Privacy Policy

Introduction

EPIFANI (“we”, “us”, or “our”) operates a community-powered art events platform. We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform.

Information We Collect

Account Information

When you register for an account, we collect:

• Name
• Email address
• Password (encrypted)
• Account type (artist, curator, gallery owner, or art enthusiast)

Event Information

When you create or interact with events, we collect:

• Event details (title, description, dates, location)
• Images uploaded
• Your interactions with events (views, saves)

Publicly Available Information

We aggregate publicly available art event information from gallery and museum websites through automated daily web crawling. This information includes event titles, dates, locations, and descriptions that are publicly accessible. We maintain a temporary cache of this information for up to 24 hours, after which it is refreshed or removed.

If you are a gallery, museum, or venue and wish to opt-out or have your information removed from our platform, please contact us using the details at the bottom of this page.

Technical Information

We automatically collect:

• IP address
• Browser type and version
• Device information
• Usage data and analytics

How We Use Your Information

We use your personal data for the following purposes:

• To provide and maintain our platform services
• To manage your account and authentication
• To display and promote art events
• To communicate with you about your account and updates
• To improve our platform and develop new features
• To ensure platform security and prevent fraud
• To comply with legal obligations

Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Contract: Processing necessary to provide our services to you
• Consent: Where you have given clear consent for specific purposes
• Legitimate Interests: To improve our platform and prevent fraud
• Legal Obligation: To comply with applicable laws

Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Regular security assessments
• Access controls and monitoring

Your data is stored on secure servers and we retain it only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

Your Rights

Under UK GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at hey@epifani.now

Third-Party Services

We use the following third-party services:

• AWS (cloud hosting and database)
• Mapbox (map services)
• Authentication providers

These services have their own privacy policies and we ensure they comply with UK GDPR standards.

International Data Transfers

Your data may be transferred to and processed in countries outside the UK. We ensure appropriate safeguards are in place through standard contractual clauses or adequacy decisions approved by the UK government.

Cookies

We use cookies and similar technologies to improve your experience. For detailed information, please see our Cookie Policy.

Children's Privacy

Our platform is not intended for children under 16. We do not knowingly collect personal data from children under 16. If we become aware of such collection, we will take steps to delete the information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):