Privacy

How this website handles the information you send us.

Who is responsible for your data

The business responsible for your data (the “data controller”) is Fatma Lootah Art Gallery EST., Al Fahidi Historical Neighbourhood, Dubai, United Arab Emirates. Professional licence no. 1654537, issued by the Dubai Department of Economy and Tourism.

Enquiries are handled on our behalf by the artist manager, Marianna Castagna, who is part of Pignatari Marketing Innovations in Dubai.

For any question about your data, write to info@lootahfatma.com.

What we collect and why

• Enquiries. Through the enquiry form or by email we receive your name, your email address, your phone number if you choose to give it, the work you ask about and your message. We use them to answer you and, if you wish, to arrange a visit, a viewing or a purchase. When you send a form, our hosting provider also records the date and the IP address it was sent from, and checks the message automatically for spam. The legal basis is your request, as a step before a possible contract, and, under European data protection law (GDPR), also our legitimate interest in replying to people who write to us.
• Collectors’ list. If you join it, we keep your email address to send you occasional news about new works and exhibitions, together with the date and IP address of your sign-up as a record of your consent. The legal basis is your consent, which you can withdraw at any time by writing to us or by replying to any of our news emails.
• Technical data. Like any website, our hosting provider automatically records some technical information when pages are requested, such as your IP address, your browser and the time of the visit. It is used only to deliver the website and keep it secure. Under European data protection law (GDPR), the legal basis is our legitimate interest in running a safe website.

Giving us your details is your choice, but without an email address we cannot reply to an enquiry.

We do not use your data for automated decisions or profiling.

Cookies

This website uses no cookies, no analytics and no advertising trackers, and it does not load content from social networks or other websites. For this reason it shows no cookie banner.

To make pages display faster, it only keeps a small technical note in your browser (session storage) that tells the next page it can use the website’s fonts. The note contains no personal information, is never sent to us or anyone else, and is deleted when you close the tab.

Links to other websites, such as Instagram or Google Maps, take you to services with their own privacy rules.

Who handles your data

We share your data only with the providers that help us run the website and reply to you, under agreements that oblige them to protect it:

• Netlify, Inc. (United States): website hosting and receipt of the forms, with spam filtering by Akismet (Automattic Inc., United States);
• Microsoft (Microsoft 365): our email;
• Pignatari Marketing Innovations (Dubai): management of enquiries on our behalf.

If you buy a work, we also share the details needed to complete the sale with those involved, such as our bank, the shipping company and our accountants, and with public authorities when the law requires it.

We never sell your data or share it for advertising.

Transfers outside the UAE and the European Union

Some of these providers, such as Netlify and Microsoft, may process data in other countries, including the United States. In these cases the transfer is protected by the safeguards required by law, such as the standard contractual clauses approved by the European Commission.

You can ask us for a copy of these safeguards by writing to info@lootahfatma.com.

How long we keep it

• enquiries: up to 24 months after our last exchange; if a purchase follows, for as long as the law requires us to keep sales records;
• collectors’ list: until you leave it;
• technical data: for the short period set by our hosting provider.

How we protect it

Your data travels over a secure (HTTPS) connection and only the people who need it to handle your enquiry can see it. If a breach puts your data at serious risk, we will inform you and the authorities as the law requires.

Your rights

At any time you can ask to see the data we hold about you, to correct or delete it, to limit or object to its use, to receive a copy in a common format, and to withdraw your consent. Write to info@lootahfatma.com: we will reply within 30 days.

You can also object at any time to any use of your data based on our legitimate interest.

If you think your data has been handled incorrectly, you can also complain to a data protection authority: in the United Arab Emirates, the UAE Data Office; in the European Union, the authority of the country where you live or work.

Laws that apply

We handle your data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, for people in the European Union, the General Data Protection Regulation (EU 2016/679).

Changes

If we change the way we handle data, we will update this page.

Last updated: November 2026.