Who we are
“We”, “us” and “our” mean May Fine Art London Ltd (Company No. 16769715), 12 Old Bond Street, London W1S 4PW, United Kingdom. We are the data controller for the personal data described in this policy. Contact: hello@mayfineart.com.

Who this policy covers
“You” and “your” mean any individual who visits mayfineart.com, makes an enquiry, becomes a client contact, or otherwise interacts with us.

What we collect

  • Identity & contact data — name, job title, company, email, phone, postal address.
  • Project/commission data — briefs, palette/material preferences, site access information.
  • Transaction data — invoices, payments, bank remittance details, VAT status (if applicable).
  • Communications & preferences — enquiries, notes of meetings, marketing preferences.
  • Technical/usage data — IP address, device/browser type, pages viewed, cookie preferences (see Cookie Policy).

How we collect it

  • Directly from you (forms, email, phone, in person).
  • Automatically through cookies/consent tools (limited to essential cookies unless you enable optional ones).
  • From third parties (project partners, publicly available business contact details).

How we use your data & legal bases

  • To respond to enquiries and deliver services (including sourcing/commissions): contract.
  • To manage billing, records and client communications: contract/legitimate interests.
  • To carry out checks required by law (e.g., anti-money laundering on transactions ≥ €10,000, sanctions screening): legal obligation/legitimate interests.
  • To maintain and improve our website (security, performance, analytics if enabled): legitimate interests / consent (for optional analytics).
  • To send updates or invitations if you opt in: consent (you can withdraw at any time).

Sharing your data

We share data only as needed with: our website host, email/IT providers, couriers/installation partners, artists/suppliers for project fulfilment, professional advisers (e.g., accountants), and authorities where required (e.g., HMRC, law enforcement, OFSI/NCA in compliance scenarios). We do not sell your personal data.

International transfers

If personal data is transferred outside the UK/EEA, we use appropriate safeguards (e.g., the UK IDTA or Addendum to the EU SCCs) to ensure equivalent protection.

How long we keep your data

  • Enquiries/quotes: up to 12 months if no project proceeds.
  • Client/project files: 6 years after the end of our relationship.
  • AML/CDD records: 5 years after the transaction or end of the business relationship (unless law requires longer).
    After these periods, data is deleted or anonymised.

Your rights

You have the right to access, correct, delete, restrict or object to certain processing, and to data portability. Where we rely on consent, you may withdraw it at any time. To exercise your rights, email hello@mayfineart.com.

If you are not satisfied with our response, you can complain to the UK Information Commissioner’s Office (ICO): ico.org.uk.

Cookies & similar technologies

We use essential cookies to make our site work. Optional analytics cookies are used only if you enable them. You can change your preferences at any time via Cookie settings in the site footer. See our Cookie Policy for details, including how we honour Global Privacy Control (GPC) signals as a refusal of optional cookies.

Children

Our site and services are not intended for children under 16.

Changes to this policy 

We may update this policy from time to time. Please check back for changes.

Last updated: 22 Oct 2025