All information we hold on you is kept securely and confidentially as required by UK law, including that required by the EU General Data Protection Regulation (GDPR).
This policy applies to information held about clients and potential clients, suppliers and future suppliers, artists, contacts and all other persons about whom “Blackwater Gallery” holds information. By ‘information,’ we mean personal information about you that we collect, use, share and store.
Blackwater Gallery is a sole trading company under Tracing Direct Limited. Company address is registered at 21 St Andrews Crescent, Cardiff CF103DB. Company Number 6123256 VAT registered num 914862609.
This website is owned and operated by Blackwater Gallery.
We are committed to protect the privacy of our website visitors and service users, here we will explain how we will handle your personal data.
Information we collect:
Your name, contact information such as your address, email address and telephone number;
Your payment details / financial data i.e. your bank name, account number and sort code;
Information related to your attendance of, and interest in, Blackwater Gallery events, exhibitions and future art fairs. The information about you that you give us in person at our gallery or via visiting our website www.blackwatergallery.co.uk (e.g. to sign up to our mailing list) or by corresponding with us by phone, email or otherwise; and information in relation to your purchase of our art work or use of our services.
Occasionally we may receive information about you from other sources (such as credit reference agencies) which we will add to the information which we already hold about you in order to help us
How we use your personal data:
We may operate information contained in any enquiry you submit to us regarding art works and services (“Enquiry Data”). This enquiry data may be processed for the purposes of offering marketing and selling relevant art works and services to you. The legal basis for this processing is consent.
We may operate information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters (“Notification Data”). This notification data may be processed for the purposes of sending you relevant notifications and newsletters for your interest. The legal basis for this processing is consent.
Unless you have asked us not to do so , we may contact you by post, telephone, SMS, or email about marketing and selling relevant art works and services to you services, promotions, special offers, charitable causes which may be of interest to you. If you prefer not to receive any direct marketing communications from us, you can opt out at any time. See further Your rights below.
We may operate your personal data via service data and account data. Service data and account data may include both company and personal information. The service data may be processed for the purposes of operating our website, providing our services, ensuring the security of our website and services and maintain back-ups of our databases and communicating with you. The legal basis for this processing is of our interest for administration of our website and business.
We may process information that you post for publication on our website or through our services. Publication data may be processed for the purposes of enabling such publication and administering our website and services. The legal basis for this processing is of our interest for administration of our website and business.
We may operate information contained in communication that you send to us, this will be in the means of correspondence data. Correspondence data may include the communication content and metadata. Our website will generate the metadata associated with communications made using the website contact forms. Correspondence data maybe processed for the purposes of communicating with you and record keeping. The legal basis for this processing is of our interest for administration of our website and business and communications with users.
We will use your personal data for the purposes of automated decision making. This automated decision making will involve marketing personalisation across our website and other market communications such as email.
Providing us this information will help us trailor fit your browsing experience, keep you informed about the art work, artists and exhibitions we think you’ll be interested in. We make sure to keep our website safe and secure, comply with legal and regulatory obligations and for security to check your identity.
Legal basis for processing your personal information is in order to comply with a legal obligation to which we are subject too. In connection to any processing of personal data, we generally rely on obtaining specific consent from you.
recognise you whenever you visit this website (this speeds up your access to the site as you do not have to log on each time)
obtain information about your preferences, online movements and use of the internet
carry out research and statistical analysis to help improve our content, [products and services] and to help us better understand our customer requirements and interests
target our marketing and advertising more effectively by providing interest-based advertisements that are personalised to your interests
make your online experience more efficient and enjoyable.
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.
Personal information you provide to us may be shared with third party companies, agents, contractors, service providers or affiliated companies if this is necessary to provide you with our art work or services, respond to your inquiries or for any of the purposes described in this policy. It is important to note we may also share your personal information with law enforcement agencies, other governmental agencies or third parties if we are required by law to do so; and other business entities should we plan to merge with or be acquired by that business entity, or if we undergo a re-organisation with that entity.
International transfers of your personal data:
We and our group companies have offices and facilities in the United Kingdom. The European Commission has made an “adequacy decision” with respect to the data protection laws of each of these countries. Transfers to each of these countries will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission.
All of our marketing and sales subcontractors are situated in the United Kingdom. Transfers to each of these countries will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission.
Your personal information may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”) and may also be processed by staff operating outside the EEA who work for us, or for one of our service providers.
When we, or our permitted third parties, transfer your information outside the European Economic Area, we or they will impose obligations on the recipients of that data to protect your information to the standard required in the European Economic Area or otherwise require the recipient to subscribe to international frameworks intended to enable secure data sharing. In the case of transfers by us, we may also transfer your information where: (i) the transfer is to a country deemed to provide adequate protection of your information by the European Commission; or (ii) where you have consented to the transfer.
Here you acknowledge that personal data that you submit for publication through our website or services maybe available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal data by others.
Retaining and deleting personal data:
Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
Your personal data will be retained for 3 years following the date and time of your last interaction with our website or business, at the end of which period it will be deleted from our system.
In some cases it is not possible for us to specify in advance the periods of which your personal data will be retained. We determine that the period of retention of personal data will be determined on your interaction with our website or business.
Security of personal data:
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
We will use technical and organisational measures to safeguard your personal data, for example:
- access to your account is controlled by password and username which are unique to you
- we store your personal data on secure servers
- payment details are encrypted using SSL technology
Whilst we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data which are transferred from you or to you via the internet.
We may update our policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure you are happy with any changes to this policy.
Questions, comments and requests regarding this policy are welcomed and should be addressed to email@example.com.
If you have any concerns about our use of your information, you also have the right (as a UK resident) to make a complaint to the Information Commissioner’s Office, which regulates and supervises the use of personal data in the UK, via their helpline on 0303 123 1113.
It is important to note that at any time, you have the right:
- To request access to or a copy of any personal data which we hold about you.
- To rectification of your personal data, if you consider that the information we are holding is inaccurate.
- To ask us to delete your personal data, if you consider that we do not have the right to hold it.
- To withdraw consent to our processing of your personal data (to the extent such processing is based on previously obtained consent).
- To ask us to stop or start sending you marketing messages as described below in the marketing section.
- To restrict processing of your personal data.
- To data portability (moving some of your personal data elsewhere) in certain circumstances.
- To object to your personal data being processed in certain circumstances and to not be subject to a decision based on automated processing and to have safeguards put in place if you are being profiled based on your personal data.
Any request from you for access to or a copy of your personal data must be in writing and we will endeavour to respond within a reasonable period and in any event within one month in compliance with data protection legislation. We will comply with our legal obligations as regards your rights as a data subject.
We aim to ensure that the information we hold about you is accurate at all times. To assist us in ensuring that your information is up to date, do let us know if any of your personal details change at the following email address firstname.lastname@example.org.
Third Party websites:
Personal data of children:
We govern it is the responsibility of guardians to deem what is fit to browse on our website from the ages of 18 under. Our website and services are targeted at persons over the age of 18.
Right to Deletion
If you would like to have information relating to you deleted from our records, please contact us on email@example.com. We may also ask for written documentation here also. You will always have the chance of unsubscribing from our website at any time. In such circumstances both parties will be notified via email and a courtesy final email will be sent to the client. We are required to retain certain transactional data for financial record keeping.
Blackwater Gallery, Pendeen House, Prospect Place, Cardiff CF11 0AW.
Telephone 02920 349 819