Privacy policy

Last updated: October 28, 2026

About this policy

Hypha Studios is a charitable incorporated organisation registered in England and Wales (charity number 1194915). Address: Unit 3, Euston Tower, 286 Euston Road, London NW1 3AS. Contact: cc@hyphastudios.com. We are responsible for the personal information described in this policy. It covers our website and the ways you contact, support or take part in our work. Hypha Curates may provide additional information when you buy artwork.

Information we collect

Depending on how you interact with us, we may receive your name, contact details, organisation, correspondence, newsletter preferences, donation and transaction details, event booking information, and information you provide in an artist or space application, such as your practice, portfolio and project proposal. We may also receive technical information such as IP address, device and browser data, and information about your use of the site where permitted by your cookie choices. If you provide accessibility or health information, we use it only to address the request and with appropriate safeguards.

How we use information and why

We use information to answer enquiries and administer applications, events and relationships, relying on our legitimate interests in running the charity and responding to you, or on a contract where applicable. We administer donations and maintain financial records on the basis of our legitimate interests and legal obligations. We use information where necessary to meet legal duties. Where we ask for consent, including for optional cookies and email marketing, you can withdraw it at any time; this does not affect earlier lawful use. We assess whether our interests are overridden by your rights.

Newsletters and fundraising

If you sign up to our newsletter, we use your details to send the updates you request. You can unsubscribe using the link in an email or by contacting us. We keep a record of your preference so we can respect it. We will not add you to our newsletter simply because you donate or apply for a space.

Payments and other organisations

We use Monday forms for applications and Ticket Tailor for event bookings. These providers process information you submit through their services. We may share relevant applications with a selection panel, including external partners involved in the selection, where appropriate to the process. Payment providers process payment details under their own privacy notices; the payment screen identifies the provider. We receive the information needed to administer and reconcile donations. We use Shopify to provide and host our website and use suppliers for communications, and may share information with professional advisers or authorities where appropriate. Suppliers process information on our instructions where applicable. We do not sell your personal information.

International transfers

Some suppliers may process information outside the UK. Where UK data protection law requires safeguards, we use an appropriate mechanism, such as an adequacy decision or approved contractual safeguards. Contact us for further information.

How long we keep information

We keep personal information only as long as needed for the relevant purpose, including applicable legal, accounting, safeguarding and record-keeping requirements. Retention varies with the type of record and circumstances; we review and securely delete or anonymise information when it is no longer needed. We may retain a limited suppression record to respect an unsubscribe request.

Your rights

Subject to applicable conditions and exceptions, you can ask for access to, correction or deletion of your information, restriction of processing, or a portable copy; object to processing based on legitimate interests or to direct marketing; and withdraw consent. To exercise your rights, contact us at cc@hyphastudios.com. You can complain to the Information Commissioner’s Office at ico.org.uk or 0303 123 1113.

Security and children

We take appropriate technical and organisational measures to protect information, although no system is completely secure. If information about a child is needed for a project or event, we will provide any additional information and seek appropriate permissions.

Cookies and changes

See our Cookie Policy for information about cookies and your choices. We may update this policy as our work or the law changes. The current version will be available on our website.