Privacy notice

mostrale is made by ArtNav UK (“mostrale”, “we”). This notice explains what personal data we handle on this website, mostrale.com, and on the mostrale platform, and what you can do about it.

This website

mostrale.com sets no cookies, runs no analytics and loads no third-party trackers or advertising. Our hosting provider keeps standard server logs (such as IP address, time and page requested) for security and troubleshooting.

When you write to us

If you use the contact form, we receive the topic, your name, email address, organisation (if given) and message, and we send them to our inbox by email. We use your IP address briefly to limit abuse of the form; it is not stored with your message. We use what you send only to reply to you and to follow up on your enquiry, and we delete it when you ask us to.

The mostrale platform

Each fair runs its own deployment of mostrale, under the fair’s name and domain. For the personal data in a fair’s portal and viewing room (exhibitor accounts, applications, forms, orders, passes, enquiries and purchases), the fair organiser decides why and how it is used, and mostrale processes it on the organiser’s behalf. The organiser’s own privacy notice applies to that data, and requests about it are best sent to the organiser first. We will help them answer.

On the platform we handle:

• Accounts: name, email address and a password stored only as a one-way hash. Admins also enrol an authenticator app for two-step sign-in.
• Sign-in: a session cookie that keeps you signed in. The platform uses cookies only for this.
• What galleries and fair teams enter: organisation profiles, form submissions, files, orders, passes, artworks and viewing rooms.
• Collectors: saved works, shortlists, enquiries to galleries and purchase records, when those features are on.
• Payments: card payments go through Stripe. Card numbers are entered on Stripe and never reach mostrale.
• Audit records: when staff act on a gallery’s behalf, we record who did what and when.
• Email: account, invitation and status emails needed to use the platform. mostrale sends no marketing email.

Who else handles it

• DigitalOcean: hosting and databases
• Supabase: sign-in and file storage
• Resend: sending email
• Stripe: card payments, when a fair uses online payments

A fair may also connect its own tools, such as a CRM or a reporting dashboard; its own terms then apply to that data. We do not sell personal data and we do not show advertising.

How long we keep it

Platform data is kept for as long as the fair’s agreement with us runs, or until the organiser deletes it. Stored email bodies are cleared 30 days after delivery; the delivery record is kept. Website enquiries are kept as long as needed to deal with them.

Your rights

Depending on where you live, laws such as the GDPR, the UK GDPR and the CCPA give you rights to access, correct, delete or receive a copy of your personal data, to object to some uses of it, and to complain to a data protection authority. To use them, write to hello@mostrale.com.

Changes

We will post any material change on this page, with a new date, before it takes effect.