Legal
Privacy policy
Last updated 22 August 2026
This explains what Cherished Canvas does with your personal data, in plain English. We have tried to keep it short and specific rather than long and defensive — if anything here is unclear, ask us and we will fix the wording.
Cherished Canvas is currently a UK-focused service. This policy is written to the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).
Who is responsible for your data
The data controller is Lapstre Ventures, a sole trader based in the United Kingdom, trading as Cherished Canvas, at [postal address — to be completed].
Data-protection enquiries: [email protected]. ICO registration number: [ICO registration — to be completed].
What we collect, and why
Only what the thing you are doing actually needs:
- If you create an account: your email address, and — if you sign in with Google — the account identifier Google gives us, so you stay signed in to the same account even if you change your email. We also keep your preferred language, currency and notification settings.
- If you set up a saved search: its name, search terms, postcode, radius, maximum price and score threshold, so we can run it and alert you.
- As you use the site: which paintings you view, click, save and give “more like this” / “less like this” feedback on. This is what makes recommendations improve; without it every visitor sees the same list.
- When you click through to a marketplace: which listing, when, and your account if you are signed in — so any commission is attributed correctly and we can tell which finds are actually useful.
- If you contact us or use the support chat: your email address, your message, and the conversation.
- If you join the waitlist or the dealer list: your email address and your answers to the short survey.
- If you turn on browser notifications: the push address your browser issues and which browser it is, so alerts reach the right device.
- If you accept the analytics cookie: anonymous usage events — pages seen, features used — tied to a random browser id, not to your name.
We do not buy personal data, we do not sell it, and we do not use it for advertising or profiling beyond recommending paintings inside this service.
Our lawful bases
- Performance of a contract — running your account, your saved searches, the alerts you asked for, and the collections you save.
- Consent — the analytics cookie and the usage events that go with it. You can refuse, or change your mind later, without losing any feature.
- Legitimate interests — keeping the service secure, preventing abuse, attributing referral commission, and understanding in aggregate which finds are useful so the scoring gets better. We have weighed these against your interests; none of them involve sharing your data for others' marketing.
- Legal obligation — keeping the records tax and accounting law requires, once there is anything to keep.
Cookies and browser storage
We use as few as we can. Everything below is first-party — no advertising networks, no cross-site trackers, no fingerprinting. Only the analytics use of ps_anon needs your consent; the rest are needed to make the site work or to remember a choice you made yourself.
| Name | What it does | Basis | Expires |
|---|---|---|---|
ps_consent | Remembers whether you accepted or refused the analytics cookie, so we stop asking. | Strictly necessary | 6 months |
ps_anon | A random id with no name or email attached. Keeps the paintings you save tied to this browser when you are not signed in, and — only if you accepted — lets us count visits and see which pages are useful. | Strictly necessary when you save a painting; consent for the analytics use | 1 year |
ps_saved | Marks that this browser has saved paintings, so refusing analytics does not wipe your collection. | Strictly necessary | 1 year |
currency | Remembers the currency you picked from the switcher. | Strictly necessary (a preference you set yourself) | 1 year |
cc_oauth_nonce | Security check during Google sign-in, so a sign-in cannot be forged. Deleted as soon as you are signed in. | Strictly necessary | 10 minutes |
cc_session_token | Keeps you signed in between visits. Held in your browser’s local storage rather than a cookie, so it is never sent with ordinary page requests. | Strictly necessary | Until you sign out |
To change your answer, delete the ps_consent cookie in your browser settings and the choice will be offered again on your next visit.
Who else sees your data
We use a small number of service providers to run the site. They process data on our instructions and cannot use it for their own purposes.
| Provider | What for | Where |
|---|---|---|
| Railway | Hosting and the database that everything above is stored in. | United States |
| Resend | Sends sign-in links and the daily digest. | United States |
| Google (Sign-In) | Verifies your identity if you sign in with Google. We request your email address and basic profile only. | United States |
| Google (Gemini) | Analyses painting listings, and answers your questions in the support chat. Chat messages you type are sent to Gemini to produce a reply. | United States |
| Umami Cloud | Counts page views. Cookieless — it stores nothing on your device and does not build a profile of you. | European Union |
| eBay | The marketplace the listings come from. Clicking through to a listing takes you to eBay under their own privacy policy. | United States |
Wired into the service but not currently switched on. We will update this page before any of them starts processing your data:
- Stripe — Payments. Not in use — everything is free at the moment.
- Linear — Support-ticket tracking, if enabled. Tickets are stored in our own database either way.
- Google Analytics 4 — Aggregate usage reporting from our server. Not currently enabled.
- Pinterest — Only if you choose to connect a Pinterest account. Not currently enabled.
- Catawiki — A second marketplace. Not currently enabled.
- Trustpilot — Review invitations. Not currently enabled.
We may also disclose data if the law requires it, or to establish or defend legal claims.
Transfers outside the UK
Several of the providers above are based in the United States. Those transfers rely on the UK extension to the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the UK International Data Transfer Addendum to the European Commission's standard contractual clauses. You can ask us for details of the safeguards for any specific provider.
How long we keep it
- Account and saved searches — until you delete your account, or after two years of complete inactivity.
- Viewing and saving history — 24 months.
- Usage events — 24 months.
- Referral clicks — 24 months, for commission reconciliation.
- Support tickets and chat — 24 months after the conversation closes.
- Waitlist and dealer entries — until you ask us to remove them, or 12 months after launch.
When you ask us to delete your account we remove your personal data and detach anything we must keep for accounting from your identity.
Your rights
Under UK GDPR you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything inaccurate;
- delete your data;
- restrict or object to how we use it, including profiling for recommendations;
- send your data to another service in a portable format;
- withdraw consent for analytics at any time, which does not affect what was collected beforehand.
Email [email protected] or use the contact form. We reply within one month. There is no charge unless a request is clearly excessive.
Every marketing email has a one-click unsubscribe link, which takes effect immediately.
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Security
Data is held in a managed database that is not exposed to the public internet, reached over encrypted connections. Sign-in links and session tokens are cryptographically signed and expire. Access is limited to the people who need it to run the service. No system is perfectly secure, but if a breach ever affects your rights we will tell you and the ICO as the law requires.
Children
Cherished Canvas is meant for adults buying art and is not directed at children. We do not knowingly collect data from anyone under 13. If you believe a child has given us their details, contact us and we will delete them.
Changes to this policy
If we change how we use your data, we will update this page and the date at the top, and — where the change is significant — tell you directly before it takes effect.