Effective Date: 3 August, 2025

This Privacy Notice explains how Polynest Art LTD handles your personal data when you use https://polynest.art (the “Platform”). Our goal is to give you a clear understanding of what information we collect, how we use it, and the rights available to you. If you do not agree with the practices described here, you should stop using the Platform.

1. Who We Are

Polynest Art LTD is the organization that decides how and why your personal data is processed.

• Registration number: 16678747
• Address: 50 Princes street, Ipswich, England, IP1 1RJ
• Contact: [email protected]

2. What We Collect

Depending on how you use the Platform, we may collect:

• Basic account details – login credentials, profile information, user activity.
• Identity and verification data – name, identification documents, KYC/AML information.
• Contact details – email address, phone number, mailing address.
• Transactions – purchase records, account balances, payment confirmations.
• Payment details – card or bank information, subject to security measures.
• Content you share – files, media, and other uploads.
• Technical data – IP address, browser, operating system, device settings.
• Communications – customer support requests, chats, and emails.
• Marketing preferences – opt-ins, campaign interactions.
• Support and compliance records – complaints, resolutions, and legal requirements.
• Security and surveillance – access logs and CCTV at our offices.

3. Why We Use Your Data

We only process personal data where there is a valid legal basis. Typical purposes include:

• Operating and improving the Platform.
• Creating and managing user accounts.
• Verifying identities and preventing misuse.
• Processing orders, payments, and refunds.
• Meeting legal and regulatory requirements.
• Responding to support requests.
• Protecting system security and preventing fraud.
• Carrying out risk management and audits.
• Marketing activities with your consent.
• Handling disputes and enforcing agreements.

4. Sources of Data

We obtain data in three main ways:

1. Directly from you when you register, make purchases, or contact us.
2. Automatically when you use the Platform, including through cookies and analytics tools.
3. From third parties such as payment providers, business partners, or regulators.

5. Sharing Information

Your information may be disclosed to:

• Service providers that support payments, hosting, analytics, and communications.
• Business partners involved in delivering services to you.
• Public authorities where disclosure is required by law.

All recipients are required to apply appropriate security measures and comply with data protection obligations.

6. International Data Transfers

We may transfer your personal data outside of the United Kingdom and the European Economic Area (EEA). When we do so, we ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection laws. These safeguards may include:

• Adequacy decisions issued by the European Commission or the UK Government, where the destination country has been officially recognised as providing an adequate level of data protection;

• Standard Contractual Clauses (SCCs) approved by the European Commission, or the International Data Transfer Agreement (IDTA) approved by the UK Information Commissioner’s Office, where adequacy decisions are not available.

These mechanisms are designed to ensure that your personal data remains protected and that your rights and freedoms are safeguarded when your information is transferred internationally.

7. Your Rights

You have control over your personal data. Depending on the circumstances, you may:

• Request access to your data.
• Ask us to correct inaccurate information.
• Request deletion of certain records.
• Restrict or object to particular uses.
• Request data portability to another provider.
• Withdraw consent where processing is based on consent.

To exercise your rights, email [email protected]. We may require proof of identity.

8. Security Practices

We implement safeguards including:

• Encryption of data during transfer.
• Restricted access for authorized staff only.
• Ongoing monitoring and security testing.

You also play a role by keeping your login credentials secure, enabling two-factor authentication, and being alert to suspicious messages.

9. Retention Periods

Data is not kept indefinitely. Retention depends on context:

• Operational data is retained for as long as your account is active.
• Financial and compliance data may be stored up to 5 years to satisfy legal obligations.
• Records relevant to legal claims may be kept for up to 10 years.

When retention ends, data is securely deleted or anonymized.

10. Automated Processing

We do not make decisions about you that have legal or similarly significant effects based solely on automated processes. Limited profiling may be used to personalize your experience.

11. Complaints

If you have concerns about how we handle your personal data, we encourage you to contact us first. You may also lodge a complaint with the Information Commissioner’s Office (ICO) in the United Kingdom, or with your local data protection supervisory authority.

12. Updates to This Notice

We may revise this Privacy Notice from time to time to reflect changes in laws, technology, or business operations. Updates will be published on this page, and the date at the top will show when it was last modified.

13. Contact

Questions, requests, or concerns regarding this Privacy Notice can be directed to: [email protected]