TERMS & CONDITIONS Last updated: 13 July 2026 1. About CISTA ARTS This website and online store are operated by CISTA ARTS Ltd., a company registered in England and Wales under company number 11610002. Email: info@cistaarts.com References in these Terms to “CISTA ARTS”, “we”, “us” or “our” mean CISTA ARTS Ltd. 2. Scope of These Terms These Terms & Conditions apply to the use of the CISTA ARTS website and purchases made through the CISTA ARTS online store, including printed publications, exhibition catalogues, artist books, original artworks, prints and other physical products. Separate agreements, application conditions or participation terms may apply to exhibitions, artist development programmes, residencies, courses, publishing commissions and other professional services. Where separate written terms have been agreed for a particular service, programme or project, those terms will take precedence in relation to that service, programme or project. By placing an order through our website, you confirm that you have read and agree to these Terms & Conditions. 3. Product and Artwork Information We make reasonable efforts to ensure that product descriptions, artwork information, dimensions, media, dates, prices and images are accurate. Colours and visual details may appear differently depending on photography, lighting, individual screen settings and the device used to view the website. Minor variations between an image displayed online and the physical product do not necessarily constitute a defect. Original artworks are unique objects and may show characteristics associated with their age, materials, production method or the artist’s working process. Any significant known condition issues will be disclosed where appropriate. Customers may contact us before purchasing to request additional photographs, condition information or other available details about an artwork. 4. Orders and Acceptance Submitting an order constitutes an offer to purchase the selected product. An automated acknowledgement confirms that we have received the order but does not necessarily mean that the order has been accepted. A contract is formed when CISTA ARTS confirms acceptance of the order or dispatches the product. We may decline or cancel an order where: • the product is unavailable; • payment has not been authorised; • the product or price contains an obvious error; • we cannot deliver to the supplied address; • additional delivery arrangements cannot be agreed; • we reasonably suspect fraud or unauthorised activity; or • the order cannot be fulfilled for another legitimate reason. Where payment has already been taken for an order that we cannot accept, the amount paid will be refunded. 5. Prices and Payment Prices are displayed in pounds sterling unless otherwise stated. Delivery, specialist packaging, insurance, framing, installation, customs, import duties or other applicable charges may be added separately. Any additional charge payable to CISTA ARTS will be displayed at checkout or confirmed before the order is completed. Payment must be made using one of the payment methods available at checkout. Orders will not normally be dispatched until payment has been received in full. 6. Product Availability All products are subject to availability. Original artworks are normally unique and may also be offered through an artist, gallery or another authorised channel. If an original artwork has been sold elsewhere before an online order is accepted, we may cancel the order and issue a full refund. If any other product becomes unavailable after an order has been placed, we will contact the customer and refund the amount paid for the unavailable product. 7. Delivery Delivery arrangements are explained in our Shipping & Returns Policy. Estimated preparation and delivery dates are provided in good faith but are not guaranteed. CISTA ARTS is not responsible for delays caused by couriers, customs authorities, border controls, industrial action, adverse weather, incorrect delivery information or other circumstances outside our reasonable control. Risk of loss or damage passes to a consumer when the goods are delivered to the consumer or to a person identified by the consumer to receive them. Ownership of the goods passes to the customer once payment has been received in full. 8. Cancellations, Returns and Refunds Cancellation, return and refund arrangements are explained in our Shipping & Returns Policy. For most eligible physical products purchased online by consumers, the customer may notify us of their decision to cancel within 14 days of receiving the goods. Exceptions may apply to products made to the customer’s specifications, personalised products, specially commissioned artworks, bespoke framing and other products excluded by applicable consumer law. Nothing in these Terms limits statutory consumer rights relating to goods that are faulty, damaged, not as described or not fit for purpose. 9. Original Artworks Information supplied with an original artwork may include the artist’s name, title, date, medium, dimensions, provenance information and, where applicable, a Certificate of Authenticity. Customers must not remove, alter or misrepresent an artist’s signature, attribution, Certificate of Authenticity or accompanying documentation. Purchasing an original artwork transfers ownership of the physical object only. It does not transfer copyright, reproduction rights or other intellectual property rights. 10. Copyright and Intellectual Property Copyright in all artworks and artwork images remains with the relevant artist or copyright holder unless expressly agreed otherwise in writing. Where a photograph or image has been created by a photographer or another rights holder, copyright remains with that creator or rights holder. CISTA ARTS displays artwork images under permission, agreement or licence from the relevant artist or rights holder. Purchasing an original artwork, print, catalogue, artist book or other product does not transfer copyright, reproduction rights, publication rights or commercial usage rights to the buyer. Website visitors and customers may not reproduce, publish, distribute, modify, download for reuse, commercially exploit or create derivative material from artwork images, texts, photographs, graphics, logos or other website content without prior written permission from the relevant copyright holder. Artwork images and website materials may not be used for: • commercial advertising; • merchandise; • editorial or publishing purposes; • commercial social media campaigns; • artificial intelligence training; • machine-learning datasets; • image-generation datasets; • digital assets or non-fungible tokens; or • any other commercial or public use without express written permission from the relevant rights holder. CISTA ARTS retains copyright in its original branding, website content, curatorial texts, editorial materials, designs and layouts, except where another copyright holder is identified. 11. Artist Attribution and Resale Customers should retain accurate information concerning the artist, title, date, medium, dimensions and provenance of an artwork. The artist’s name must not be removed or falsely attributed. A future resale of an artwork may be subject to applicable Artist’s Resale Right legislation or other legal requirements. 12. Website Use Users must not: • use the website for an unlawful or fraudulent purpose; • attempt to interfere with the security or operation of the website; • gain unauthorised access to the website or another user’s information; • copy or extract website content for commercial use; • impersonate another person or organisation; • submit false, misleading or infringing information; • use artwork images or artist information without permission; or • introduce malware, harmful code or automated scraping tools. 13. External Links The website may contain links to third-party websites, services or social media platforms. CISTA ARTS is not responsible for the content, security, availability or privacy practices of external websites. 14. Liability Nothing in these Terms excludes or limits liability where doing so would be unlawful, including liability for fraud, fraudulent misrepresentation, death or personal injury caused by negligence, or breach of statutory consumer rights. Subject to applicable law, CISTA ARTS will not be responsible for indirect, consequential or unforeseeable losses arising from the use of the website or purchase of a product. CISTA ARTS is not responsible for losses caused by inaccurate information supplied by the customer, including an incomplete or incorrect delivery address. 15. Events Outside Our Control CISTA ARTS will not be liable for delay or failure to perform an obligation caused by events outside our reasonable control, including courier disruption, customs delays, natural disasters, technical failures, industrial disputes, government restrictions or interruption of essential services. 16. Changes to These Terms We may update these Terms & Conditions from time to time. The terms applying to an order will be those published at the time the order was placed. The latest version will be available on this page and will show the date of the most recent update. 17. Governing Law These Terms & Conditions are governed by the laws of England and Wales. Nothing in these Terms affects mandatory consumer rights available under the laws applying in the country where a customer lives. 18. Contact Questions about these Terms & Conditions may be sent to: CISTA ARTS Ltd. Email: info@cistaarts.com Company number: 11610002

PRIVACY POLICY Last updated: 13 July 2026 1. Who We Are CISTA ARTS Ltd. is the controller of the personal information described in this Privacy Policy. CISTA ARTS Ltd. Company number: 11610002 Registered in England and Wales Email: info@cistaarts.com References to “CISTA ARTS”, “we”, “us” or “our” mean CISTA ARTS Ltd. 2. Information We May Collect We may collect and process the following personal information: • name; • email address; • telephone number; • billing and delivery addresses; • order and transaction information; • payment status and selected payment method; • account information where a website account is created; • communications and customer-service enquiries; • newsletter and communication preferences; • website usage, browser, device and IP-address information; • information submitted through contact forms; • exhibition, programme, course and residency applications; • artist biographies, CVs, statements, portfolios and project proposals; • artwork, publication or partnership enquiries; • photographs, video, audio or other materials submitted with permission; • attendance and participation information; and • any other information voluntarily provided to us. We do not normally receive or retain full debit or credit card details. Payments are processed by the payment service selected at checkout. 3. How We Collect Information We may collect personal information: • directly from you; • when you place an order; • when you submit a form or application; • when you email or contact us; • when you subscribe to our mailing list; • when you create an account; • when you participate in an exhibition, course, programme or project; • through cookies and similar technologies; • from artists, project partners or representatives where appropriate; and • from publicly available professional sources where there is a lawful reason to do so. 4. How We Use Personal Information We may use personal information to: • process, fulfil and manage orders; • arrange payment, delivery, collection, returns and refunds; • communicate about an order or enquiry; • administer customer accounts; • respond to applications, proposals and artwork submissions; • assess eligibility or suitability for exhibitions and programmes; • manage exhibitions, programmes, courses, publications and professional services; • prepare artist profiles and programme materials with permission; • provide customer and participant support; • manage contractual and professional relationships; • prevent fraud and protect the website; • maintain financial, contractual, tax and business records; • improve our website, programmes and services; • analyse website use where permitted; • send newsletters or promotional communications where an appropriate lawful basis exists; • respond to data protection requests and complaints; and • comply with legal and regulatory obligations. 5. Lawful Bases for Processing Depending on the circumstances, we process personal information because: • it is necessary to perform a contract or take steps requested before entering into a contract; • it is necessary to comply with a legal obligation; • it is necessary for our legitimate interests, including operating and improving our services, responding to enquiries, managing professional relationships, preventing fraud and protecting our legal rights; • the individual has provided consent; or • another lawful basis recognised by applicable data-protection law applies. Where processing is based on consent, consent may be withdrawn at any time. Withdrawal of consent does not affect processing that was lawful before consent was withdrawn. 6. Applications, Portfolios and Artist Information Information submitted as part of an exhibition, programme, residency, course, publication or artwork application may be reviewed by members of the CISTA ARTS team and, where appropriate, relevant curators, selectors or project partners. Submission of material does not guarantee acceptance. Where an applicant is accepted, selected information and images may be published only in accordance with the relevant agreement, programme terms or permission provided by the artist. Copyright in artists’ artworks and artwork images remains with the relevant artist or rights holder. 7. Sharing Personal Information We may share relevant personal information with trusted organisations where necessary, including: • Wix and affiliated website and e-commerce service providers; • payment providers; • banks and financial institutions; • postal services, couriers, specialist art shippers and delivery providers; • printers, publishers and production partners; • email, cloud-storage, website-hosting and IT service providers; • accountants, insurers, legal advisers and other professional advisers; • artists, galleries, curators or rights holders where necessary to complete a sale or project; • programme, educational or institutional partners where relevant and appropriately disclosed; and • public authorities where disclosure is required by law. We do not sell personal information to advertisers or data brokers. Service providers may process personal information only as required to provide their services, follow our instructions or comply with their own legal obligations. 8. International Data Transfers Some of our service providers may process or store personal information outside the United Kingdom. Where an international transfer takes place, we take reasonable steps to ensure that an appropriate legal transfer mechanism or safeguard applies. 9. Payment Information Payments are processed through third-party payment providers. CISTA ARTS may receive confirmation of payment, transaction identifiers, billing information and limited payment-related information, but does not normally receive or store full payment-card details. The payment provider’s own privacy terms also apply. 10. Marketing Communications We send newsletters and promotional emails only where we have an appropriate lawful basis. Where consent is required, the individual will be given a clear opportunity to opt in. Subscribers may unsubscribe at any time by using the unsubscribe link contained in an email or contacting info@cistaarts.com. Unsubscribing from promotional messages does not prevent us from sending essential communications relating to an order, application, agreement, course, programme or service. 11. Cookies and Similar Technologies Our website uses cookies and similar technologies for essential website functions and, where required permission has been provided, optional analytics, functionality or marketing purposes. Further information is available in our Cookie Policy and through the cookie preference settings displayed on the website. 12. Data Retention We retain personal information only for as long as reasonably necessary for the purpose for which it was collected. Order, payment, contractual and business records may normally be retained for up to six years where required for accounting, legal, contractual or tax purposes. Customer-service communications, enquiries and applications may be retained for a reasonable period to respond to follow-up questions, maintain organisational records and protect legitimate interests. Information concerning accepted artists, exhibitions, publications and completed programmes may be retained as part of the organisational archive, subject to applicable agreements and data-protection obligations. Newsletter information is retained until the individual unsubscribes or the mailing list is discontinued. Information may be retained for longer where required by law, needed in connection with a dispute, or retained with the individual’s permission. 13. Data Security We take reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. However, no method of electronic transmission or online storage can be guaranteed to be completely secure. 14. Individual Rights Depending on the circumstances, individuals may have the right to: • request access to their personal information; • request correction of inaccurate or incomplete information; • request deletion of information; • request restriction of processing; • object to certain processing; • request transfer of information in a portable format; • withdraw consent where processing is based on consent; • object to direct marketing; and • complain about the way their personal information has been handled. Requests may be submitted to info@cistaarts.com. We may need to confirm the identity of the person making a request before responding. 15. Data Protection Complaints You may complain directly to CISTA ARTS if you believe that we have not handled your personal information in accordance with data-protection law. Please email: info@cistaarts.com Suggested subject line: Data Protection Complaint Please explain what happened, what information is involved and what outcome you are seeking. We will acknowledge receipt of a data-protection complaint within 30 days, investigate the matter appropriately and communicate the outcome without undue delay. You are not required to use a particular form or subject line for us to recognise and consider a data-protection complaint. 16. Complaints to the Information Commissioner Please contact us first if you have concerns about the way we have used your personal information so that we have an opportunity to investigate. You also have the right to complain to the UK Information Commissioner’s Office. 17. Third-Party Links Our website may contain links to third-party websites. CISTA ARTS is not responsible for the privacy, security or content practices of external websites. 18. Children’s Information Our services are not generally directed at children. Where we knowingly collect information concerning a person under the age of 18, we will take appropriate steps according to the nature of the programme, consent requirements and applicable safeguarding obligations. 19. Changes to This Policy We may update this Privacy Policy to reflect changes in our services, technologies, practices or legal obligations. The latest version will be published on this page with the date of the most recent update. 20. Contact CISTA ARTS Ltd. Email: info@cistaarts.com Company number: 11610002

COOKIE POLICY Last updated: 13 July 2026 1. About This Policy This Cookie Policy explains how CISTA ARTS Ltd. uses cookies and similar storage or access technologies when you visit our website. CISTA ARTS Ltd. is registered in England and Wales under company number 11610002. For questions about this policy, please contact: info@cistaarts.com 2. What Are Cookies? Cookies are small data files placed or stored on a device when a website is visited. Cookies and similar technologies can allow a website to operate, maintain security, remember preferences, support shopping and checkout functions and understand how visitors use the website. Some cookies are required for the website to operate. Others may be optional. 3. Essential Cookies Essential cookies and similar technologies are used where necessary for the operation and security of the website or to provide a service requested by the visitor. They may be used to: • maintain website security; • prevent fraud; • operate shopping-basket and checkout functions; • process payments; • remember cookie and privacy choices; • support account or login functions; • balance website traffic; • maintain a user session; and • ensure that the website functions correctly. Consent is not normally required where a storage or access technology falls within an applicable statutory exception, including where it is strictly necessary to provide a service requested by the user. 4. Functional Cookies Functional cookies may help improve the usability and functionality of the website. They may be used to: • remember display, language or accessibility preferences; • retain information entered during a session; • support embedded website functions; • remember previous choices; and • provide a more consistent browsing experience. Where consent is legally required, functional cookies will be used only after permission has been provided. 5. Analytics Cookies Analytics technologies help us understand how visitors use the website. They may collect information concerning: • pages visited; • time spent on the website; • links and navigation; • general location; • browser and device type; • technical performance; • how visitors reached the website; and • website errors. This information may help us evaluate and improve the website, content and services. Where consent is required under applicable law, analytics cookies will not be activated until the visitor has provided permission. Certain limited analytics or measurement technologies may be used without consent where an applicable statutory exception permits this. Where such an exception applies, we will still provide appropriate information about their use. 6. Marketing Cookies Marketing cookies and similar technologies may be used to assess promotional activity, understand engagement or provide more relevant advertising. Where consent is required, marketing cookies will be used only after the visitor has actively provided permission. CISTA ARTS does not treat continued browsing, silence or inactivity as consent. 7. Wix and Third-Party Services The CISTA ARTS website is hosted on the Wix platform. Wix and third-party services integrated with the website may use cookies or similar technologies for: • website security and hosting; • shopping-basket and checkout functions; • payment processing; • forms and communications; • account functions; • website performance; • analytics; • social media functions; and • embedded content. Third-party providers may process information under their own privacy and cookie policies. The specific cookies used may change when website features, applications or service providers are updated. 8. Cookie Choices When you first visit the website, you may be shown a cookie consent banner or preference centre. Depending on the available settings, you may be able to: • accept all cookies; • reject non-essential cookies; • select individual cookie categories; or • change previously selected preferences. Where consent is required, rejecting non-essential cookies should be as easy as accepting them. Essential cookies may remain active because they are required for the website or a requested service to function. 9. Withdrawing or Changing Consent You may change or withdraw your cookie preferences at any time through the cookie settings or preference centre available on the website. Withdrawal of consent does not affect the lawfulness of cookies used before consent was withdrawn. Changing cookie preferences may affect some website functions. 10. Browser Settings Most browsers allow users to view, block or delete cookies through browser settings. Blocking all cookies may prevent some features from operating properly, including shopping-basket, checkout, account, security or preference functions. 11. Current Cookie Information The cookie preference centre or consent tool used on the website provides current information about cookie categories and detected services. Because the website and its integrations may change, the list of individual cookies may also change. 12. Personal Information Information collected through cookies or similar technologies may constitute personal information where it identifies or relates to an individual. Further information about how CISTA ARTS collects, uses, shares and protects personal information is available in our Privacy Policy. 13. Changes to This Policy We may update this Cookie Policy when our website, services, technology or legal obligations change. The latest version will be published on this page with the revised date. 14. Contact For questions about cookies, privacy or personal information, contact: CISTA ARTS Ltd. Email: info@cistaarts.com Company number: 11610002