Introduction

Confidentiality and privacy of our customers are very important to us. We do not share any personal data we collect from suppliers, web sites, or customers with any other parties for any reason (except where detailed below for the purpose of conducting our business, or if required by Police in respect of a criminal investigation) and we are fully committed to meeting both the letter and the spirit of the Data Protection Act 1998, GDPR, and other relevant legislation.

 

What information do we collect from you?

If you opt to join our mailing list, either online or at one of our galleries, then we will take your name and email address. In our galleries you may also choose to leave your postal address and/or your telephone number.

If you make a purchase in one of our galleries using a payment card, then the paper merchant receipt will record your full card number.

If you make a purchase over the telephone then we will take your name, postal address, email address, telephone number, and payment card details.

If you place an order for bespoke picture framing then we will take your name and telephone number, and if appropriate your postal and email addresses.

If you make a purchase on our website then we will take your name, address, email address, and telephone number. Payment card details are handled securely by our payment processor – we have no access to your payment card details in this case.

We do not collect your IP address when browsing, but our payment processor may do so if you make a purchase. We do not have access to this information.

 

How do we use the information we collect from you?

If you are on our mailing list, we will send you an email newsletter approximately once a month. We don’t like to bombard customers with emails, and we only send a newsletter when we have news to share, e.g. new work being published. If you have also left your postal address, we will send you our mail order catalogue – this is usually published once a year.

We are required by HMRC and our payment card processors to retain paper merchant receipts for a period of six years.

If you make a purchase over the telephone then we will process your transaction then securely destroy your card details by cross-cut shredding immediately. We will retain your contact information as per orders for bespoke framing. We will not use your details for marketing unless you ask us to.

If you place an order for bespoke picture framing then we will retain your contact information so we can advise you when your order is ready, and so that we can match any future orders to frames you already have. We will not use your details for marketing unless you ask us to.

If you make a purchase on our website we will use your contact details only for the purposes of fulfilling your order. We will not use your details for marketing unless you ask us to. Our payment processor will use your details to securely authorise your transaction.

 

How do we secure the information we collect from you?

Our computers are all password protected, and our mailing list file is also separately password protected.

Our newsletters are sent via Mailchimp, and email addresses are stored on their servers which are currently located in North America. We are satisfied their security is industry standard and they comply with GDPR requirements, but if you do not agree with your email address being stored outside of EU please ask to be removed from our mailing list.

Paper merchant receipts are kept in a secure location and they are securely destroyed by incineration or cross-cut shredding after the retention period has expired.

Name and address information given in respect of online purchases is password protected.

We do not have access to card data given in respect of online purchases. This data is all handled by our payment processor, who is certified to the highest level of security by PCI auditors.

 

How long do we retain the information we collect from you?

If you have opted to join our mailing list then we will assume you wish to remain on it until you tell us otherwise. We may occasionally ask our mailing list members to re-confirm their consent to remain on the list, this may be approximately once every five years.

If you make a purchase in one of our galleries using a payment card, then the paper merchant receipt will be retained for six years as required by HMRC.

If you place an order for bespoke picture framing then we will ask if you would like us to retain your details. If we do, this will help us to match future framing orders for you, and we will retain your details until such time that you ask us to remove them.

If you make a purchase on our website then we will retain your details to help us to match future framing orders for you. A message in your confirmation email will prompt you to contact us if you would prefer us to delete your details.

In the event that the business is sold, all personal data will be securely destroyed.

 

How do we use cookies?

Our website uses cookies only where necessary to give customers the full experience we have designed, and to allow us to analyse activity on the website. We are only able to see a general summary of visitor traffic, time spent, etc, we are not able to identify individual customers. Tracking cookies will only be enabled if you agree by clicking "ok".

 

Your rights

We are fully committed to meeting both the letter and the spirit of the Data Protection Act 1998, GDPR, and other relevant legislation. These acts give you a number of rights in law which we will not repeat in detail here, but in summary you have the right to know what personal data we hold about you, the right to be removed from our marketing, and the right to be forgotten.

Note that GDPR is EU legislation which is expected to be retained by the UK after it leaves the EU, and the Data Protection Act 1998 will be replaced by the Data Protection Act 2018.

Regardless of your legal rights, we do not wish to hold customers’ personal data or send marketing if this is not wanted. If you would like us to remove you from our mailing list, or if you have any other questions or concerns about the personal data we hold please contact our data controller.

 

Our data controller

Jon Davies

studio@alisonbradley.gallery