London Art Exchange (LAX) – Privacy Policy
Last Updated: 17/09/2025
This Privacy Policy explains how London Art Exchange Limited ("LAX", "we", "us", "our") collects, uses, and protects your personal information when you interact with our gallery, website (thelax.art and lax.art), and auction services. By visiting our website, purchasing artwork, or registering for auctions, you agree to this Privacy Policy.
1. Information We Collect
We collect personal information in the following ways:
From Gallery/Retail Clients:
- Name, address, email, phone number.
- Payment details for transactions.
- Purchase history.
From Auction Users:
- Identity documents (photo ID, proof of address) for KYC/AML checks.
- Payment card or bank details.
- Bidding history, bids placed, and items won.
- Preferences regarding delivery, storage, and marketing.
Automatically (All Users):
- Device and browser information.
- Cookies and tracking data for analytics, fraud prevention, and marketing.
2. How We Use Your Information
We process your data to:
- Fulfil purchases, consignments, and auction transactions.
- Verify identity and comply with Anti-Money Laundering (AML) regulations.
- Process payments securely.
- Arrange delivery, collection, or storage.
- Send transactional emails (e.g. outbid alerts, payment reminders, invoices).
- Communicate marketing offers (if you’ve opted in).
- Improve and secure our services.
4. Legal Basis for Processing
- Contractual necessity – to provide services and fulfil purchases.
- Legal obligation – to comply with UK AML, tax, and consumer laws.
- Legitimate interests – to secure our platform, prevent fraud, and grow our business.
- Consent – for marketing communications (you can withdraw at any time).
5. Data Retention
- Identity and transaction records: kept for minimum 5 years (legal requirement).
- Marketing data: retained until you unsubscribe.
- General account data: deleted upon verified request, unless retention is required by law.
6. Security
- All payment data is processed using PCI-DSS compliant providers.
- Data is encrypted in transit (SSL/TLS).
- Access to sensitive information is restricted to authorised staff only.
- We monitor for fraud and abuse across our services.
7. Your Rights
Under GDPR and UK data laws, you have the right to:
- Access the personal data we hold about you.
- Correct inaccuracies.
- Request erasure (where legally possible).
- Restrict or object to processing.
- Withdraw marketing consent.
- Data portability (transfer of your information).
Requests can be made by contacting us at privacy@thelax.art.
9. International Transfers
If we transfer your data outside the UK/EEA, we ensure it is protected by appropriate safeguards (such as UK-approved Standard Contractual Clauses).
10. Children
We do not knowingly collect or process personal data from anyone under 18.
11. Updates to this Policy
We may update this Privacy Policy periodically. Updates will be published on our website and are effective immediately.
12. Contact Us
London Art Exchange Limited13 Soho Square, London, W1D 3QF
Email: privacy@thelax.art
Note: This web page summarises our privacy practices. Where applicable, our Terms and Conditions and Cookie Policy provide additional details. If anything appears unclear, please contact us using the details above.