Totteridge Gallery : Fine Art Dealers : Art Gallery

Fine Paintings, Watercolours & Drawings
Selected Etchings, Engravings & Prints

TotteridgeGallery.Com Privacy and Data Protection Policy

This Privacy and Data Protection Policy sets out how TOTTERIDGEGALLERY.COM, acting as a data controller, uses and protects any personal data that you give us. It describes the information we collect, how that information may be used, with whom it may be shared, and your choices about such uses and disclosures. For information about cookies and our use of them, click here for our cookies information page.

TOTTERIDGEGALLERY.COM is committed to ensuring that your privacy and data are protected. Should you provide us with information by which you can be identified, then you can be assured that it will only be used in accordance with this privacy and data protection statement.

TOTTERIDGEGALLERY.COM may change this policy from time to time by updating this page. You should check this page regularly to ensure that you are happy with any changes.

What We Collect

We may collect the following personal data:

  • name
  • contact information including email address
  • other information such as interests or preferences

How We Use The Personal Data We Collect

The general categories of personal data that we may process, the purposes for which we may process personal data, and the legal bases of the processing:

Enquiry Data - We may process information contained in any enquiry you submit to us regarding goods and/or services. The enquiry data may be processed for the purposes of offering, marketing and selling relevant goods and/or services to you. The legal basis for this processing is your consent for us to process your personal data for this purpose by submitting your enquiry to us.

Correspondence Data - We may process information contained in or relating to any communication that you send to us. The correspondence data may include the communication content and metadata associated with the communication. Our website will generate the metadata associated with communications made using the website contact forms. The correspondence data may be processed for the purposes of communicating with you and record-keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business and communications with users and clients.

Transaction Data - We may process information relating to transactions, including purchases of goods and services, that you enter into with us and/or through our website. The transaction data may include your contact details, and the transaction details. The transaction data may be processed for the purpose of supplying the purchased goods and services and keeping proper records of those transactions. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and our legitimate interests, namely our interest in the proper administration of our website and business.

Account Data - We may process your account data. The account data may include your name and email address or other contact information. The source of the account data is you. The account data may be processed for the purposes of operating our website, providing our goods or services, ensuring the security of our website and services, maintaining back-ups of our databases and communicating with you. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business, or the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract.

Service Data - We may process your personal data that are provided in the course of the use of our services. The service data may include name, email address or other contact information. The source of the service data is you. The service data may be processed for the purposes of operating our website, providing our products or services, ensuring the security of our website and services, maintaining back-ups of our databases and communicating with you. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business.

Notification Data - We may process information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters. The notification data may be processed for the purposes of sending you the relevant notifications and/or newsletters. The legal basis for this processing is your expressly given consent.

Usage Data - We may process data about your use of our website. The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is Google Analytics. This usage data may be processed for the purposes of analysing the use of our website and services. The legal basis for this processing is your consent, given by continuing to browse our website, and our legitimate interests, namely monitoring and improving our website and services. For more information, please see our 'cookies' page.

We may process any of your personal data identified in this policy where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.

We may process any of your personal data identified in this policy where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. The legal basis for this processing is our legitimate interests, namely the proper protection of our business against risks.

In addition to the specific purposes for which we may process your personal data set out here, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

Providing Your Personal Data To Others

We will not sell, distribute, lease or provide your personal data to third parties.

However, we may disclose your personally identifiable information if we reasonably believe we are required to do so by law, regulation, or in co-operation with any governmental investigation.

Payments made via our website are processed by PayPal, a third-party payment services provider. We do not collect or store credit card number information, as the processing is carried out on the third party's website. However, we may receive credit card-related information to help administer our accounts or process future payments, and summary information about transactions that does not include credit card or bank account numbers. You can find information about PayPal's privacy policies and practices at https://www.paypal.co.uk.

Retaining and Deleting Personal Data

Personal data that we process for any purpose shall not be kept for longer than is necessary for that purpose.

  • Personal data will be retained for a minimum period of one year following the date of our last interaction with the client, and for a maximum period of seven years following the date of our last interaction with the client.
  • In some cases it is not possible for us to specify in advance the periods for which your personal data will be retained. In such cases, the period of retention of personal data will be determined based on our assessment of when our relationship with the customer has ended.
  • Also please note that we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

Controlling Your Personal Data

You may choose to restrict the collection or use of your personal data in the following ways:

  • whenever you complete a form on our website, look for boxes or popup menus that give you the option to set your preferences for our newsletter or other marketing communications
  • if you have previously agreed to us using your personal data for our newsletter or other direct marketing purposes, you may change your mind at any time by writing to us, emailing us or contacting us

You may request details of the personal data which we hold about you. If you would like a copy of the personal data held on you, please contact us. Before releasing this information, we will need to see appropriate evidence of your identity (for this purpose, we will usually accept a photocopy of your passport certified by a solicitor or bank, plus an original copy of a utility bill showing your current address).

If you believe that any of the personal data we are holding on you is incorrect or incomplete, please contact us as soon as possible via this website. We will promptly correct any personal data found to be incorrect. You also have the right to restrict or object to our processing of your data, and can withdraw your consent for us to process your personal data, and ask to have the data we hold about you deleted, at any time.

If you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. In the UK this is The Information Commissioner's Office (ICO).

Security

We are committed to ensuring that your personal data is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the personal data we collect online.

Links To Other Websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any personal data which you provide whilst visiting such sites, and such sites are not governed by this privacy statement. You should exercise caution, and consult the privacy statement applicable to the website in question.

Client Comments and Testimonials

We occasionally share client comments we receive via our website. We do not publish any names or specific address information that may identify you.

How We Use Cookies

For information about cookies and our use of them, click here for our cookies information page.

Our Details

This website is owned and operated by: Totteridge Gallery

Our principal place of business is at: 74 High Street, Earls Colne, Colchester, Essex, CO6 2QX, England.

You can contact us:
(a) by post, to the postal address given above
(b) by using our website contact form
(c) by telephone, on 01787 220 075 or
(d) by email, using the email address found on any emails you receive from us

This Privacy and Data Protection Policy was updated in April 2018 in response to the requirements of the General Data Protection Regulation (GDPR).

TOTTERIDGE GALLERY
74 High Street, Earls Colne, Colchester, Essex, CO6 2QX, UK
Telephone 01787 220 075
Internet TotteridgeGallery.com