The Atomic Gallery / Information

Privacy notice.

What TAG currently handles, why it is needed and the decisions still to be completed before launch.

Pre-launch draft · Public contact details and final launch review remain pending. Checkout is test-only.

Who handles your information

TAG / The Atomic Gallery is a trading name of Annexura Ltd, company number 04879239. Registered office: 1 Stewart Close, Southampton, Hampshire SO31 8NU. VAT number: 828555693.

The public contact channel is being prepared. During this invited preview, contact the person who gave you access. A monitored contact address will be published on the Contact & reporting page before public launch.

This notice covers TAG’s website and creator workflows. It does not replace the privacy notice of an independent website you visit through a link.

Information and purposes

Current preview data uses
ActivityInformationPurpose and draft basis
Blog email signupEmail address, consent wording/version, source, and when you asked, confirmed or unsubscribed.Your explicit opt-in to TAG blog emails. We first send one email with a confirmation link; nothing else is sent unless you confirm. Every email includes an unsubscribe link.
Brand partnership enquiryBrand and contact details, campaign brief, preferred dates, optional creative links, final files, exact permission evidence and private proof/approval history.Assess and prepare the requested newsletter or blog placement. Approved sponsor copy and display images stay with the published content in the permanent website archive; contact details, originals and permission evidence remain private. An enquiry does not subscribe you to marketing. Each new enquiry is also emailed to TAG’s own inbox so it can be answered. Final lawful-basis and retention periods are still to be confirmed.
Visit statistics, only if you accept analyticsPages viewed, the site you came from, device and browser type, approximate location (such as country or city) and a random ID kept in Google Analytics cookies.Your consent, which you can withdraw at any time with Cookie settings. We use it to see which pages are useful and how visitors find TAG. Google Analytics does not store IP addresses for this data, and TAG cannot see who you are.
Creator intake and reviewProfile, biography, contact details, artwork files, process notes and permission evidence.Assess an application, prepare an exhibition and record permissions. The final contract and lawful-basis mapping need operator review before public intake.
Artwork purchaseStripe collects your card details, email address and billing address. TAG records the order reference, chosen artworks, price and tax, the country you selected, your billing country, payment status and when downloads started.Take payment, check the UK/US restriction, release your downloads and keep sales and VAT records. Card details stay with Stripe. The retention period needs operator review before live sales.
Published exhibitionReviewed artist name, biography, descriptions, credited display images and tour recordings.Present the specific exhibition you have authorised. Private masters and review evidence are not part of the public catalogue.
Service operationRequest/error records and staff review history where recorded.Maintain the service, investigate problems and protect private records. Production logging and retention need confirmation before launch.

Providing a blog email is optional. You can browse without signing up. Checkout is in Stripe test mode, so there are no live customer orders yet. Creator finance records are labelled local tests.

Where information goes

TAG’s database and its sales and admin service run on Render in its Frankfurt region. Cloudflare R2 holds private artwork, download and audio files. Approved display images are published separately. OpenAI is used for authorised script-to-speech and editorial generation; Brave supports editorial research. Blog email addresses are not supplied to these generation or search workflows.

TAG prepares public RSS feeds for Atomic Creations: published blog summaries with links back to the articles, and full published newsletter editions. These feeds do not include the blog signup list. A future subscription through Atomic Creations will be a separate choice.

Stripe processes checkout payments, currently in test mode. Google sign-in is used only for the owner’s admin access. If you accept analytics on theatomicgallery.xyz, Google Analytics (Google LLC) receives your visit statistics and may process them in the US. Resend sends TAG’s emails from hello@theatomicgallery.xyz (blog signup confirmations, and brand enquiry alerts to TAG’s own inbox); it receives the email addresses and message content involved. Provider data categories, terms, processing locations and any international-transfer safeguards must be added to the final notice before live sales. A regional bucket selection alone is not a promise that all processing stays in that region.

Retention and security

The working principle is to keep information for its stated purpose and any applicable obligation, then delete or anonymise it. Unconfirmed blog signup requests are deleted after 30 days. If you unsubscribe, we keep your address and the date so we do not email you again unless you sign up again. Exact periods for applications, permission evidence, logs and backups are not yet adopted.

Account permissions and database access rules restrict private records. Public readers receive approved display material rather than private master files. These safeguards are not a guarantee that any service can be risk-free.

Your choices and rights

Blog updates, exhibition notifications, newsletter subscriptions and account permissions are separate choices. An artwork purchase or tip will not itself sign someone up for marketing emails.

You can unsubscribe from blog emails at any time with the link in each email. You may have rights to access, correct, erase, restrict or obtain your information, depending on the circumstances. Read GDPR & your data for the request process and the ICO complaint route.

No automated creator approval or financial eligibility decision is offered in this preview. AI helps produce content; human review remains part of publication.

Completing this notice

Before launch, TAG must confirm the operator/contact details, lawful bases, retention schedule, provider/transfer arrangements and handling of rights requests. This page is a draft for that review, not a claim of completed GDPR compliance.

Reference: ICO guidance on privacy information.