Data Protection Policy
1. Introduction
This Data Protection Policy outlines how Suture Zone ("the Website," "we," "us," "our") collects, uses, stores, and protects personal data provided by users and artists submitting artwork globally, but primarily from Canada, the United States, and the United Kingdom. This policy complies with applicable data protection laws, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), the European Union’s General Data Protection Regulation (GDPR) (as applicable to UK users via UK-GDPR), and relevant U.S. regulations.
2. Definitions
Personal Data: Any information that can be used to identify an individual, directly or indirectly, such as name, email, IP address, and submitted content.
User: Any individual visiting or interacting with the Website, including artists submitting their work.
3. Collection of Personal Data
We may collect the following types of personal data:
Contact information (name, email address, phone number, mailing address)
Submission content (artworks, descriptions, artist biographies)
Technical data (IP address, device information, browser type, cookies)
Communication details (messages sent via the website, support requests)
4. Purpose of Data Collection
Personal data is collected for the following purposes:
To facilitate art submissions and participation in exhibitions.
To communicate with users/artists regarding submissions, exhibitions, or related queries.
To display submitted artwork in accordance with user permission.
To analyze and improve Website performance and user experience.
To comply with legal obligations and prevent misuse or fraud.
5. Legal Basis for Processing
We process personal data based on:
User consent: Artists must consent to submission and publication of their artwork/data.
Contractual necessity: Data is processed to provide services related to art exhibition.
Legitimate interests: For website improvement, fraud prevention, and internal analysis.
Legal obligations: As required by applicable laws and regulations.
6. Data Storage and Security
All personal data is stored securely on servers located in Canada or in jurisdictions with adequate data protection as recognized by Canadian or UK authorities.
We employ industry-standard encryption, access controls, and security practices to protect data from unauthorized access, disclosure, alteration, or destruction.
Regular reviews and updates of security protocols are undertaken.
7. International Data Transfers
Personal data may be transferred to and processed in countries outside of the user's jurisdiction. When transferring data internationally (for instance, between Canada, the USA, and the UK), we ensure appropriate safeguards such as:
Standard contractual clauses as recognized by GDPR/UK-GDPR.
Adequacy decisions (if applicable).
Compliance with PIPEDA, GDPR, and other relevant laws.
8. Retention of Data
Personal data is retained only as long as necessary to fulfill the purposes stated, or as required by law.
Artwork and artist information may be preserved for archival and exhibition purposes, as agreed upon with the artist.
Users may request deletion of their data, subject to legal and contractual constraints.
9. User Rights
Depending on the user's jurisdiction, data subjects may have rights to:
Access their personal data and receive information on processing.
Rectify inaccurate or incomplete data.
Request erasure ("right to be forgotten").
Restrict or object to certain processing.
Withdraw consent at any time.
Request data portability.
Requests can be submitted via our Contact form.
10. Cookies and Tracking
The Website uses cookies and similar technologies to enhance user experience and analyze traffic. Users are informed about cookie use and, where required by law, asked for consent.
11. Third-Party Services
Third-party service providers (e.g., hosting, analytics, payment), may have access to personal data solely for performing services on our behalf under strict confidentiality agreements and data protection obligations.
12. Children’s Privacy
The Website is not intended for individuals under the age of 16 (or as specified by applicable law). If we become aware that personal data from a child has been collected without proper parental/guardian consent, we will take appropriate steps to delete it.
13. Policy Updates
We reserve the right to update this Data Protection Policy from time to time. Material changes will be notified to users via the Website or by email where appropriate.
14. Contact Information
Questions or concerns regarding this policy or data processing can be directed to:
Data Protection Officer
Suture Zone
jakiwi@suture.zone