GDPR Privacy Notice Addendum for EU, EEA and UK Users

Last Updated: 09.16.2026

This GDPR Privacy Notice supplements the Certified Artist Privacy Policy and applies to individuals located in the European Economic Area (EEA), European Union (EU), and United Kingdom (UK).

Certified Artist LLC (“Certified Artist,” “we,” “our,” or “us”) is committed to protecting personal information and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and UK GDPR.

  1. Personal Information We Collect

In connection with certification applications, account management, communications, and website use, we may collect:

Identity Information

  • Full name
  • Artist name or business name
  • Contact information

Contact Information

  • Email address
  • Telephone number
  • Website URL
  • Social media profiles

Certification Information

  • Work samples
  • Portfolio materials
  • Creative process documentation
  • Proof of authorship submissions
  • Certification status and records

Transaction Information

  • Payment records
  • Order numbers
  • Purchase history

Payments are processed through third-party payment providers. Certified Artist does not store complete payment card information.

Technical Information

  • IP address
  • Browser type
  • Device information
  • Cookie and usage information
  • Website analytics data
  1. Why We Process Personal Information

We process personal information for the following purposes:

Certification Services

  • Reviewing certification applications
  • Evaluating submitted creative works
  • Confirming human authorship claims
  • Administering certification records

Contract Performance

  • Providing certification services
  • Processing payments
  • Delivering purchased products and services
  • Responding to customer inquiries

Legitimate Interests

  • Preventing fraud
  • Protecting the integrity of the Certified Artist certification program
  • Maintaining the security of our website and systems
  • Improving our services

Legal Obligations

  • Compliance with applicable laws
  • Responding to lawful requests from regulatory authorities
  • Establishing, exercising, or defending legal claims

Consent

Where required by law, we rely on consent for certain marketing communications and non-essential cookies.

Consent may be withdrawn at any time.

  1. Identity Verification Documents

To preserve the integrity of the Certified Artist certification process, applicants may be required to provide identity verification documents.

Such documents are collected solely for:

  • Identity verification
  • Fraud prevention
  • Certification review

Access to identity documents is restricted to authorized personnel involved in certification review.

Identity documents are not sold, shared, or publicly displayed.

Unless legal or fraud-prevention obligations require longer retention, identity verification documents are deleted within 90 days following completion of the certification review process.

  1. International Data Transfers

Certified Artist is headquartered in the United States.

If you are located in the EU, EEA, or UK, your personal information may be transferred to and processed in the United States and other countries where our service providers operate.

Where required by law, we implement appropriate safeguards for international transfers, including contractual protections and reliance on recognized transfer mechanisms provided under applicable data protection laws.

  1. Third-Party Service Providers

We may share information with trusted service providers that assist in operating our business and providing our services.

These providers may include:

  • Payment processors such as Stripe
  • Website hosting providers
  • Website security providers
  • Email and communications providers
  • Cloud storage providers
  • Analytics providers

These providers are authorized to process personal information only as necessary to perform services on our behalf.

  1. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this notice.

Typical retention periods may include:

Data Type

Retention Period

Certification Applications

Up to 12 months after review

Certified Artist Records

Duration of certification plus 3 years

Financial and Transaction Records

As required by applicable law

Marketing Consent Records

Until consent is withdrawn



We may retain information longer where required by law or necessary to resolve disputes or prevent fraud.

  1. Your GDPR Rights

Individuals located in the EU, EEA, or UK may have the following rights:

Right of Access

You may request a copy of personal information we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete information.

Right to Erasure

You may request deletion of personal information under certain circumstances.

Right to Restrict Processing

You may request limitation of processing in certain situations.

Right to Data Portability

You may request a copy of your information in a structured, commonly used format.

Right to Object

You may object to processing based on legitimate interests.

Right to Withdraw Consent

Where processing relies on your consent, you may withdraw consent at any time.

Right to Lodge a Complaint

You have the right to file a complaint with a relevant data protection authority.

  1. Exercising Your Rights

To submit a privacy request, contact:

Certified Artist LLC
Email: privacy@certifiedartist.com

Please include:

  • Your name
  • Your email address
  • Your request type
  • Sufficient information for identity verification

We will respond in accordance with applicable data protection laws.

  1. Automated Decision-Making

Certified Artist does not make certification decisions solely through automated processing or automated decision-making systems.

Certification decisions involve human review of submitted materials.

  1. Children

Certified Artist services are not directed toward children under 18 years of age. We do not knowingly collect personal information from children without appropriate authorization.

  1. Contact Information

For privacy-related questions, requests, or concerns, contact:

Certified Artist LLC
Email: privacy@certifiedartist.com
Website: CertifiedArtist.com

Certified Artist LLC

84 W Broadway STE 200 Derry NH  03038

 If you’re an EU or UK resident, you have rights including:

  • Access to your personal data
  • Rectification of your data
  • Withdrawal of consent
  • Data portability

How to Exercise Your Rights

  • EU residents: Contact Stripe’s Data Protection Officer at info@certifiedartist.com