PRIVACY NOTICE
This notice explains what personal information FRAMED uses, why it is used, who it can be shared with, how long it can be kept and the rights available to you.
Last updated: 5 October 2026.
For privacy questions, requests about your personal information or data-rights requests, contact FRAMED at support@framedoriginalart.com.
Depending on how you use FRAMED, information can include your name, email address, account settings, profile information, delivery address, optional phone number and delivery instructions, seller information, listings and images, professional-seller business details, support messages, reviews and information you provide when registering an interest in selling.
FRAMED also processes marketplace activity needed to provide the service, such as orders, offers, wishlist activity, followed-artist activity, saved-search activity, swipe activity, purchases, seller activity, cancellation and refund records, delivery and tracking information, notification preferences and account security information.
Technical information can include authentication and security events, device or browser information, request and audit records and necessary browser storage. See the Cookies and Browser Storage page for more information.
Most information comes directly from you when you create or use an account, buy or sell, contact support, submit a review or use discovery features. FRAMED can also receive information from another marketplace participant where it is needed for an order, report, dispute or review.
FRAMED receives payment and payout status, identifiers and risk or transaction information from Stripe. It can also receive technical and security information from the infrastructure and authentication services used to operate the website.
Contract. FRAMED uses information where it is necessary to provide the service you ask for. This includes creating and managing accounts, preparing checkout, processing orders, supporting delivery, operating seller tools, handling cancellations and refunds, sending transactional messages and providing account support.
Legal obligations. Information can be used or retained where this is necessary to comply with applicable tax, accounting, consumer, court, regulatory or other legal requirements.
Legitimate interests. FRAMED uses information where necessary for legitimate interests in keeping the marketplace secure and reliable, preventing and investigating fraud or misuse, enforcing marketplace rules, resolving disputes, maintaining evidence of transactions, improving the service and making discovery more relevant. FRAMED considers these interests against the rights and interests of the people whose information is used.
Consent. FRAMED does not rely on consent for the core account, marketplace or payment processing described above. FRAMED asks for permission before its optional statistical product analytics are enabled in your browser. You can withdraw that permission at any time on the Cookies and Browser Storage page. If FRAMED asks for consent for another optional use, you can withdraw that consent using the relevant control or by contacting support. Withdrawal does not affect processing that was lawful before withdrawal.
FRAMED can use signals such as swipe, wishlist and purchase activity, along with artwork and collection information, to rank or personalise artwork discovery. These recommendation signals are intended to help you find relevant work. They do not by themselves make a decision that has a legal or similarly significant effect on you.
Payment and fraud service providers can carry out their own automated checks under their own privacy information. FRAMED does not use its discovery recommendations to determine whether you are legally allowed to buy, sell or exercise a statutory right.
FRAMED uses Firebase and Google Cloud for application, authentication, database, storage and infrastructure services; Stripe for payments and seller payouts; Resend for transactional and permitted marketing email; Easyship for delivery quotations, shipments and labels where FRAMED Delivery is used; and Algolia for marketplace search. Easyship can receive the contact and address details needed to arrange a shipment. Algolia receives searchable marketplace listing data, rather than payment-card details.
Buyer delivery details are made available to the relevant seller where needed to fulfil an order. Professional-seller business identity and contact details are shown to buyers where needed for the relevant sale. Sellers and buyers do not receive another user's information simply because they use FRAMED.
Information can also be disclosed where reasonably necessary to professional advisers, insurers, courts, regulators, law-enforcement bodies or other parties where disclosure is required by law, needed to establish or defend legal rights, or necessary to protect FRAMED, its users or others from fraud, abuse or security threats.
Some providers used by FRAMED operate internationally, so personal information can be processed outside the United Kingdom or European Economic Area. Where UK or EU data-protection law requires a transfer safeguard, FRAMED uses an applicable mechanism such as an adequacy decision or approved contractual safeguards.
You can contact support for more information about the safeguards relevant to a particular provider or transfer.
FRAMED keeps personal information only for as long as it is reasonably needed for the purpose for which it was collected and for applicable legal, accounting, security, fraud, dispute and record-keeping requirements.
Account deletion currently includes a 30-day recovery period. Generated account-data export files are scheduled for deletion after seven days. Individual product-analytics event records are currently assigned an expiry of up to 400 days so FRAMED can compare marketplace and website performance over time. When you are signed in, those event records can be associated with your account on FRAMED's server; they are not used for advertising. Some order, payment-reference, accounting, fraud, security, cancellation, refund and dispute records can need to be retained after an account is deleted where they remain necessary for those purposes.
Some information is required to create and secure an account or to perform a transaction. For example, a delivery address is needed for a physical order, and seller and payout information is needed to provide seller services. If required information is not provided, FRAMED may be unable to create the account, complete checkout, fulfil the order or enable the relevant seller feature.
Depending on the circumstances and lawful basis, you can have rights to access your personal information, correct inaccurate information, request erasure, request restriction of processing, object to processing and receive or transfer certain information in a portable format. Some rights are subject to legal conditions or exemptions and do not apply to every type of processing.
You can make a rights request by emailing support@framedoriginalart.com. FRAMED may need to verify your identity before acting on a request.
You have the right to object to processing based on legitimate interests. If you object, FRAMED will consider the circumstances and whether there are compelling legitimate grounds to continue the processing or whether it is needed for legal claims.
Logged-in users can request an account-data export from FRAMED account settings. The same area provides the account-deletion process, subject to the recovery period and any records FRAMED must retain lawfully.
You can contact FRAMED first at support@framedoriginalart.com if you have a privacy concern.
You also have the right to complain to the UK Information Commissioner's Office. Information about making a complaint is available at ico.org.uk.
FRAMED can update this notice when the marketplace, its providers or legal requirements change. The date at the top of this page shows when this notice was last updated.