact us so we can take appropriate action.

We may update this policy to reflect changes in our practices or for legal, technical, or business reasons. We'll update the "Last updated" date and, where appropriate, notify you through the Service or by email.

Questions about this policy or your personal data? Email olivier@wallerist.com or visit our contact page.

If you submit a request, we may need to verify your identity before we can act on it.