See the full Terms and Conditions
1. WHO IS RESPONSIBLE FOR YOUR DATA
We control the ways your personal data is collected and the purposes for which your personal data is used by York Fine Arts. As such, for the purposes of the UK Data Protection Act 1998, EU General Data Protection Regulation (GDPR), PCI-DSS, and European data protection legislation, York Fine Arts is the “data controller”.
2. LAWFUL BASIS FOR PROCESSING YOUR DATA
The law on data protection sets out several reasons for which a company may collect and process your personal data. Those relevant to York Fine Arts include:
Legal Obligations: York Fine Arts may collect or process your personal data if required to do so in accordance with our legal obligations laid down by European Union law (where relevant) and by English Laws applicable to us in the United Kingdom. In the case that we are required by law to disclose your personal data, the gallery would do so only with the assurance that such an action was necessary in complying with judicial proceeding, a court order or legal process.
If the lawful basis for processing your data changes, this policy will be updated.
3. LENGTH OF CONSENT AND HOW LONG WE KEEP YOUR PERSONAL DATA
Your consent will be an explicit action from 25th May 2018. Because of the need for consent, you will not receive our monthly email newsletter by default as part of a sales transaction; you will only be subscribed to our monthly email newsletter if you give written or verbal consent to do so. You may withdraw your consent at any time in person, by clicking the ‘unsubscribe’ link on the newsletter, by telephoning 01904 634221 or by emailing firstname.lastname@example.org.
We will keep your given consent on file for a period of up to 5 years from the last change before checking your consent is still valid. If you have not withdrawn your consent within this period, we will write to you by email or post at 5 years with a statement of consent and your current preferences. If we receive no reply to this statement, we will take that your granting of consent is still valid.
4. PERSONAL DATA WE COLLECT ABOUT YOU
We collect some personal data from you, for example when you purchase from us, use our website, use our services or contact us. Other examples include:
Accident book registers. If an accident occurs in one of our galleries, a member of staff may record your personal data as required by the law.
Sensitive personal data: Information that could reveal your racial or ethnic origin, physical or mental health, religious beliefs or alleged commission or conviction of criminal offences is considered “sensitive personal data” under the UK Data Protection Act 1998 and other data protection laws. We do not collect this data.
5. HOW AND WHY WE USE YOUR PERSONAL DATA
We want to give you the best possible experience at York Fine Arts. One way to achieve this is to combine the data we have about you so we can find out what you like and how you use our services. We then use this information to offer you artwork and services that are most likely to interest you. The data privacy law allows this as part of our legitimate interest in understanding our customers and providing the highest levels of service.
Remember, if you choose not to share your personal data with us, or refuse certain contact permissions, we might not be able to provide some services you’ve asked for. For example, if you’ve asked us to let you know when work by a specific artist becomes available, we can’t do that if you’ve withdrawn your general consent to hear from us.
We use your personal data for the following purposes:
When you seek advice or purchase from us in store or online, we use your information to perform our services in relation to your purchase or enquiry, for example to provide you with artwork, tailor specific advice to your enquiry or arrange delivery of artwork and home viewing appointments.
We may need to contact you by email and/or telephone for administrative or operational reasons, for example in order to send you confirmation of your purchases and your payments, to inform you about your delivery or home viewings, to notify you when requested artwork is available or to advise you of disruption and changes to your home viewings and deliveries.
Please be aware that these communications are not for marketing purposes and as such, you will continue to receive them even if you opt-out from receiving marketing communications.
We will also use your personal data if we contact you after you have sent us a request, filled in a web-form through our website or contacted us on social media.
We may use your personal data in order to tailor our services to your needs and preferences and to provide you with a personalised customer experience as a part of our legitimate business interests. For example, if you inform us about your preferred artists or styles of artwork, we will be able to send you news, updates and availability relevant to these interests.
We may also collect information on how you use our website, which pages of our website you visit most, which artists or categories you search for and what artwork you buy, in order to understand what you like. We may use this information to tailor the available content about artwork, artists and services on our website as a part of our legitimate business interests.
If you are in the process of making a purchase and you leave our website before your order has been placed, we may contact you in order to help you easily complete your purchase.
If you have previously purchased artwork from the gallery or have registered your interest in specific artists, artwork or exhibitions, we may send you marketing communications from time to time as a part of our legitimate business interests.
Please note that under no circumstances will we share your contact details and other personal data with other companies for marketing purposes.
If you do not want to receive marketing communications from us, you can simply tell us so at any time by telephoning 01904 634221, emailing email@example.com or by submitting an ‘Update My Marketing Preferences’ form on our website. We ask that you allow 5 working days to complete any unsubscribe request.
The business purposes for which we will use your information include accounting, billing and audit, credit or other payment card verification, fraud screening, security and legal purposes, statistical and marketing analysis, systems testing, maintenance and development.
For example, our obligation to provide your information to local police agencies and law enforcement.
6. YOUR RIGHTS AND REQUESTING ACCESS TO YOUR PERSONAL DATA
You have a right to request access to the personal data that we hold about you. This could include purchase information relating to products and services. You also have the right to request:
You can contact us to request to exercise these rights at any time by calling 01904 634221 or emailing firstname.lastname@example.org.
7. RIGHT TO BE FORGOTTEN
You have a right to be forgotten and have data erased and/or stop being processed where the personal data is no longer necessary for the purpose of collection, you withdraw consent, when you object to the processing or to comply with a legal obligation.
We will not erase your records as we need to maintain your transactional data for our legal obligations to the local tax and revenue authorities. What we will undertake is to anonymise your records, overwriting your personal data with fictional names, addresses and emails. Once this has been done it will be impossible to restore a single customer, and a new customer registration will be required.
8. RIGHT TO RESTRICT PROCESSING
You have a right for your personal data to be stored but not processed. This is achieved through the withdrawal of consent.
9. HOW WE PROTECT YOUR PERSONAL DATA
We are committed to taking appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage to personal data. When you provide your personal data through our website, this information is transmitted across the internet securely using high-grade encryption. SSL?
Furthermore, York Fine Arts is a PCI DSS compliant organisation. This means that we adhere to high security standards in order to protect your payment card details when you are sending us this information.
We may in some instances disclose your personal data to third parties, for example to our couriers in the event of delivery. In these instances, we require that third party to have appropriate technical and organisational measures in place to protect your personal data; however, in some instances we may be compelled by law to disclose your personal data to a third party such as a local police agency, and have limited control over how it is protected by that party.
10. COOKIES OR OTHER TRACKING TECHNOLOGIES
11. SHARING YOUR PERSONAL DATA
We may also share some of your personal data with, or obtain your personal data from, the following categories of third parties:
Authorities: We may disclose your personal data when this is required by the law of any jurisdiction to which York Fine Arts may be subject.
12. CHILDREN’S PRIVACY
We will not knowingly collect or use the personal information of persons under the age of eighteen years old. If we come to learn that we have done so, we will wipe any such information from our database with immediate effect.
14. CONTACT INFORMATION
See the full Terms and Conditions
We look forward to seeing you soon.