Legal
Privacy Policy
Effective date: 18 June 2026
At I'Arte Rinasce, the trust of our clients and collectors is foundational to everything we do. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.
1. Who We Are
I'Arte Rinasce is an art conservation atelier, auction house, and collector advisory practice operating from Auckland, New Zealand, with clients and collaborators across India, the Pacific, and internationally. We are the data controller for personal information collected through this website. You may contact us at [email protected] or by post to I'Arte Rinasce, Avondale, Auckland, New Zealand.
2. Information We Collect
We collect personal information only when you voluntarily provide it or when it is generated by your use of this website. This includes: (a) Contact and enquiry data — your name, email address, telephone number, and the content of any message you submit through our contact or enquiry forms; (b) Conservation and collection data — details about artworks, condition, provenance, or collection circumstances that you share when engaging our services; (c) Usage data — anonymised information about how you navigate this website, including pages visited, time on site, and device type, collected via Google Analytics 4 with IP anonymisation enabled; (d) Communications — records of correspondence between you and I'Arte Rinasce by email or through the website.
3. How We Use Your Information
We use the personal information we collect for the following purposes: to respond to your enquiries and provide the services you have requested; to prepare conservation assessments, treatment proposals, and condition reports; to send service-related communications, including updates on active conservation projects; to improve the performance and content of this website using anonymised analytics data; to comply with our legal obligations under New Zealand law, Indian law where applicable, and applicable international regulations. We do not use your personal information for automated decision-making or profiling.
4. Legal Basis for Processing
For visitors from the European Economic Area or the United Kingdom, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR): Consent — for the use of analytics cookies and any optional marketing communications, which you may withdraw at any time; Contract — where processing is necessary to perform a service agreement with you; Legitimate interests — for responding to enquiries and improving our services, where those interests are not overridden by your rights; Legal obligation — where processing is required by applicable law. For visitors from India, we process personal data in accordance with the Digital Personal Data Protection Act 2023 (DPDP Act). For all users, we comply with the New Zealand Privacy Act 2020.
6. Sharing Your Information
We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances: with trusted service providers who assist us in operating this website or delivering our services (such as email hosting and cloud storage providers), under strict confidentiality obligations; with professional advisors such as lawyers or accountants, where necessary and under confidentiality; with law enforcement or regulatory authorities, where required by law or to protect the rights, property, or safety of I'Arte Rinasce, our clients, or others. All third-party service providers are required to handle your data in accordance with applicable privacy law and our instructions.
7. International Data Transfers
I'Arte Rinasce operates across New Zealand and India, and our service providers may be located in other countries. Where personal data is transferred outside your country of residence, we take steps to ensure it receives an equivalent level of protection, including through contractual safeguards. If you are located in the EEA or UK and your data is transferred to a country without an adequacy decision, we rely on standard contractual clauses approved by the relevant supervisory authority.
8. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Enquiry and contact records are retained for up to three years from the date of last contact. Conservation project records — including condition reports, treatment documentation, and correspondence — are retained for a minimum of ten years in accordance with professional conservation standards and potential legal requirements. Anonymised analytics data is retained in accordance with Google Analytics default retention settings (up to 14 months). You may request deletion of your personal data at any time, subject to any overriding legal obligations.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal information: the right to access the personal data we hold about you; the right to correct inaccurate or incomplete data; the right to request deletion of your data (the "right to be forgotten"), subject to legal retention obligations; the right to restrict or object to certain processing; the right to data portability (where processing is based on consent or contract); the right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal; the right to lodge a complaint with your local data protection authority. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
10. Security
We take the security of your personal information seriously. This website is served over HTTPS with strict transport security headers. Access to personal data is restricted to authorised personnel only. We use industry-standard security measures to protect data in transit and at rest. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.
11. Children
This website is not directed at children under the age of 16, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at [email protected] and we will take steps to delete it.
12. Third-Party Links
This website may contain links to third-party websites, including auction platforms, institutional partners, and editorial references. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of this website after any update constitutes acceptance of the revised policy.
14. Contact & Complaints
If you have any questions, concerns, or complaints about how we handle your personal information, please contact our privacy contact at [email protected]. If you are located in New Zealand, you may also contact the Office of the Privacy Commissioner at www.privacy.org.nz. If you are located in the EEA or UK, you have the right to lodge a complaint with your local data protection supervisory authority. If you are located in India, you may contact the Data Protection Board of India once established under the DPDP Act 2023.
I'Arte Rinasce · Avondale, Auckland, New Zealand · [email protected]