Privacy Policy

Effective Date: March 23, 2026

The Vanderbilt Portfolio (“we,” “us,” or “our”) operates the Riyadh Art website at riyadhart.org (“Website”). This Privacy Policy describes how we collect, use, disclose, and protect information about you when you visit or use the Website. By accessing or using the Website, you agree to the collection and use of information in accordance with this policy.

We are committed to protecting your privacy and handling your personal information with transparency and care. This policy is intended to help you understand what data we collect, why we collect it, how we use it, and what choices you have regarding your information.

Information We Collect

Information You Provide Directly

We collect information that you voluntarily provide to us through your interactions with the Website. This includes information submitted through our contact form or email correspondence (including your name, email address, and the content of your message), information provided when subscribing to newsletters or email updates, information submitted in connection with research collaboration inquiries, partnership proposals, or institutional subscription requests, and any other information you choose to provide through your interactions with us.

We do not require you to create an account to access the publicly available Content on our Website. If we introduce account-based features in the future, this Privacy Policy will be updated to describe the additional information collected and how it is used.

Information Collected Automatically

When you visit the Website, certain information is collected automatically through cookies, web beacons, and similar technologies. This automatically collected information may include your Internet Protocol (IP) address, browser type and version, operating system, referring URL, pages visited on the Website, time and date of your visit, time spent on each page, click-through data, and other standard web analytics data.

This information is collected to help us understand how visitors use the Website, to improve the user experience, to analyze traffic patterns, to detect and prevent technical issues, and to support the operation of advertising services on the Website.

Information Collected by Third Parties

The Website uses third-party services that may collect information about your browsing behavior. These third-party services include:

Google Analytics: We use Google Analytics to collect and analyze information about how visitors use the Website. Google Analytics uses cookies to collect information such as how often users visit the Website, what pages they visit, and what other sites they used prior to coming to the Website. We use this information to improve the Website and our Content. Google Analytics collects only the IP address assigned to you on the date you visit the Website, rather than your name or other identifying information. The information generated by Google Analytics cookies about your use of the Website is transmitted to and stored by Google. Google’s ability to use and share information collected by Google Analytics is restricted by the Google Analytics Terms of Service and the Google Privacy Policy.

Google AdSense: The Website displays advertisements provided by Google AdSense. Google AdSense uses cookies and similar technologies to serve ads based on your prior visits to the Website and other websites. Google’s use of advertising cookies enables it and its partners to serve ads based on your visit to the Website and other sites on the Internet. You may opt out of personalized advertising by visiting Google’s Ad Settings.

Other Advertising Partners: We may work with additional advertising networks and partners who use cookies and similar technologies to collect information about your browsing activity for purposes of serving targeted advertisements. These partners may collect information about your online activities over time and across different websites and online services.

How We Use Your Information

We use the information we collect for the following purposes:

Website Operation and Improvement: We use automatically collected information to operate, maintain, and improve the Website, including analyzing user behavior to optimize content presentation, navigation, and performance.

Communication: We use contact information you provide to respond to your inquiries, provide requested information, send newsletters or updates you have subscribed to, and communicate about partnership or collaboration opportunities.

Analytics and Research: We use aggregated and anonymized data to understand trends in Website usage, to analyze the effectiveness of our Content, and to inform editorial decisions about future content development.

Advertising: We use information collected through advertising technologies to display relevant advertisements on the Website, to measure the effectiveness of advertising campaigns, and to support the financial sustainability of the Website through advertising revenue.

Legal Compliance: We may use your information to comply with applicable laws, regulations, and legal processes, to enforce our Terms of Service, and to protect the rights, property, and safety of The Vanderbilt Portfolio, our users, and others.

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to outside parties except in the following circumstances:

Service Providers: We may share your information with third-party service providers who perform services on our behalf, including website hosting, analytics, email delivery, and advertising services. These service providers are authorized to use your personal information only as necessary to provide these services to us and are required to maintain the confidentiality of your information.

Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.

Business Transfers: If The Vanderbilt Portfolio is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

With Your Consent: We may share your information for purposes not described in this Privacy Policy with your explicit consent.

Cookies and Tracking Technologies

Cookies are small text files that are placed on your device by websites you visit. They are widely used to make websites work more efficiently and to provide information to website operators. We use cookies and similar technologies for the following purposes:

Essential Cookies: These cookies are necessary for the Website to function properly. They enable core functionality such as page navigation and access to secure areas of the Website. The Website cannot function properly without these cookies.

Analytics Cookies: These cookies help us understand how visitors interact with the Website by collecting and reporting information anonymously. We use this information to improve the Website and our Content.

Advertising Cookies: These cookies are used to deliver advertisements that are relevant to you. They also limit the number of times you see an advertisement and help measure the effectiveness of advertising campaigns.

Preference Cookies: These cookies enable the Website to remember choices you make (such as your preferred language or the region you are in) and provide enhanced, more personal features.

For detailed information about the specific cookies used on the Website and how to manage your cookie preferences, please refer to our Cookies Policy.

Your Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information, including:

Access: You may have the right to request access to the personal information we hold about you, including confirmation of whether we are processing your personal information and a copy of that information.

Correction: You may have the right to request that we correct inaccurate personal information we hold about you or complete incomplete personal information.

Deletion: You may have the right to request that we delete your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected.

Restriction: You may have the right to request that we restrict the processing of your personal information in certain circumstances, such as when you contest the accuracy of the information.

Portability: You may have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Objection: You may have the right to object to the processing of your personal information in certain circumstances, including processing for direct marketing purposes.

Cookie Preferences: You can manage your cookie preferences through your browser settings. Most web browsers allow you to control cookies through their settings preferences. However, if you limit the ability of websites to set cookies, you may impair your overall user experience and some features of the Website may not function properly.

Advertising Opt-Out: You can opt out of personalized advertising by visiting the Network Advertising Initiative’s opt-out page, the Digital Advertising Alliance’s opt-out page, or Google’s Ad Settings. Please note that opting out of personalized advertising does not mean you will not see advertisements — it means the advertisements you see may be less relevant to your interests.

To exercise any of these rights, please contact us at info@riyadhart.org. We will respond to your request within the timeframe required by applicable law.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When determining retention periods, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, whether we can achieve those purposes through other means, and applicable legal requirements.

Contact information and correspondence are retained for as long as necessary to address the inquiry and for a reasonable period thereafter to support follow-up communication. Analytics data is retained in aggregated and anonymized form. Advertising-related data is retained according to the policies of the relevant advertising service providers.

Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit, secure hosting infrastructure, access controls limiting who can access personal information, and regular review of our security practices.

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You acknowledge that you provide personal information at your own risk.

Children’s Privacy

The Website is not intended for children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us at info@riyadhart.org. If we become aware that we have collected personal information from children without verification of parental consent, we take steps to remove that information from our servers.

International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. By using the Website, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, changes in applicable law, or for other operational, legal, or regulatory reasons. We will post the updated Privacy Policy on this page and update the “Effective Date” at the top. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

For significant changes that materially affect your rights, we will make reasonable efforts to provide notice, such as by posting a prominent notice on the Website or by sending an email to the address associated with your subscription, if applicable.

Contact Information

If you have any questions about this Privacy Policy, your personal information, or our privacy practices, please contact us at:

The Vanderbilt Portfolio Riyadh Art — Privacy Inquiries Email: info@riyadhart.org

We will endeavor to respond to all privacy-related inquiries within 30 days of receipt.

Additional Disclosures

California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). These may include the right to know what personal information we collect, use, disclose, and sell; the right to request deletion of your personal information; the right to opt out of the sale of your personal information (we do not sell personal information); and the right not to be discriminated against for exercising your privacy rights.

European Economic Area Residents

If you are a resident of the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR). The legal bases for our processing of your personal information include your consent, the performance of a contract with you, compliance with legal obligations, and our legitimate interests in operating and improving the Website. You have the right to lodge a complaint with your local data protection authority if you believe that our processing of your personal information violates applicable law.

United Kingdom Residents

If you are a resident of the United Kingdom, you have rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 that are substantially similar to those available to EEA residents under the GDPR. These include the right to access your personal information, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, and the right to object to processing. You may lodge a complaint with the Information Commissioner’s Office (ICO) if you believe our processing of your personal information violates applicable UK data protection law.

Middle Eastern and Gulf Cooperation Council Residents

Users accessing the Website from Saudi Arabia or other Gulf Cooperation Council states should be aware that data protection regulations in these jurisdictions are evolving. Saudi Arabia’s Personal Data Protection Law (PDPL), which came into effect in 2023, establishes requirements for the collection, processing, and transfer of personal data within the Kingdom. While the Website is operated outside of Saudi Arabia, we aim to handle data relating to Saudi residents in a manner consistent with applicable Saudi data protection principles. Users in other GCC states — including the UAE, Qatar, Bahrain, Kuwait, and Oman — may have additional rights under their respective national data protection frameworks.

Third-Party Service Provider Details

The following table provides additional detail on the third-party service providers whose technologies may process personal information in connection with the Website:

We periodically review the privacy practices of our third-party service providers to ensure they maintain standards consistent with our commitments to our users. We do not have control over the privacy practices of these third parties, and we encourage you to review their privacy policies directly for comprehensive information about their data handling practices. For questions about how we use your data in connection with our coverage of Saudi art and cultural institutions, please see our methodology page or contact us.