IRIS Art Tech respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, join our mailing list, make an enquiry or booking, purchase a service, apply to take part in a project, participate in our creative work, or otherwise interact with us.
IRIS Art Tech is operated by Fitumi Ltd, trading as IRIS Art Tech.
For the purposes of UK data protection law, Fitumi Ltd is the data controller.
Contact: hello@irisarttech.co.uk
1. Information we collect
Depending on how you interact with us, we may collect:
- your name, email address, telephone number and organisation;
- information you provide when making an enquiry or booking;
- information relating to purchases, invoices and payments;
- mailing list preferences;
- information submitted through project applications, expressions of interest or feedback forms;
- photographs, video, audio recordings, interviews, written testimony or other material created or supplied as part of a project;
- emails, messages and other correspondence;
- technical information such as IP address, browser type, device information and website activity; and
- feedback and evaluation information.
Some projects may involve information classed as sensitive or “special category” personal data under UK data protection law, such as information relating to health, ethnicity, religion or sexual orientation.
Where this applies, we will explain why the information is being collected and how it will be used through the relevant project information, participant agreement or consent process.
2. How we use your information
We may use your information to:
- respond to enquiries;
- arrange meetings, consultations and bookings;
- provide photography, artistic, creative and consultancy services;
- process payments and invoices;
- manage client relationships and contracts;
- administer applications and participation in projects;
- communicate with participants and collaborators;
- create, document, evaluate and present creative projects;
- collect feedback and evaluate our work;
- send newsletters and updates where you have chosen to receive them;
- operate and improve our website;
- maintain appropriate business and financial records;
- protect the security of our website and services; and
- comply with legal or regulatory requirements.
3. Lawful bases for processing
Under UK data protection law, we must have a lawful basis for using personal information.
Depending on the circumstances, we may rely on:
Contract
Where we need your information to provide a service, manage a booking or fulfil an agreement with you.
Consent
Where you have specifically agreed to a particular use of your information, such as joining our mailing list or participating in certain aspects of a creative project.
Legitimate interests
Where using the information is reasonably necessary to operate and develop IRIS Art Tech, provided those interests do not override your rights and interests.
Legal obligation
Where we need to retain or process information to comply with the law.
Where we rely on consent, you may withdraw that consent at any time.
4. Mailing list and marketing
If you choose to join our mailing list, we may send you information about projects, exhibitions, opportunities, services, workshops and other IRIS Art Tech updates.
Our mailing list is currently managed using Mailchimp.
Where you complete another form, such as a project application, enquiry or feedback form, joining the mailing list is optional and treated separately from submitting the form.
You can unsubscribe at any time using the unsubscribe link in our emails or by contacting hello@irisarttech.co.uk.
Unsubscribing from marketing will not prevent us from contacting you where necessary regarding an existing booking, project, contract or enquiry.
5. Forms, enquiries and project applications
We may use Typeform or similar services to collect enquiries, feedback and applications to participate in our projects.
Information submitted through these forms will be used for the purpose explained when the information is collected.
This may include:
- responding to your enquiry;
- reviewing an application;
- administering participation in a project;
- collecting feedback; or
- evaluating a project.
6. Bookings and appointments
We may use Cal.com or similar scheduling services to allow you to arrange meetings, consultations, photography sessions or other appointments.
When making a booking, you may be asked to provide information such as your name, email address and details relating to your appointment.
We use this information to arrange and administer your booking.
7. Payments
Payments may be processed through Stripe or another secure payment provider.
Payment providers may collect payment-card and billing information directly from you.
IRIS Art Tech does not normally receive or store your full card details.
We may retain transaction information, invoices and related records where required for accounting, tax, contractual or legal purposes.
8. Photography, film, audio and creative projects
Some IRIS Art Tech projects involve photography, moving image, augmented reality, sound, interviews, testimony or other creative material.
Where you participate in a project, we will explain how your contribution may be:
- recorded;
- edited;
- exhibited;
- published;
- displayed online;
- incorporated into augmented-reality experiences;
- used in project communications or documentation; or
- archived.
Where appropriate, we will provide a separate participant agreement, consent form, release or project-specific privacy information.
These project-specific terms may provide more detailed information than this general website Privacy Policy.
10. International transfers
Some of our service providers may process or store personal information outside the United Kingdom.
Where this happens, we take reasonable steps to ensure appropriate safeguards are in place in accordance with UK data protection law.
11. How long we keep information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, contractual or reporting requirements.
Retention periods depend on the type of information.
For example:
Enquiries: generally retained for up to two years after our last meaningful contact unless an ongoing relationship develops.
Client and booking records: retained for the duration of the relationship and afterwards where reasonably necessary for legal, contractual or business purposes.
Financial records: retained for the period required under applicable accounting and tax law.
Mailing-list information: retained until you unsubscribe, withdraw consent or the information is no longer required.
Project applications: unsuccessful applications will normally be deleted or anonymised after the project and an appropriate follow-up period unless you have agreed that we may retain your information for future opportunities.
Creative project material: retention will depend on the nature of the project, participant agreements, exhibition or publication requirements, funding requirements and any agreed archival arrangements.
12. Cookies
Our website may use cookies and similar technologies to operate correctly and understand how visitors use the website.
Some cookies are necessary for the website to function.
Where required by law, non-essential cookies, including certain analytics or tracking cookies, will only be used after you have given permission.
You will be able to manage relevant choices through our cookie banner or cookie settings.
We may also provide a separate Cookie Policy containing more detailed information about the cookies used on the website.
13. Third-party links and embedded content
Our website may contain links to external websites or embedded content from third-party services.
These services may collect information independently and operate according to their own privacy policies.
We are not responsible for the privacy practices of external websites or services.
14. How we protect your information
We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.
Where third-party platforms are used, we aim to use established providers with appropriate security and data-protection arrangements.
15. Your rights
Under UK data protection law, you may have the right to:
- request access to information we hold about you;
- ask us to correct inaccurate information;
- ask us to delete your information in certain circumstances;
- ask us to restrict how your information is used;
- object to certain uses of your information;
- request certain information in a portable format; and
- withdraw consent where processing is based on consent.
These rights are not absolute and may depend on the circumstances.
To exercise your rights, contact:
We may need to verify your identity before responding to a request.
16. Complaints
If you have concerns about how we use your personal information, please contact us first at:
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator responsible for data protection.
17. Children and young people
Our general website and commercial services are not specifically aimed at children.
Some artistic, educational or community projects may involve children or young people.
Where this happens, additional privacy, consent, parental or guardian permission and safeguarding arrangements may apply and will be explained separately for that project.
18. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to our services, website, technology or legal obligations.
The latest version will be published on this website with the updated date shown at the top.