Privacy Policy
Last Modified: November 5, 2026
1. Introduction
ARK Art Foundation (“the Foundation,” “we,” “us,” or “our”) respects the privacy of individuals who visit our website, participate in our programs and activities, communicate with us, make donations, or otherwise interact with the Foundation.
This Privacy Policy explains how we collect, receive, use, maintain, disclose, and protect personal information through our website, https://arkartfoundation.org (the “Site”), and in connection with our institutional activities.
The Foundation’s activities may include exhibitions, educational programs, research, publications, artist archives, cultural projects, fundraising, events, and related nonprofit operations.
This Policy applies to information collected through the Site and through other interactions with the Foundation where this Policy is made available or referenced. It does not necessarily apply to information collected independently by third-party websites, platforms, or service providers, which are governed by their own privacy policies.
By using the Site or voluntarily providing information to the Foundation, you acknowledge the practices described in this Policy, subject to any rights or choices available to you under applicable law.
2. Information We Collect
The types of information we collect depend on how you interact with the Foundation. Information may include:
2.1 Information You Provide Directly
You may voluntarily provide personal information when you:
- Submit a contact form or communicate with us by email;
- Subscribe to newsletters, announcements, or other communications;
- Register for exhibitions, events, programs, or activities;
- Make a donation or other payment;
- Submit an inquiry, application, proposal, or other material;
- Participate in surveys, educational activities, or institutional projects; or
- Otherwise communicate or interact with the Foundation.
Depending on the circumstances, this information may include your name, email address, telephone number, mailing address, organization or professional affiliation, registration details, donation information, and the content of messages or submissions.
Please do not provide sensitive personal information unless it is specifically requested and necessary for a particular activity.
2.2 Donation and Payment Information
When you make a donation or payment through the Site, you may be asked to provide information such as your name, email address, billing or mailing address, donation amount, and transaction-related details.
Payments may be processed by independent third-party payment service providers. The Foundation generally receives transaction records and information necessary for donation administration, acknowledgment, accounting, and legal compliance.
Complete payment card numbers and security codes are generally handled by the applicable payment service provider rather than stored directly by the Foundation. The handling of payment information by those providers is subject to their own privacy and security practices.
2.3 Technical and Usage Information
When you visit the Site, certain technical information may be collected automatically by the Site, its hosting environment, or third-party technologies used in connection with it.
Depending on the configuration of the Site and the services in use, this information may include:
- Internet Protocol (IP) address;
- Browser type and version;
- Device type and operating system;
- General device and connection information;
- Pages viewed and referring or exit pages;
- Date, time, and duration of visits;
- General geographic information derived from technical data;
- Cookie identifiers and similar online identifiers; and
- Other diagnostic, performance, and security-related information.
Some technical information may be considered personal information under applicable privacy laws, even when it does not directly identify an individual.
2.4 Information Related to Institutional Activities
In connection with exhibitions, research, publications, artist archives, educational programs, and other institutional activities, the Foundation may receive or maintain information such as names, professional biographies, correspondence, submitted materials, event records, photographs, video recordings, and other documentation.
Such information may relate to artists, authors, researchers, curators, collaborators, donors, participants, or other individuals.
The Foundation will handle personal information in these materials in accordance with applicable law and the purpose for which the information was collected or received.
3. How We Collect Information
The Foundation may collect or receive information through several channels, including:
- Direct submissions through website forms;
- Email correspondence and other communications;
- Newsletter or mailing-list subscriptions;
- Event, exhibition, and program registration;
- Donations and payment transactions;
- Materials voluntarily submitted by artists, authors, researchers, collaborators, or participants;
- Publicly available sources, where appropriate for legitimate institutional purposes;
- Website hosting, security, and technical infrastructure; and
- Cookies and other technologies used by the Site or its service providers.
We may also receive information from third-party organizations or service providers when they assist with activities conducted on behalf of the Foundation, subject to applicable law and the arrangements governing those services.
4. How We Use Information
The Foundation may use personal information for legitimate institutional, administrative, operational, and legal purposes, including:
4.1 Communications
- Responding to inquiries and requests;
- Sending newsletters, announcements, and institutional updates where appropriate;
- Providing information about exhibitions, programs, events, publications, and activities;
- Managing correspondence and maintaining communication records.
4.2 Donations and Financial Administration
- Processing and acknowledging donations;
- Maintaining donation and transaction records;
- Issuing receipts or acknowledgments where applicable;
- Managing fundraising activities;
- Meeting accounting, reporting, and legal obligations.
4.3 Programs and Institutional Activities
- Administering event registrations and participation;
- Organizing exhibitions, educational programs, and cultural projects;
- Managing submissions, applications, and collaborations;
- Maintaining relevant institutional, research, and archival records;
- Preparing publications, reports, and documentation.
4.4 Website Operation and Improvement
- Operating and maintaining the Site;
- Supporting website functionality and accessibility;
- Understanding general website performance and usage;
- Diagnosing technical problems;
- Improving content, navigation, and user experience;
- Maintaining the security and integrity of the Site.
4.5 Security, Compliance, and Legal Matters
- Detecting and preventing fraud, misuse, or unauthorized access;
- Protecting the rights, property, and safety of the Foundation and others;
- Establishing, exercising, or defending legal claims;
- Complying with applicable laws, regulations, and lawful requests.
The Foundation will not use personal information for purposes materially incompatible with the purposes described in this Policy without providing additional notice or obtaining consent where required by applicable law.
5. Legal Basis for Processing
Where applicable privacy laws require a legal basis for processing personal information, the Foundation may rely on one or more of the following:
- Consent: Where an individual has voluntarily agreed to a specific use of personal information.
- Performance of a Contract or Requested Service: Where processing is necessary to fulfill a registration, transaction, donation-related request, or other arrangement.
- Legitimate Interests: Where processing is reasonably necessary for the Foundation’s institutional administration, communications, website operation, security, research, or nonprofit activities, provided that such interests do not override applicable individual rights.
- Legal Obligations: Where processing is necessary to comply with applicable laws, regulations, accounting requirements, or lawful requests.
- Other Permitted Grounds: Where another legal basis is available under the privacy laws applicable to the individual or the relevant processing activity.
The applicable legal basis will depend on the nature of the information and the circumstances in which it is collected and used.
6. How We Share Information
The Foundation does not sell personal information in exchange for monetary consideration.
We may share personal information in limited circumstances, including:
6.1 Service Providers
We may disclose information to third-party service providers that support the Foundation’s operations, such as providers of:
- Website hosting and technical infrastructure;
- Cloud storage, data management, and content delivery;
- Email communications and mailing-list management;
- Payment processing and donation administration;
- Event registration and program management;
- Website analytics and performance measurement;
- Security, maintenance, and technical support;
- Video, image, and other digital content services.
These providers may process information on behalf of the Foundation or in connection with services they independently provide. Their handling of information may also be governed by their own privacy policies and contractual arrangements.
Where appropriate and as required by applicable law, the Foundation seeks to use reasonable contractual, organizational, and technical safeguards when engaging service providers.
6.2 Institutional Collaborators and Project Partners
In connection with exhibitions, programs, publications, research, fundraising, and collaborative projects, the Foundation may share relevant information with participating institutions, artists, project partners, or other organizations where reasonably necessary for the activity concerned.
The Foundation will seek to limit such sharing to information relevant to the applicable purpose and will provide notice or obtain consent where required by law.
6.3 Legal and Regulatory Requirements
We may disclose information where reasonably necessary to:
- Comply with applicable laws, regulations, or legal processes;
- Respond to lawful requests from public authorities;
- Protect the rights, property, or safety of the Foundation or others;
- Investigate suspected fraud, security incidents, or unlawful activity; or
- Establish, exercise, or defend legal claims.
6.4 Organizational Changes
If the Foundation undergoes a restructuring, merger, transfer of operations, or other institutional transaction, relevant information may be transferred or disclosed as part of that process, subject to applicable legal requirements and appropriate safeguards.
7. Data Retention
The Foundation retains personal information only for as long as reasonably necessary for the purposes described in this Policy, including institutional administration, communications, donations, accounting, legal compliance, security, and the maintenance of relevant records.
Retention periods may vary depending on:
- The nature and sensitivity of the information;
- The purpose for which it was collected;
- The duration of the relevant relationship or activity;
- Applicable legal, financial, and reporting requirements;
- The need to preserve records relating to disputes or legal claims; and
- Legitimate institutional and archival responsibilities.
Certain records, including donation records, financial documents, institutional correspondence, and historical or archival materials, may be retained for longer periods where appropriate or legally required.
When personal information is no longer reasonably necessary, the Foundation may delete it, anonymize it, or securely dispose of it, subject to applicable legal obligations and legitimate recordkeeping requirements.
8. Cookies and Tracking Technologies
The Site may use cookies and similar technologies to support its operation, improve functionality, understand website usage, maintain security, and enhance the user experience.
These technologies may include:
- Cookies;
- Pixels and web beacons;
- Local storage technologies;
- Session identifiers;
- Analytics and performance measurement tools; and
- Other comparable technologies used by websites and digital services.
Such technologies may be provided directly by the Foundation or by third-party service providers.
Depending on the Site’s configuration and institutional needs, these services may include tools provided by Google or other comparable technology providers, including services used for website analytics, functionality, security, embedded content, or performance measurement. These examples are illustrative and do not mean that every listed service is necessarily active at any given time.
Cookies and similar technologies may collect technical information such as browser characteristics, device information, IP addresses, online identifiers, pages visited, and interaction data.
Some cookies may be necessary for the operation or security of the Site. Others may support functionality, analytics, or additional services.
Where required by applicable law, the Foundation will provide appropriate notice and obtain consent before using non-essential cookies or similar tracking technologies. Where available, users may also manage cookie preferences through their browser settings or through cookie preference tools provided on the Site.
Disabling certain cookies may affect the availability or functionality of some features.
9. Third-Party Services and External Resources
The Foundation may use or integrate third-party services and digital resources to support its website, programs, communications, and institutional activities.
Depending on the Site’s configuration and future operational needs, these services may include:
- Website hosting and infrastructure providers;
- Cloud computing, storage, and backup services;
- Content delivery networks;
- Website analytics and performance tools;
- Search and indexing services;
- Mapping and location-related services;
- Translation and language tools;
- Fonts and typography services;
- Email and communication platforms;
- Donation and payment processing services;
- Event registration and management platforms;
- Video, image, and multimedia hosting services;
- Social media platforms and embedded content;
- Security, fraud prevention, and technical support services; and
- Other comparable digital tools and service providers.
Examples may include services offered by Google and other established technology providers. The inclusion of any provider or service category in this Policy is illustrative and does not necessarily indicate that the Foundation currently uses that specific service.
When users interact with third-party content, embedded features, external links, or services integrated into the Site, those third parties may collect information directly from users or through their own technologies.
The Foundation does not control the independent privacy practices of third-party providers. Users should review the applicable privacy policies and terms of those providers when interacting with their services.
10. Data Security
The Foundation takes reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse.
Depending on the nature of the information and the systems involved, these measures may include:
- Access controls and appropriate restrictions on information access;
- Use of reputable hosting and service providers;
- Secure website connections and encryption technologies where available;
- Reasonable account and system security practices;
- Periodic review of relevant operational procedures; and
- Appropriate safeguards when working with third-party service providers.
No method of electronic transmission, storage, or processing can be guaranteed to be completely secure. Accordingly, the Foundation cannot guarantee absolute security of information transmitted to or stored through the Site.
Users are encouraged to exercise appropriate care when submitting personal information online.
11. Your Privacy Rights
Depending on your location and the privacy laws applicable to you, you may have certain rights regarding your personal information.
These rights may include:
- The right to request access to personal information held about you;
- The right to request correction of inaccurate or incomplete information;
- The right to request deletion of personal information, subject to applicable exceptions;
- The right to withdraw consent where processing is based on consent;
- The right to object to or request restriction of certain processing activities;
- The right to request a copy of certain information in a portable format, where applicable;
- The right to opt out of certain types of data sharing or targeted advertising, where applicable; and
- The right not to be unlawfully discriminated against for exercising privacy rights.
The availability and scope of these rights depend on applicable law and the circumstances of the relevant processing.
To submit a privacy-related request, please contact:
Email: privacy@arkartfoundation.org
Please provide sufficient information for the Foundation to understand and respond to your request. We may need to verify your identity or authority before taking action.
The Foundation will respond within the time period required by applicable law. Certain information may be retained where necessary to comply with legal obligations, maintain legitimate institutional records, protect rights, or establish, exercise, or defend legal claims.
If you are located in a jurisdiction that provides additional privacy rights, those rights will apply to the extent required by the relevant law.
12. International Data Transfers
The Foundation and its service providers may operate in, or use infrastructure located in, different countries. As a result, personal information may be transferred to or processed in countries other than the country in which it was originally collected.
Privacy and data protection laws in those countries may differ from those in your place of residence.
Where applicable law requires safeguards for international transfers, the Foundation will take appropriate measures, which may include relying on an adequacy decision, contractual safeguards such as Standard Contractual Clauses, or another legally recognized transfer mechanism.
Further information about relevant safeguards may be requested by contacting the Foundation at privacy@arkartfoundation.org.
13. Children's Privacy
The Site and the Foundation’s general online services are not directed toward children under the age of 13, and the Foundation does not knowingly collect personal information online from children under 13 without appropriate authorization where required by applicable law.
Certain educational, artistic, or cultural programs may involve minors. In those circumstances, the Foundation may collect limited information necessary for participation, administration, safety, documentation, or communication, subject to applicable law and appropriate parental or guardian authorization where required.
If the Foundation becomes aware that it has collected personal information from a child in circumstances where such collection was not permitted, it will take reasonable steps to address the information appropriately.
Parents or legal guardians who believe that a child has provided personal information to the Foundation may contact privacy@arkartfoundation.org.
14. Third-Party Websites
The Site may contain links to external websites, platforms, publications, social media services, or other online resources operated by third parties.
These links are provided for informational, educational, institutional, or other legitimate purposes. Their inclusion does not necessarily constitute an endorsement of the third party or its privacy practices.
The Foundation is not responsible for the content, security, or privacy practices of external websites or services that it does not operate or control.
When leaving the Site, users should review the privacy policy and terms applicable to the external website or service.
15. Updates to This Privacy Policy
The Foundation may revise this Privacy Policy from time to time to reflect changes in its institutional activities, website functionality, information practices, technology, service providers, or applicable legal requirements.
This Policy is intended to describe the Foundation’s general privacy practices in a manner that can accommodate reasonable changes in technology and service providers without requiring a revision for every routine operational change.
However, where a material change affects the types of personal information collected, the purposes for which it is used, the manner in which it is shared, or the rights available to individuals, the Foundation will provide appropriate notice or take other steps required by applicable law.
The revised Policy will be published on the Site with an updated “Last Modified” date.
Users are encouraged to review this page periodically to remain informed about the Foundation’s privacy practices.
16. Contact Information
If you have questions, concerns, or requests relating to this Privacy Policy or the Foundation’s handling of personal information, please contact:
ARK Art Foundation
Website:
https://arkartfoundation.org
Privacy Inquiries:
privacy@arkartfoundation.org
General Legal Inquiries:
legal@arkartfoundation.org
- The Foundation will make reasonable efforts to review and respond to privacy-related inquiries in accordance with applicable law.
