Abstract texture

Privacy Policy.

Your data, protected.

Effective: February 2026

THE GRAFT (“we”, “us”, “our”) is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, and protect your personal data when you use our website or submit an application.

01

Data Controller

THE GRAFT acts as the Data Controller for the personal data collected through this website.

02

Personal Data We Collect

We may collect the following personal data necessary for legitimate business purposes:

check_circle Full name & Email
check_circle Social media handles
check_circle City / Country
check_circle Portfolio links & Files
check_circle Artist statements
check_circle Device information
03

Lawful Basis

Under UK GDPR, we rely on the following lawful bases:

Legitimate Interests

To review applications and assess suitability for representation.

Consent

Where you voluntarily submit information or agree to cookies.

Contract

Where processing is necessary prior to entering into a working agreement.

04

Usage & Sharing

We use your data to assess applications, communicate, and improve our services. We do not sell or rent personal data.

We may share data with trusted third-party providers (Hosting, Forms, Analytics) who are expected to process data securely.

05

Data Sharing

We may share data with trusted third-party providers such as:

  • Hosting providers
  • Form processing platforms
  • Analytics services

All third parties are expected to process data securely and in compliance with applicable laws.

06

International Transfers

If personal data is transferred outside the United Kingdom, appropriate safeguards will be implemented (including adequacy decisions or standard contractual clauses).

07

Data Retention

We retain applicant data only as long as reasonably necessary for evaluation and internal record purposes.

You may request deletion of your personal data at any time by contacting us.

08

Your Rights

Under UK GDPR, you have the right to access, correct, erase, restrict, and object to the processing of your data.

Exercising Your Rights

Contact us directly to make a request. You also have the right to lodge a complaint with the ICO.

Visit ICO Website arrow_outward
09

Data Security

We implement reasonable technical and organisational measures to protect personal data. However, no online transmission is completely secure.

10

Cookies

Our website may use cookies or analytics tools to improve performance and user experience. You may adjust cookie preferences via your browser settings.

11

Changes to This Policy

We may update this Privacy Policy periodically. The updated version will be posted with a revised Effective Date.

By using this website, you acknowledge this Privacy Policy.

We implement reasonable technical measures to protect your data. Cookies may be used to improve experience.
This policy may be updated periodically.

Home About Join Apply