Privacy Policy.

At The Wooden Box Gallery we are committed to keeping your personal data safe and secure, and handling it in accordance with our legal obligations.  This Privacy Policy sets out in detail the purposes for which we process your personal data, who we share it with, what rights you have in relation to that data and everything else we think it’s important for you to know.

What data do we collect and where from?

 

We collect some data directly from you -

  • when you make a gallery booking with The Wooden Box Gallery,

  • sign up to be added to our mailing list

  • subscribe to our newsletter.

  • add your name & email address to our in gallery Visitors Book

  • leave your details with The Wooden Box Gallery staff to be contacted or added to our mailing list

  • email The Wooden Box Gallery with queries, complaints, comments or praise.

 

This data includes the following,

  • Your full name,

  • Your email address,​

  • Your phone number if you chose to provide it.

 

We do not knowingly and specifically collect or use your Cookies when you visit The Wooden Box Gallery Website.

 

What do we use your data for?

 

It is important that you understand how and why we use the personal data that we collect about you.  This section sets out the different purposes for which we process personal data.

 

1. Managing your booking

 

We use your personal data to set up, manage and administer your booking with The Wooden Box Gallery, our mailing list or newsletter and any other services that you request from us.

 

2. Email marketing

 

We will use your email address to send you email marketing (including our newsletter and competitions).  You can opt out of receiving marketing emails at any time by following the instructions to unsubscribe in any of our email marketing communications.

 

What is our legal basis for using your data?

 

Data protection law says that we have to tell you the legal basis that we rely on to process your personal data for the purposes that we have notified to you.  This section tells you what that legal basis is in relation to each of the purposes set out above.

 

We process your personal data for all of the purposes identified under What do we use your data for?  above on the basis that it is in our legitimate interests to carry out these activities.

 

Purpose: Managing your booking

 

Legitimate interests: To ensure that The Wooden Box Gallery customers enjoy the best experience possible.

 

Purpose: Email marketing

 

Legitimate interests: To provide advertising that is relevant to you.  In respect of the use of your email address for email marketing purposes, we process this on the basis that we have your consent to do so.  You can withdraw your consent at any time by following the instructions to “unsubscribe” in any email marketing communications.

 

Freedom of information

 

We are required under the Freedom of Information Act 2000 to provide certain personal data in response to Freedom of Information requests.  You can make a request by emailing info@thewoodenboxgallery.com

 

Who do we share your data with?

 

The Wooden Box Gallery does not share your personal data with any other organisations.

 

How long do we keep your data?

 

The Wooden Box Gallery retains your personal data for as long as necessary to provide you with our services as described above. However, we may also be required to retain this data to comply with our legal and regulatory obligations, to resolve disputes, and to enforce agreements.  We will keep your personal data for 20 years, or until The Wooden Box Gallery ceases trading or until you ask us to erase it (see section below).

 

What rights do you have?

 

You have a number of rights under data protection law.  These rights and how you can exercise them are set out in this section.  We will normally need to ask you for proof of your identity before we can respond to a request to exercise any of the rights in this section and we may need to ask you for more personal data, for example to help us to locate the personal data that your request relates to.

 

We will respond to any requests to exercise your rights as soon as we can and in any event within one month of receiving your request and any necessary proof of identity or further personal data. If your request is particularly difficult or complex, or if you have made a large volume of requests, we may take up to three months to respond.  If this is the case we will let you know as soon as we can and explain why we need to take longer to respond.

 

A right to access your personal data.

 

You have a right to ask us to send you a copy of personal data that we hold about you (subject to some exceptions).  A request to exercise this right is called a “subject access request” and must be made in writing to info@thewoodenboxgallery.com

 

A right to object to us processing your personal data

 

You have a right to object to us processing any personal data that we process where we are relying on legitimate interests as the legal basis of our processing. This includes all of your personal data that we process for all of the purposes set out in this Privacy Policy, with the exception of our use of your email address to send you marketing communications with your consent (but you can withdraw your consent to this at any time).

 

A right to ask us not to market to you

 

You can ask us not to send you direct marketing or advertising.  You can do this by using the “unsubscribe” option in any of our email marketing communications.

 

A right to have inaccurate data corrected

 

You have a right to ask us to correct inaccurate data that we hold about you.  If we are satisfied that the new data you have provided is accurate, we will correct your personal data as soon as possible.

 

A right to have your data erased

 

You have a right to ask us to delete your personal data in certain circumstances, for example if we have processed your data unlawfully or if we no longer need the data for the purposes set out in this Privacy Policy.

A right to Confidentiality 

All correspondence with The Wooden Box Gallery is treated with the utmost respect and confidentiality.  We do not share your information, contact details or content of any emails, queries or complaints with any parties outside of The Wooden Box Gallery employee structure unless it is necessary to share non personal information to complete or answer your query.  Where appropriate we look to use measures of pseudonymisation. 

A right to financial safety

The Wooden Box Gallery currently uses Zettle to send invoices, take online payments and in gallery sales.  Zettle is deemed authorised and regulated by the Financial Conduct Authority in the UK. Zettle is the data controller for your personal data and banking details which are used to process sales when you purchase items from The Wooden Box Gallery.  The Wooden Box Gallery does not have access nor can store any of this personal information other than your name, transaction date and purchase amount for purposes of stock control and business accounting. Please email dataprotection@zettle.com for more information. 

 

How can you contact us?

 

If you have any questions or concerns about this Privacy Policy and/or our processing of your personal data, you can get in touch with us at info@thewoodenboxgallery.com

 

What if you have a complaint?

 

You have a right to complain to the Information Commissioner’s Officer (ICO), which regulates data protection compliance in the UK, if you are unhappy with how we have processed your personal data.

 

You can find out how to do this by visiting www.ico.org.uk 

 

What if this policy changes?

 

We may make changes to this Privacy Policy from time to time.  Any changes we make will be posted on this page. We may also notify you by email if significant changes are made.

 

 The Wooden Box Gallery & Studio Ltd is registered in England and Wales. Company number 13546042

The Wooden Box Gallery & Studio Ltd is registered with the Information Commissioner's Office as part of the Data Protection Act 2018.  www.ico.org.uk

The Wooden Box Gallery Privacy Policy last updated April 10th 2022 (RS)