Privacy notice
Last updated: February 2026.
This privacy notice describes how Coll Fine Arts Ltd looks after personal data and explains your privacy rights. It is written to be read rather than scrolled past.
About us
We are Coll Fine Arts Ltd, registered in England and Wales with company number 08155971 at Third Floor, 104-108 Oxford Street, London, W1D 1LP. If you want to talk to someone about data protection, [email protected] reaches us.
Categories of data
- Identity and contact data — what you tell us so we can reply: name, organisation, email address, telephone number.
- Communications data — the emails, letters and call notes that make up our dealings with you.
- Technical data — server logs recorded by our host as a by-product of serving the page.
We operate no accounts, process no payments here, and do not knowingly gather special category data.
Our lawful bases
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and the correspondence that follows | Legitimate interests — answering someone who has contacted us |
| Negotiating, entering into and performing a contract | Performance of a contract, or steps taken at your request before one |
| Keeping records of transactions, appointments and correspondence | Legitimate interests — running the business and defending legal claims |
| Accounting, tax and statutory filing obligations | Legal obligation |
| Optional website analytics, if ever enabled | Consent, given through the cookie banner and withdrawable at any time |
Sharing
Your data is not sold, rented or shared for anyone else's marketing. Where our accountants, solicitors, web host or email provider need it to do their job for us, they receive it under contract and may use it only for that purpose. Legal obligations aside, that is the complete list.
Where it is held, and for how long
Data is held in the United Kingdom or the European Economic Area. Where a provider processes data elsewhere we rely on the safeguards permitted by UK data protection law.
Enquiries that lead nowhere are kept for up to two years. Contract and transaction records are kept for twelve years after completion, reflecting the limitation period for obligations executed as a deed. Accounting records are kept at least six years under the Companies Act 2006. Server logs are held briefly by our host and then overwritten.
Your rights
You have the right to be told what we hold, to receive a copy of it, to have it corrected, and — in defined circumstances — to have it erased, to restrict or object to how we use it, and to have it transferred. Where we rely on consent, you may withdraw it at any time; that does not affect anything done beforehand.
To exercise any of these, email [email protected]. We reply within one month, and there is no charge unless a request is manifestly unfounded or excessive.
Complaints
Please raise any concern with us first so we have the chance to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes
We revise this notice from time to time. The date at the top shows when it last changed.