What data do we collect and where from?
We collect some data directly from you -
when you make a gallery booking with The Wooden Box Gallery,
sign up to be added to our mailing list
subscribe to our newsletter.
add your name & email address to our in gallery Visitors Book
leave your details with The Wooden Box Gallery staff to be contacted or added to our mailing list
email The Wooden Box Gallery with queries, complaints, comments or praise.
This data includes the following,
Your full name,
Your email address,
Your phone number if you chose to provide it.
We do not knowingly and specifically collect or use your Cookies when you visit The Wooden Box Gallery Website.
What do we use your data for?
It is important that you understand how and why we use the personal data that we collect about you. This section sets out the different purposes for which we process personal data.
1. Managing your booking
We use your personal data to set up, manage and administer your booking with The Wooden Box Gallery, our mailing list or newsletter and any other services that you request from us.
2. Email marketing
We will use your email address to send you email marketing (including our newsletter and competitions). You can opt out of receiving marketing emails at any time by following the instructions to unsubscribe in any of our email marketing communications.
What is our legal basis for using your data?
Data protection law says that we have to tell you the legal basis that we rely on to process your personal data for the purposes that we have notified to you. This section tells you what that legal basis is in relation to each of the purposes set out above.
We process your personal data for all of the purposes identified under What do we use your data for? above on the basis that it is in our legitimate interests to carry out these activities.
Purpose: Managing your booking
Legitimate interests: To ensure that The Wooden Box Gallery customers enjoy the best experience possible.
Purpose: Email marketing
Legitimate interests: To provide advertising that is relevant to you. In respect of the use of your email address for email marketing purposes, we process this on the basis that we have your consent to do so. You can withdraw your consent at any time by following the instructions to “unsubscribe” in any email marketing communications.
Freedom of information
We are required under the Freedom of Information Act 2000 to provide certain personal data in response to Freedom of Information requests. You can make a request by emailing firstname.lastname@example.org
Who do we share your data with?
The Wooden Box Gallery does not share your personal data with any other organisations.
How long do we keep your data?
The Wooden Box Gallery retains your personal data for as long as necessary to provide you with our services as described above. However, we may also be required to retain this data to comply with our legal and regulatory obligations, to resolve disputes, and to enforce agreements. We will keep your personal data for 20 years, or until The Wooden Box Gallery ceases trading or until you ask us to erase it (see section below).
What rights do you have?
You have a number of rights under data protection law. These rights and how you can exercise them are set out in this section. We will normally need to ask you for proof of your identity before we can respond to a request to exercise any of the rights in this section and we may need to ask you for more personal data, for example to help us to locate the personal data that your request relates to.
We will respond to any requests to exercise your rights as soon as we can and in any event within one month of receiving your request and any necessary proof of identity or further personal data. If your request is particularly difficult or complex, or if you have made a large volume of requests, we may take up to three months to respond. If this is the case we will let you know as soon as we can and explain why we need to take longer to respond.
A right to access your personal data.
You have a right to ask us to send you a copy of personal data that we hold about you (subject to some exceptions). A request to exercise this right is called a “subject access request” and must be made in writing to email@example.com
A right to object to us processing your personal data
A right to ask us not to market to you
You can ask us not to send you direct marketing or advertising. You can do this by using the “unsubscribe” option in any of our email marketing communications.
A right to have inaccurate data corrected
You have a right to ask us to correct inaccurate data that we hold about you. If we are satisfied that the new data you have provided is accurate, we will correct your personal data as soon as possible.
A right to have your data erased
A right to Confidentiality
All correspondence with The Wooden Box Gallery is treated with the utmost respect and confidentiality. We do not share your information, contact details or content of any emails, queries or complaints with any parties outside of The Wooden Box Gallery employee structure unless it is necessary to share non personal information to complete or answer your query. Where appropriate we look to use measures of pseudonymisation.
A right to financial safety
The Wooden Box Gallery currently uses Zettle to send invoices, take online payments and in gallery sales. Zettle is deemed authorised and regulated by the Financial Conduct Authority in the UK. Zettle is the data controller for your personal data and banking details which are used to process sales when you purchase items from The Wooden Box Gallery. The Wooden Box Gallery does not have access nor can store any of this personal information other than your name, transaction date and purchase amount for purposes of stock control and business accounting. Please email firstname.lastname@example.org for more information.
How can you contact us?
What if you have a complaint?
You have a right to complain to the Information Commissioner’s Officer (ICO), which regulates data protection compliance in the UK, if you are unhappy with how we have processed your personal data.
You can find out how to do this by visiting www.ico.org.uk
What if this policy changes?
The Wooden Box Gallery & Studio Ltd is registered in England and Wales. Company number 13546042
The Wooden Box Gallery & Studio Ltd is registered with the Information Commissioner's Office as part of the Data Protection Act 2018. www.ico.org.uk