Last updated: 11 September 2026
This explains what HEYATELIER does with your personal data, in plain language.
HEYATELIER is an online directory for artist studios. For privacy questions, email contact@heyatelier.com.
We apply the GDPR standard to everyone who uses HEYATELIER, wherever you live.
When you create an account: your name, email address, password (stored encrypted, we never see it), and the role you choose, artist or collector.
When you build an artist page: everything you put on it. Your bio, statement, CV, discipline and medium, images of you and your work, your links, and the location of your studio, including the address and its coordinates. On a free page only the city and neighbourhood are shown publicly. On a Studio Plan the exact address and map are shown.
When you message someone: the content of the conversation, so that it can be delivered and shown in your inbox.
When you subscribe to the Studio Plan: your payment is handled by Stripe. We receive confirmation that a subscription is active and a record of the transaction. We never see or store your card number.
When you sign up to a mailing list: your email address, which lists you are on, and whether and when you confirmed.
When you use the site: your IP address, browser and device type, the pages you visit and how you got there. Our server also keeps standard access logs.
| What | Why | Legal basis |
|---|---|---|
| Account and profile data | To run your account and show your page | Performance of a contract |
| Studio location | To show you in the right city and neighbourhood, to place you on the map, and to decide which city emails you receive | Performance of a contract |
| Messages | To deliver them and to handle reported abuse | Performance of a contract, and our legitimate interest in a safe platform |
| Payment records | To run your subscription and meet our accounting obligations | Contract, and legal obligation |
| Platform updates and Weekend invitations to account holders | To tell you about the platform you signed up to | Legitimate interest, with an unsubscribe link in every email |
| Newsletters you signed up for yourself | To send what you asked for | Consent |
| Analytics and logs | To see what works, to keep the site secure | Legitimate interest |
If you create an account: we add your email address to our mailing list and use it to send you platform updates and invitations to HEYATELIER Weekends. We never sell or share your address. Every email has an unsubscribe link, and one click removes you from the list.
If you sign up through a form on the site, for example the Weekend waiting list or the collector newsletter, you receive a confirmation email first and you are only added once you click the link in it. You choose which lists you are on and you can change that at any time.
How we decide which city emails you get: if you have a published artist page, we use the coordinates of your studio to work out which city it is near, and put you on that city’s list. This runs automatically once a day. If you move, you move lists. We do not use your location for anything else.
Unsubscribing stops the marketing and the invitations. It does not stop the messages you need in order to use your account, such as a notification that a collector has written to you, a password reset or a payment receipt.
Our mailing list lives in our own WordPress database, hosted by Hostinger, and is sent through Hostinger’s mail service. If we move to another sending service we will update this page.
Other users. Your artist page is public and indexed by search engines. Whatever you put on it is visible to anyone. Your email address and password are never shown to other users.
Service providers who process data for us:
They may only use your data to provide their service to us.
Anyone else only if we have to, for example because the law requires it, or to protect the rights and safety of our users.
We do not sell personal data. We do not share it for advertising.
Stripe, Google and Amazon may process data outside the European Economic Area, including in the United States. Where that happens it is covered by the European Commission’s standard contractual clauses or by an adequacy decision such as the EU-US Data Privacy Framework.
You can ask us to:
Email contact@heyatelier.com and we will respond within one month. Much of it you can also do yourself: edit your profile, change your email preferences through the link in any of our emails, or delete your account from your account settings.
If you think we are handling your data wrongly, you can also complain to the data protection authority in the country where you live.
We use cookies that are necessary to make the site work, for example to keep you logged in and to remember your display settings.
We also use Google Analytics to understand how the site is used, and Google reCAPTCHA on the login and registration form to keep out bots. Both set cookies.
You can clear or block cookies in your browser. Blocking the necessary ones will stop parts of the site from working.
HEYATELIER is not for people under 18. We do not knowingly collect data from children. If you believe a child has created an account, email contact@heyatelier.com and we will remove it.
Your password is stored encrypted. The site runs over HTTPS. Payment data never touches our servers. No system is perfect, so if something goes wrong that puts your data at risk, we will tell you and the authorities as the law requires.
We may update this page. The date at the top shows when. If a change materially affects how we use your data, we will tell registered users by email.
contact@heyatelier.com
New ateliers, open studios, and where to buy art directly from artists.
© HEYATELIER, 2026 All rights reserved.