WHO WE ARE AND WHAT WE DO
Art in the Frame Ltd runs The Harbour Gallery Jersey in St Aubin, a not for profit organisation that is the window to the Art in the Frame Foundation Jersey charity number 21.
The law on data protection sets out a number of reasons for which a company may collect and process your personal data including;
Consent – in specific situations we can collect and process data with your consent, for example when you tick a box or respond via Facebook to receive our email letters.
Contractual Obligations – in certain circumstances we need your personal data to comply with our contractual obligations. For example, if you order an item via our website or from the Gallery we will collect your address details to make the delivery.
Legal Compliance – if the law requires us to we may need to collect and process your data. For example details of people involved in fraud or other criminal activity affecting the Art in the Frame given to law enforcement.
Legitimate Interest – in specific situations we require your data to pursue the legitimate running of the business. For example we will hold bank details to process sales payments.
WHEN WE COLLECT PERSONAL DATA AND WHAT DATA WE COLLECT
When an item is purchased via the website.
When you sign up to receive the weekly newsletter.
When you sign up for a workshop or course.
Contact telephone number
When you enter into a contractual relationship with the Gallery to sell work.
Bank account details
Record of sales
Business address and social media
Purchase of Goods and Services via card payment
We use a third party First Data Merchant Services to process our card payments. This intermediary is not permitted to use your billing information for any purpose other than card processing on our behalf.
HOW WE USE YOUR DATA AND WHY
To process any orders via our website.
To respond to any queries from exhibiting artists and customers. We may keep records of emails for a certain amount of time to enable us to respond to queries at a later date.
To process payments for sale of work, payment of supplier invoices in keeping with the nature of the business of the Gallery and Art in the Frame.
To send out our weekly newsletters to keep you up to date on events and workshops and upcoming exhibitions, events, new artists and products available to buy in store or online. Newsletters are only sent on receipt of consent to do so.
HOW WE PROTECT YOUR PERSONAL DATA
We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and a subject to a duty of confidentiality. Access to your data is password protected.
We secure access to all transactional areas of our website using ‘https’ technology. The website does not have cookies or social media plugins.
Bank details are only stored on the Lloyds internet Banking secure site.
Product details including in some cases names and addresses are stored in our MiniPos system which is password protected.
Sales reports and some personal data is stored on secure and encrypted cloud storage. Paper copies of goods in and sales reports are kept in a locked filing cabinet in the Office and are held for two years.
HOW LONG WE KEEP YOUR PERSONAL DATA
Whenever we collect your personal data it is kept for as long as required for the purpose of the business of the Harbour Gallery.
WHO DO WE SHARE YOUR PERSONAL DATA WITH?
Personal data is not given out to third parties unless that data is readily available by other means. For example business cards, websites.
Requests for personal data are referred back to you first. For example a customer query or special order we liaise with you and not give out any personal details unless already publicised.
WHAT ARE YOUR RIGHTS OVER YOUR PERSONAL DATA?
You have the right to :
Request access to the personal data we hold about you.
The correction of your personal data when incorrect or out of date.
That we stop any consent bases processing of your data after you withdraw your consent.
Withdraw consent for us to use your personal data.
Make a complaint to a supervisory authority if you are not happy with the way Art in the Frame manages your personal data.
You can contact to request to exercise these rights at any time by email to firstname.lastname@example.org or by telephone to the Harbour Gallery 01534 743044. We will need you to verify your identity if needed to protect your confidentiality when you make a request.
In the event of a data breach, a report will be made to the Data Protection Authority within 72 hours of us becoming aware of the breach. If it poses a risk of discrimination, damage to reputation, financial loss or loss of confidentiality, you will be contacted and we will act on the instruction of the Data Protection Authority.