Privacy policy

Last updated 6 September 2026

This page is an honest interim placeholder, not reviewed legal copy — it describes how things actually work today rather than a lawyer-drafted policy. It will be replaced with a fully reviewed version.

This describes, honestly and in plain language, what data ArtCollect actually collects today. It is not a complete, lawyer-drafted privacy policy (data-protection-law specifics, retention periods, cross-border transfer terms) — that is being written and will replace this page.

What we collect. Name, email, and phone number when you buy a ticket, donate, or apply as an artist or event organiser. Artist applications also collect a national ID or passport number, used only for compliance purposes — it is never shown on any public page.

Payments. We do not see or store your card number or M-Pesa PIN. Card and M-Pesa payments are handled directly by our payment processors (Flutterwave, Safaricom Daraja); we only receive confirmation that a payment succeeded or failed.

Anonymous engagement data. Liking an artwork or viewing an artwork page is tracked anonymously — your IP address and browser are combined and one-way hashed (not stored in readable form) purely to stop the same visitor from liking a piece repeatedly. This isn't used to build a profile of you or shared with anyone.

What we don't do. We don't run third-party analytics or advertising trackers today, and we don't sell personal data to anyone.

Questions or data requests: ndikimuchiri@gmail.com.