Privacy Policy

1. Information We Collect

We may collect the following types of information:

• Contact Information: Name, email address, phone number, and postal address when you contact us or sign up for our newsletter
• Visit Information: Details about your visit to the gallery, including attendance at events and workshops
• Website Usage: Information about how you use our website, including pages visited and time spent on the site
• Communication Records: Records of correspondence when you contact us with inquiries or feedback

2. How We Use Your Information

We use your personal information for the following purposes:

• To respond to your inquiries and provide customer service
• To send you information about exhibitions, events, and programmes you may be interested in
• To improve our services and visitor experience
• To manage bookings for events, workshops, and educational programmes
• To comply with legal obligations and protect our rights
• To analyze visitor patterns and improve our website functionality

3. Legal Basis for Processing

We process your personal data based on:

• Consent: When you have given us clear consent to process your personal data for specific purposes
• Legitimate Interests: When processing is necessary for our legitimate interests in operating the gallery and improving our services
• Contractual Necessity: When processing is necessary to fulfill a contract with you
• Legal Obligation: When we are required to process your data to comply with the law

4. Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information with:

• Service Providers: Third-party service providers who assist us in operating our website and gallery services
• Creative and Culture Hartlepool: Our parent organization for administrative and operational purposes
• Legal Authorities: When required by law or to protect our rights and safety
• Event Partners: When you register for events organized in partnership with other organizations

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure servers and encrypted data transmission
• Access controls and authentication procedures
• Regular security assessments and updates
• Staff training on data protection and privacy

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• Contact inquiries: Retained for 2 years after last contact
• Newsletter subscriptions: Until you unsubscribe
• Event registrations: Retained for 3 years for record-keeping purposes
• Financial records: Retained for 7 years to comply with legal requirements

7. Your Rights

Under data protection law, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another organization
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details provided below.

8. Cookies

Our website may use cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us understand how you use our website. You can control cookie settings through your browser preferences.

9. Children's Privacy

We do not knowingly collect personal information from children under 16 without parental consent. If you believe we have collected information from a child without appropriate consent, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on our website with an updated "Last Updated" date.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

12. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:

Website: www.ico.org.uk

Helpline: 0303 123 1113