Updated: 24 September 2026
Tabari Artspace LLC, trading as Tabari Artspace (“Tabari”, we”, “us” or “our”), respects your privacy and is committed to protecting your Personal Data.
This Privacy Policy explains how we collect, use, store, disclose and otherwise Process Personal Data when you interact with Tabari, including when you visit our website, contact the gallery, subscribe to communications, attend an exhibition or event, enquire about or purchase an artwork, consign or otherwise transact with us, submit information through our website, or engage with us in another professional capacity.
Tabari Artspace LLC is established in the Dubai International Financial Centre (“DIFC”) and acts as a Controller of Personal Data for the purposes described in this Privacy Policy.
Our Processing of Personal Data is governed principally by the DIFC Data Protection Law, DIFC Law No. 5 of 2020, as amended (the “Data Protection Law”), together with the applicable DIFC Data Protection Regulations. Where the laws of another jurisdiction apply to a particular Processing activity, we will also comply with those requirements as applicable.
We may update this Privacy Policy from time to time. The date of the most recent update appears above.
Our data protection principles
We seek to collect only the Personal Data reasonably necessary for our activities; use Personal Data lawfully, fairly and transparently; use it for specified and legitimate purposes; keep Personal Data accurate where appropriate; retain it only for as long as necessary; implement appropriate safeguards to protect it; and respect the rights of individuals in relation to their Personal Data.
Where we rely on our legitimate interests to Process Personal Data, we consider those interests against the interests and rights of the individuals concerned.
What Personal Data do we collect?
Depending on your relationship with Tabari, we may collect information including your name, email address, telephone number, postal or billing address, professional or organisational information, transaction and payment-related information, details relating to artworks you have enquired about, purchased or consigned, correspondence with us, preferences and interests, invitations and event attendance, and your communication and marketing preferences.
When you use our website or other digital services, we may also collect technical and usage information such as your IP address, browser and device information, website usage data and information collected through cookies or similar technologies.
If you apply for employment or other professional opportunities with Tabari, we may collect information contained in your application, CV, portfolio, references and related correspondence.
We do not seek to collect Special Categories of Personal Data unless they are necessary for a legitimate purpose and we have an appropriate lawful basis for doing so.
How do we obtain your Personal Data?
We primarily obtain Personal Data directly from you, including when you correspond with us, make an enquiry, purchase or consign an artwork, register for or attend an event, subscribe to our mailing list, submit information through our website or communicate with members of our team.
We may also receive Personal Data from professional contacts, artists, consignors, advisers, art fairs, service providers, publicly available sources or other third parties where it is lawful and appropriate to do so.
Certain technical information may be collected automatically when you interact with our website or digital services.
Why do we use your Personal Data?
We may Process your Personal Data to respond to enquiries and requests; administer purchases, sales, consignments, loans and other art-related transactions; provide information about artworks, artists and exhibitions; manage invitations and attendance at gallery events; fulfil contractual obligations; arrange payment, transportation, insurance or delivery of artworks; maintain client and professional relationships; maintain appropriate business and transaction records; administer and improve our website and digital services; protect our systems, property and legal rights; prevent fraud and other unlawful activity; meet applicable legal, regulatory, accounting, tax, anti-money laundering, sanctions or compliance obligations; process employment applications; and communicate information about Tabari's exhibitions, artists, fairs, publications, events and activities where permitted by law.
Depending on the circumstances, our lawful basis may be the performance of a contract or steps taken before entering into a contract; compliance with an applicable legal obligation; our legitimate interests or those of a third party, where those interests are not overridden by your interests or rights; your consent; or another lawful basis permitted under the Data Protection Law.
Marketing and gallery communications
We may contact you about Tabari exhibitions, artists, artworks, art fairs, events, publications and related gallery activities where we have an appropriate lawful basis to do so.
Where we rely on your consent, consent will be obtained through a clear affirmative action. We will not treat silence, inactivity or a pre-selected option as consent.
Where permitted under applicable law, we may also communicate with existing clients or contacts about activities or services that are reasonably related to their previous dealings with Tabari.
You may object to the use of your Personal Data for direct marketing or unsubscribe from marketing communications at any time. Marketing emails will ordinarily contain an unsubscribe facility, and you may also contact us directly using the details below.
Withdrawing consent or unsubscribing from marketing does not prevent us from contacting you where communication is necessary for an existing transaction, contractual relationship, legal obligation or another lawful purpose.
Cookies and similar technologies
Our website may use cookies and similar technologies necessary for the website to operate, as well as technologies used for analytics, preferences, functionality or other digital services.
Our privacy settings should, by default, limit the collection of Personal Data to what is reasonably necessary to provide the relevant service. Where consent is required for additional cookies or similar technologies, they should not be activated on the basis of pre-ticked selections, silence or inactivity.
Where available, you can use our cookie or privacy-preference tools to manage your choices. You can also adjust your browser or device settings, although disabling certain necessary technologies may affect the functionality of the website.
Who do we share Personal Data with?
We may disclose Personal Data where reasonably necessary to organisations and individuals assisting us in operating the gallery and providing our services. These may include artists and consignors where relevant to a transaction; shipping, storage, installation and logistics providers; insurers; payment and banking providers; website, IT, hosting, CRM, communications and cloud-service providers; professional advisers such as lawyers and accountants; event and art-fair organisers; photographers or other service providers; and government, regulatory, judicial or law-enforcement authorities where disclosure is required or permitted by applicable law.
Service providers receiving Personal Data on our behalf are expected to Process that information only for appropriate purposes and subject to suitable data protection and security arrangements.
We do not sell Personal Data as a business activity.
International transfers
Because Tabari operates internationally and works with artists, collectors, institutions, fairs and service providers in different countries, Personal Data may in some circumstances be transferred outside the DIFC.
Where Personal Data is transferred from the DIFC to another jurisdiction or international organisation, we will take appropriate measures in accordance with the Data Protection Law. Depending on the circumstances, this may include transferring information to a jurisdiction recognised as providing an adequate level of protection, using appropriate contractual or other safeguards, or relying on another transfer mechanism permitted under the Data Protection Law.
The DIFC legislation specifically regulates transfers outside the DIFC and requires either adequate protection, appropriate safeguards or another permitted basis for the transfer.
How long do we keep your Personal Data?
We retain Personal Data only for as long as reasonably necessary for the purposes for which it was collected and for any legitimate subsequent purpose permitted by law.
The appropriate retention period varies according to the nature of the information and our relationship with you. We may retain certain information for longer where this is necessary to comply with legal, regulatory, accounting, tax, anti-money laundering or record-keeping obligations; establish, exercise or defend legal claims; maintain appropriate provenance or transaction records; resolve disputes; prevent fraud; or maintain an accurate record of your communication preferences.
When Personal Data is no longer required, we will take reasonable steps to delete, anonymise or otherwise securely dispose of it.
How do we protect Personal Data?
We use appropriate technical and organisational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, and other unlawful forms of Processing.
Access to Personal Data is limited where appropriate to individuals and service providers who require it for legitimate business purposes.
No method of electronic transmission or storage can be guaranteed to be completely secure, but we periodically review our practices and safeguards in light of the nature of the information we Process and the associated risks.
What are your rights?
Subject to the Data Protection Law and any applicable limitations or exemptions, you may have the right to withdraw consent where processing is based on consent; request confirmation as to whether we process your personal data and obtain access to it; request correction of inaccurate personal data; request erasure in qualifying circumstances; object to certain processing, including direct marketing; request restriction of processing; receive qualifying personal data in a structured, commonly used and machine-readable format; and object to certain decisions based solely on automated processing and request human review where applicable.
How can I exercise my rights?
You may contact us using any of the methods below.
We may need to request sufficient information to confirm your identity before acting on a request. This is intended to ensure that Personal Data is not disclosed to someone who is not entitled to receive it.
There may be circumstances in which a request cannot be fulfilled in whole or in part because an exemption applies, the information must be retained under applicable law, disclosure would adversely affect another person's rights, or another lawful basis permits continued Processing. Where appropriate, we will explain this to you.
Employment applications
If you submit an application for employment, an internship, freelance work or another professional opportunity with Tabari, the information you provide may be used for purposes associated with evaluating and administering your application.
Where appropriate and lawful, application information may also be retained for a reasonable period for future recruitment opportunities or to meet applicable legal obligations.
Third-party websites and services
Our website may contain links to websites, social-media services or other online services operated by third parties. Their collection and Processing of Personal Data is governed by their own privacy practices, and Tabari is not responsible for the privacy policies or practices of independent third parties.
Changes to this Privacy Policy
We may revise this Privacy Policy to reflect changes in our activities, technology, legal obligations or data-protection practices.
Where changes are material, we will take appropriate steps to bring them to your attention. The current version will be available on our website and will state the date on which it was last updated.
Contact us
For questions about this Privacy Policy, our use of your Personal Data or to exercise your data-protection rights, please contact:
Tabari Artspace LLC
trading as Tabari Artspace
Gate Village, Building 3
Podium Level
Dubai International Financial Centre
P.O. Box 506759
Dubai, United Arab Emirates
Email: Gallery@Tabariartspace.com
Telephone: +971 4 323 0820
Online: via the contact form on the Tabari Artspace website
Complaints
If you have concerns about how we have handled your Personal Data, we encourage you to contact us first so that we can investigate the matter.