Privacy Policy

1. Who we are

Artwork Bank (i-art.com.au and its subdomains, the “Platform”) is operated by I-FRAMER Pty Ltd. This policy explains how we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. What we collect

• Account information — name, email address, password (stored as a secure hash), and business details for Sellers.
• Order information — buyer name, email, shipping address, and details of the artworks purchased.
• Payment information — handled by Stripe. We do not store credit card numbers; we receive only transaction identifiers and payment status from Stripe.
• Technical information — IP address, browser type, and usage data collected through cookies and server logs for security and performance.

3. How we use it

• Operating the marketplace — accounts, listings, and orders
• Processing payments and paying out Sellers through Stripe
• Sending transactional emails — order confirmations, shipping updates, and account notices
• Preventing fraud and securing the Platform
• Complying with legal obligations

We do not sell personal information, and we do not use it for third-party advertising.

4. Sharing

We share personal information only with:

• Sellers — when you buy an artwork, the Seller receives your name, contact details, and shipping address so they can fulfil your order.
• Service providers — Stripe (payments), our hosting and database providers, and our email delivery provider. Some providers may store data outside Australia (for example, in the United States); we take reasonable steps to ensure they handle it consistently with Australian privacy law.
• Authorities — where required by law.

5. Cookies

We use a session cookie to keep you signed in. It is essential to the operation of the Platform. We do not use third-party advertising or tracking cookies.

6. Security

Personal information is stored in encrypted databases hosted in Australia where practicable, transmitted over HTTPS, and accessible only to authorised personnel. Payment card details never touch our servers — they are handled entirely by Stripe.

7. Retention

We keep account and order records for as long as needed to operate the Platform and meet legal obligations (such as tax record keeping), then delete or de-identify them.

8. Access and correction

You can access and update most of your information from your account settings. You may also contact us to request access to, correction of, or deletion of your personal information. We will respond within a reasonable time.

9. Complaints

If you believe we have mishandled your personal information, contact us first and we will investigate. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

10. Changes

We may update this policy from time to time. The latest version will always be available on this page with its effective date.