This Privacy Policy governs the manner in which M P Gallery Limited collects, uses, maintains, and discloses information collected from customers of M P Gallery Limited. We are fully adherent to the GDPR European policy guidelines.

The types of personal data that M P Gallery Limited (We) may be required to handle include information about current, past and prospective users of our website and other systems. The personal data, which may be held on paper or on a computer or other media, is subject to certain legal safeguards specified in the Data Protection Act 1998 and the General Data Protection Regulation (GDPR) (unless and until the GDPR is not applicable in the UK), each as amended and/or updated from time to time, and other regulations (Data Protection Legislation).

This policy sets out the basis on which we will process any personal data we collect from data subjects, or that is provided to us by data subjects or other sources.

The Data Protection Compliance Manager is responsible for ensuring compliance with the Data Protection Legislation and with this policy. That post is held by Paul Burgess, 01206 560395, [email protected]. Any questions about the operation of this policy or any concerns that the policy has not been followed should be referred in the first instance to the Data Protection Compliance Manager.

Everyone has rights with regard to the way in which their personal data in handled. During the course of our activities we will collect, store and process personal data about our customers, suppliers and other third parties, and we recognise that the correct and lawful treatment of this data will maintain confidence in our organisation

Definition of Data Protection Terms

Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Data is information which is stored electronically, on a computer, or in certain paper-based filing systems.

Data subjects for the purpose of this policy include all living individuals about whom we hold personal data. A data subject need not be a UK or an EEA national or resident. All data subjects have legal rights in relation to their personal information.

Data controllers are the people who or organisations which determine the purposes for which, and the manner in which, any personal data is processed. They are responsible for establishing practices and policies in line with the Data Protection Legislation. When we provide website hosting and connected services, our client is the data controller.

Data users are those of our employees and contractors whose work involves processing personal data. Data users must protect the data they handle in accordance with this data protection policy and any applicable data security procedures at all times.

Data processors include any person or organisation that is not a data user that processes personal data on behalf of a data controller or on its instructions. Employees of data controllers are excluded from this definition but it could include suppliers which handle personal data on the data controller’s behalf. When we provide website hosting and connected services, we are the data processor.

Personal data means data relating to a living individual who can be identified from that data (or from that data and other information in our possession). Personal data can be factual (for example, a name, address or date of birth) or it can be an opinion about that person, their actions and behaviour.

Personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

Processing is any activity that involves use of the data. It includes obtaining, recording or holding the data, or carrying out any operation or set of operations on the data including organising, amending, retrieving, using, disclosing, erasing or destroying it. Processing also includes transferring personal data to third parties.

Personal identification information

We may collect personal identification information from customers in a variety of ways, including, but not limited to, when customers visit us in store, register on the Website, subscribe to the newsletter, and in connection with other activities, services, features or resources we make available on our Website.

Customers may be asked for, as appropriate, name, email address, contact telephone number. We will collect personal identification information from customers only if they voluntarily submit such information to us. Customers can always refuse to supply personal identification information, except that it may prevent them from engaging in certain Website related activities. A customer may opt-out, remove or amend their registered details at any time through our Website https://www.mpgallery.co.uk/my-account/ or contacting us at the gallery.

Right to Access, Correct and Delete Data and to Object to Data Processing

Our customers have the right to access, correct and delete personal data relating to them, and to object to the processing of such data, by addressing a written request, at any time. The Company makes every effort to put in place suitable precautions to safeguard the security and privacy of personal data, and to prevent it from being altered, corrupted, destroyed or accessed by unauthorized third parties. However, the Company does not control each and every risk related to the use of the Internet, and therefore warns the Site users of the potential risks involved in the functioning and use of the Internet.

Management of Personal Data

WE DO NOT STORE CARD DETAILS NOR DO WE SHARE CUSTOMER DETAILS WITH ANY 3RD PARTIES

When you share your personal information with us, you have a right to expect your information is treated with total confidentiality. It is our responsibility to manage your personal data that you provide to us with care and in accordance with all data protection legislation and industry best practice.

Whether you have supplied your personal details in person, online, by phone, or by email, we will never use them without a lawful reason to do so set out in the Data Protection Legislation. We will use your personal data for the purposes for which they were initially requested and as fully explained in this Privacy Policy.

It is your responsibility to ensure that your personal data provided to us is accurate and up to date. You can update your personal contact details, including email address and phone number, by visiting My Account online or, if you need to update any other personal details, by contacting us at the gallery on 01206 560395.

Web browser cookies

Our Site may use “cookies” to enhance customer experience. Customer’s web browser places cookies on their hard drive for record-keeping purposes and sometimes to track information about them. User may choose to set their web browser to refuse cookies, or to alert you when cookies are being sent. If they do so, note that some parts of the Website may not function properly.

How we use collected information

M P Gallery Limited may collect and use customers personal information for the following purposes:

• - To improve customer service
  Information you provide helps us respond to your customer service requests and support needs more efficiently.
• - To personalize user experience
  We may use information in the aggregate to understand how our customers as a group use the services and resources provided on our Site.
• - To improve our Website
  We may use feedback you provide to improve our products and services.
• - To run a promotion, contest, survey or other Website feature
  To send customers information they agreed to receive about topics we think will be of interest to them.
• - To send periodic emails

We may use the email address to send customer information and updates pertaining to their order. It may also be used to respond to their inquiries, questions, and/or other requests. If a customer decides to opt-in to our mailing list, they will receive emails that may include company news, updates, related product or service information, etc. If at any time the customer would like to unsubscribe from receiving future emails, the customer may contact us via our Website or at the gallery on 01206 560395.

Accuracy

We will ensure that personal data we hold is accurate and kept up to date. We will check the accuracy of any personal data at the point of collection and at regular intervals afterwards. We will take all reasonable steps to destroy or amend inaccurate or out-of-date data.

How we protect your information

We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal information, username, password, transaction information and data stored on our Site.

We will put in place procedures to maintain the security of all personal data in all forms from collection to destruction.

Sharing your personal information

We do not sell, trade, or rent customers personal identification information to others. We may use third party service providers to help us operate our business and the Website. We may share your information with these third parties for those limited purposes provided that you have given us your permission.

Changes to this privacy policy

M P Gallery Limited has the discretion to update this privacy policy at any time. When we do, we will revise the updated date at the bottom of this page. We encourage customers to frequently check this page for any changes to stay informed about how we are helping to protect the personal information we collect. You acknowledge and agree that it is your responsibility to review this privacy policy periodically and become aware of modifications.

Your acceptance of these terms

By using this Website, you signify your acceptance of this policy and terms of service. If you do not agree to this policy, please do not use our Website. Your continued use of the Website following the posting of changes to this policy will be deemed your acceptance of those changes.

Contacting us

You may get in touch with M P Gallery Limited by using the contact form on our website https://www.mpgallery.co.uk/contact/, calling us on 01206 560395 or writing to us at the following address:

Mr P Burgess
M P Gallery Limited
21 Sir Isaacs Walk
Colchester
ESSEX
CO1 1JJ