Privacy policy

Who is responsible

[Company name] ([Organisation number]), [Address], Sweden, is the controller of your personal data. Contact us at hello@claimaframe.com.

Visitors

To count visitors, your browser stores a random ID in local storage. We save that ID with the date, at most once per day, and show totals like “this week”. The “here now” count uses a live connection that shares only that random ID. For each work on the wall we also count, with the same ID, how many visitors looked at it, opened its label and clicked its link. Owners only see totals. We do not use advertising or tracking cookies. The ID is not linked to your name, and daily records are deleted after 13 months.

Our hosting provider receives your IP address and browser details when you load the site, to deliver it and keep it secure.

Early access list

If you join the early list, we save your email address, whether you are a brand, an artist or just curious, and the page you came from. We use it only to tell you when the gallery opens. The legal basis is your consent. You can ask us to remove you at any time, and we delete the list 12 months after launch.

Bidders

When you bid, we collect:

• your email address, name or company name, and website;
• the image, title and label text you upload, and how you framed it;
• your bid amounts and the time your work hangs;
• a customer and payment reference from Stripe. Stripe handles your card; we never see the full number.

We use this to review your bid, show your work, charge you for the time it hangs, send receipts and outbid emails, and keep accounting records. The legal basis is our contract with you, and for accounting records our legal obligation.

What is public

When your work hangs, your name or company, website, image, title and label text are public in the gallery. Your email address is never shown.

Who we share data with

• Vercel (website hosting)
• Supabase (database and image storage, in the EU)
• Stripe (payments)
• Resend (email delivery)

Some of these companies may process data outside the EU. When they do, they use the EU standard contractual clauses or another legal transfer mechanism.

How long we keep it

We keep bid and payment records for 7 years, as Swedish accounting law requires. Images of bids that never went up are deleted after 90 days. You can ask us to delete other data earlier.

Your rights

You can ask to see, correct, move or delete your data, or object to how we use it. Email us to do so. You can also complain to the Swedish Authority for Privacy Protection (IMY) at imy.se.