London Art Exchange Ltd
Privacy Policy
Last
Updated: 21 January
2026
London
Art Exchange Ltd (“LAX”, “we”, “us”, “our”) is committed to protecting your
privacy and safeguarding your personal information. This Privacy Policy
explains how we collect, use, store, share, and protect personal data when you
interact with our gallery, websites (thelax.art, lax.art),
digital platforms, auctions, and services.
By
using our Services, purchasing artwork, consigning artwork, or registering for
auctions, you acknowledge and agree to the practices described in this Privacy
Policy.
1. Scope of This Policy
This
Policy applies to:
- Gallery and private
sale clients
- Auction platform users
- Website visitors
- Consignors and third-party sellers
- Corporate clients and representatives
- Suppliers and professional counterparties
It
covers all personal data processed by LAX in the course of its operations.
2. Information We Collect
We
may collect and process the following categories of personal data:
2.1 Gallery & Private Sale Clients
- Name, postal address,
email address, telephone number
- Billing and payment information
- Transaction and purchase history
- Preferences regarding delivery, storage,
and communication
2.2 Auction Platform Users
- Identity verification
documentation (e.g., passport, driving licence, proof of address)
- Payment card or bank details
- Bidding activity, lots bid on, and lots
won
- Delivery, storage, and communication
preferences
2.3 Automatically Collected Information
- IP address, browser
type, device identifiers
- Website usage data, cookies, and tracking
technologies
- Security and fraud-prevention logs
2.4 Corporate & Business Contacts
- Business contact
details of representatives, directors, and authorised signatories
- Communication records and contractual
documentation
3. How We Use Your Information
We
use personal data for the following purposes:
- To facilitate gallery
sales, private sales, and auction transactions
- To process payments and issue invoices
- To arrange delivery, collection, and
storage of artworks
- To communicate transaction updates,
invoices, and contractual documentation
- To manage accounts, registrations, and
platform access
- To conduct identity verification and
compliance checks
- To improve, maintain, and secure our
Services
- To send marketing communications where
consent has been provided
4. Legal Basis for Processing
We
process personal data under the following lawful bases:
4.1 Contractual Necessity
Where
processing is required to perform a contract or take steps prior to entering a
contract.
4.2 Legal Obligation
Where
required to comply with applicable laws and regulatory obligations.
4.3 Legitimate Interests
To
operate our business, prevent fraud, secure our platforms, and manage client
relationships.
4.4 Consent
For
marketing communications and optional data processing, which may be withdrawn
at any time.
5. Sharing of Personal Data
We
may share personal data only where necessary with:
- Payment processors and
financial institutions
- Identity verification and compliance
service providers
- Couriers, logistics providers, and
storage facilities
- Email and CRM platforms
- Professional advisers (legal, accounting,
insurance)
- Regulatory or governmental authorities
where required
6. International Data Transfers
Where
personal data is transferred outside the UK or EEA, we ensure appropriate
safeguards are in place, including contractual protections and recognised
transfer mechanisms.
7. Data Retention
We
retain personal data only for as long as necessary:
- Transaction and
identity records: minimum 5 years or longer where legally required
- Marketing data: until consent is
withdrawn
- Account data: until deletion is
requested, subject to legal obligations
8. Security Measures
We
implement appropriate technical and organisational measures to protect personal
data, including:
- Encryption of data in
transit (SSL/TLS)
- Secure payment processing through PCI-DSS
compliant providers
- Restricted access to sensitive data
- Monitoring for unauthorised access,
fraud, and misuse
9. Your Rights
Under
UK GDPR and data protection law, you have the right to:
- Access your personal
data
- Correct inaccurate or incomplete data
- Request deletion of your data (subject to
legal requirements)
- Restrict or object to processing
- Withdraw consent for marketing
communications
- Request data portability
Requests
should be submitted to privacy@thelax.art.
10. Cookies & Tracking Technologies
We
use cookies and similar technologies to:
- Enhance user experience
- Analyse website usage
- Support security and marketing
You
can control cookie settings via your browser or our cookie management tools.
11. Children’s Data
Our
Services are not intended for individuals under the age of 18. We do not
knowingly collect or process data from minors.
12. Automated Decision-Making
LAX
does not engage in automated decision-making that produces legal or similarly
significant effects on individuals.
13. Changes to This Policy
We
may update this Privacy Policy from time to time. Updates will be published on
our website and take effect immediately upon publication.
14. Contact Information
London
Art Exchange Ltd
13 Soho Square
London, W1D 3QF
United Kingdom
Email: privacy@thelax.art
This
Privacy Policy does not create contractual rights beyond those required by
applicable data protection law and is provided for transparency and
informational purposes only.


