Privacy Notice

Who controls your data

CAVO is operated by Vasily Salikhov as an unincorporated project. Correspondence: 71 Bondway, London SW8 1SF, United Kingdom. Contact: contact@joincavo.com. Vasily Salikhov is responsible for the personal information collected through this website.

What we collect

• Identity and contact details you provide
• Professional background, portfolio links and role-specific answers
• Artist funding intentions and backer interest bands
• Private portfolio files uploaded by artist applicants
• Privacy acknowledgement and optional marketing choice
• Application status, reviewer notes and a limited access audit trail
• Technical security data such as a one-way hash used for rate limiting

Where information comes from

Most information is supplied directly by applicants. CAVO also creates operational data when an application is submitted, reviewed, updated or securely downloaded. The website does not currently buy personal information or use automated profiling.

Why we use it and the proposed lawful basis

Application information is used to review an expression of interest, decide whether a conversation may be appropriate, keep the process secure and administer follow-up. Depending on the context, this may rely on steps requested before a possible contract or CAVO's legitimate interests in operating a selective application process. Marketing is separate and depends on an optional, specific choice. You can contact us to ask about the basis used for a particular use of your information.

Storage and recipients

Structured applications are stored in a private Cloudflare D1 database. Portfolio files are stored in a private Cloudflare R2 bucket. Authorised CAVO reviewers can access records after sign-in and server-side authorisation. Application email copies are delivered to contact@joincavo.com through Google Workspace. Relevant hosting, database, storage, email and professional advisers may process information as needed to provide these services. Contact us for details about service providers, processing locations and transfer arrangements.

Retention

Applications are scheduled for a retention review after 365 days. CAVO will delete or anonymise records when they are no longer needed, subject to genuine legal or operational requirements. Unsubmitted local drafts expire after seven days. Uploaded files are never placed in browser storage.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, objection or portability. You may withdraw marketing permission at any time. You may also complain to the Information Commissioner's Office. To exercise these rights, email contact@joincavo.com.

Applicants under 18

The application form asks whether an artist is under 18 but does not collect a date of birth or guardian details. A minor application requires additional safeguarding review. A parent or legal guardian would need to participate before contracts, funding or substantive data sharing. Additional arrangements will be explained before any further participation by an applicant under 18.

Automated decisions and updates

CAVO does not use solely automated decision-making to select applicants. Material changes to this notice will be dated and explained. The privacy notice version accepted at submission is stored with the application.