Privacy Policy

Archive of the Extraordinary ("we", "us", "our") is committed to protecting the privacy of every collector, maker, and visitor who uses our marketplace. This policy explains what data we collect, why we collect it, and the controls you have over your information.

We built this platform on a principle of transparency — the same transparency we demand from the makers who list on it. Your data is never sold, never used to manipulate, and always under your control.

We collect only the information necessary to operate the marketplace:

• Account data: your name, email address, and password (encrypted) when you register.
• Vendor data: maker name, biography, profile image, and subscription details if you sell on the platform.
• Order data: shipping address, contact details, and purchase history when you buy or sell pieces.
• Payment data: processed securely by our payment provider (Base44 Payments). We never store full card numbers on our servers.
• Usage data: anonymised analytics about how you browse the archive, used to improve the experience.

Your information is used solely to:

• Process orders and deliver pieces to your shipping address.
• Pay makers for their sold work and manage subscription billing.
• Communicate about your orders, account, and marketplace updates.
• Provide customer support and resolve disputes.
• Improve the archive's design, search, and recommendation features.
• Comply with legal and tax obligations.

We do not sell your personal data to third parties, use it for targeted advertising, or share it with partners for their own marketing purposes.

We share data only when necessary to fulfil a transaction or meet a legal obligation:

• Makers receive your shipping address and contact details when you purchase their piece, so they can fulfil your order.
• Our payment provider receives payment information to process transactions securely.
• Shipping carriers receive address details to deliver your order.
• Legal authorities only if compelled by valid legal process.

We retain your account data for as long as your account is active. If you close your account, we remove your personal data within 30 days, except where we are legally required to retain records (such as tax and transaction records, typically kept for 6 years).

Vendors may request deletion of their maker profile and listings at any time from their dashboard. Anonymised order data may be retained for analytics purposes.

Under the UK GDPR and EU GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and associated data (subject to legal retention requirements).
• Restrict or object to certain processing of your data.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent for any processing based on consent.

To exercise any of these rights, contact us at privacy@archive.co.

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and secure payment processing through Base44 Payments. Access to personal data is restricted to authorised personnel who need it to operate the platform.

No system is perfectly secure. If we become aware of a data breach affecting your information, we will notify you and the relevant authorities within 72 hours, as required by law.

The archive is intended for adults. We do not knowingly collect data from anyone under 16. If you believe a minor has provided us with personal data, please contact us and we will delete it.

We may update this policy from time to time. Material changes will be communicated via email to registered users and posted on this page with an updated date. Continued use of the platform after changes take effect constitutes acceptance of the revised policy.

Questions about your privacy or this policy? We're here to help.