Privacy Police

As a professional UK business we care about our customer’s data. To help us to operate our business and serve our customers we require personal data.

Our Privacy Policy will explain to you what data we retain, how we use this data within our business, where this data will be distributed and why we require personal data to serve our customers.

It is worded to comply with UK and EU laws and regulations such as the General Data Protection Regulations (GDPR). If you do not understand anything in our policy and have a query please do get in touch and we will be happy to answer your questions further.

Who or what is galleryshopco.com?

İs the e-commerce website for GALLERY SHOP CO LTD, based in London, United Kingdom. GALLERY SHOP CO LTD also trades under the following website addresses:

Within this privacy policy, any reference to ‘galleryshopco’, ‘us’ or ‘we’ refers to GALLERY SHOP CO LTD., its subsidiaries and any websites under its ownership or control.

For the purposes of our Privacy Policy and the use of our websites, the Data Controller is GALLERY SHOP CO LTD.

What law, jurisdiction and terms does galleryshopco work within?

Wherever you buy from us, our contract of sale is tied to the law of England and Wales. We of course will comply with all local laws regarding the sale of goods.

Compliance with the Law – Legal Compliance

In some instances the law may require us to process your personal data, to protect our customers, and our business. We screen our orders to help prevent payment fraud, to protect our genuine customers and those targeted by fraudsters.

Legal Consent

We are UK based and follow the GDPR (General Data Protection Regulations). This means in the course of conducting business we will in certain situations collect data and process it, with your consent. For example, when you are signed up to our email newsletters and/or SMS notifications, and you choose not to opt out of these communications.

Processing Orders – Contractual Obligations

For us to process your order fully and within the law, we need a customer’s personal data to adhere to any contractual obligations.

All of our orders are shipped from our warehouse using a variety of couriers. We will need to pass your name and address information to that courier for them to deliver your order to you.

Use of your data due to Legitimate Interest

As a commercial business, we may utilise your data to conduct business of a legitimate interest to you, which will not affect your statutory rights, or impact your freedom to request further information or easy deletion of this data. This may mean that we might contact you to make tailored offers based on your past history with us. We may also aggregate this data to help us make business decisions about new and existing products and services. The data may also be used to help provide a customised online advertising experience in your browser on various devices.

How or Where Do We Collect Personal Data?

We collect data when you make a purchase from us online or via our customer service centre by phone. If you checkout as a guest, we will only retain the data required to process your transaction. We will use and collect your data when you create a website account – whether you proceed to purchase or not. Your personal data will be collected when you enter a competition or draw via our website, social media or at an event. We will collect data about you when you engage with us on social media. Data will be collected when you write a product review on our website or comment on an existing review, or answer a question on a product page. When you contact our customer service department to resolve a query or complaint we will collect and utilise your data. When you have expressly given a third party permission to share your data with us we may do so. We will not contact you without this consent if we do not have a Legitimate Interest to rightfully do so.

What Data Do You Collect?

We retain the information requested on the customer or guest checkout on our website – Name, Gender, Date of Birth, Billing and Delivery Address, your Email Address, your Mobile Phone number, and any other contact Telephone Number. We will note any transaction number alongside this. We do NOT retain payment details.
We may need to request additional ID for anti-fraud or money laundering purposes, and will request this data from you.

We will retain your social media username details when you interact with us via these channels so that we can respond to any queries you might have. We will retain any information requested and offered when contacting us via our customer service centre either by phone, SMS, email or the contact form on the website. We will collect details of your interactions with us on our websites, including your preferences determined from your browsing and shopping behaviour. For example we will collect the products you have browsed or pages you visited to offer an improved shopping experience and send you a shopping basket reminder if deemed appropriate and useful. Further, we collect information about your browser, location and the type of device you use to offer the best online shopping experience possible. To do this we will use cookies, which help our website work correctly. For full details on this you can view our Cookie Policy.
The website also uses cookies to help keep track of items you put into your shopping cart including when you have abandoned your cart and this information is used to determine when to send cart reminder messages via SMS. The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

How and for how long will your data be used?

We only use your data to help you with your shopping experience. Your data will enable us to provide a more personalised shopping experience on our website and through our online digital advertising.

You have the right to request that we do not share this data with you under the GDPR legislation. You also have the right to use third-party software such as cookie blockers in your browser.

Please note that by doing this our website may no longer function properly and may prevent you from ordering securely.

We will use your data to fulfil your order, deal with complaints and process refunds. We are also legally obliged to keep data for a reasonable period in order to fulfil our warranty obligations and to carry out product consultations and recalls to ensure the safety of our customers. For most products this is 5 years for legal purposes. For some products this may be extended to 10 years.

Your data will be kept for at least the end of a specified warranty period. If you ask us to remove your data we are obliged to do so, however this may affect the ease of making any warranty claims such as proof of purchase history.

Where we ask and have your consent, we will use your data and purchase history to inform you about relevant promotions, news and services. We will never pass on your details to a third party for use in this way. You can opt out at any time by clicking on the link in any marketing email we send or by updating your preferences through our website.

We may use your data in conjunction with cookies, which we will use with your consent to update your visual experience on our website to deliver more relevant results.

We will use your data to protect our business AND your account from fraud and other illegal activity.

We log customers’ IP addresses when they log into their accounts to detect potentially fraudulent activity from an unknown or unrelated location.

We will only share your data with law enforcement authorities when we are legally required to do so and when the right legal process to request this data has been met.

Currency Conversion

By using our website, you (the visitor) agree to allow third parties to process your IP address, in order to determine your location for the purpose of currency conversion. You also agree to have that currency stored in a session cookie in your browser (a temporary cookie which gets automatically removed when you close your browser). We do this in order for the selected currency to remain selected and consistent when browsing our website so that the prices can convert to your (the visitor) local currency.

Who Will You Share Personal Data With?

We will only share your data with trusted third parties, who in turn are responsible for complying with the law and GDPR when utilising your data.

The data we share will only be for the purposes of conducting its business with you, and will never be shared with third parties for their own businesses purposes without your own direct and clear consent. If we cease working with such a third party any data will be rendered anonymous or deleted for our customer’s protection.

The third parties we will work with conducting our business are as follows:

Delivery companies to ensure your orders are correctly delivered as per your instructions.
Our IT platform provider who support our website and internal systems.

Direct marketing companies such as our email platform, and online shopping advertising, who help us to manage our communications with you via your internet experience, email and SMS. This includes Google. Please see Google’s Privacy & Terms site here.

How Do We Ensure The Protection of Your Data?

We treat the security of your data with the utmost importance. Our first step is to only request and retain data that is essential for the management of your business with ourselves and to ensure we give you the best experience. Our website is “HTTPS” secure ensuring the padlock symbol is visible in your browser for your piece of mind.
Payment details are not stored on our servers or within the business by other means, and are transformed into tokens so that they cannot be compromised. All access to your data is limited within the business to those who require it to process your order or query, and we have an internal data protection officer who regularly assesses the permitted access to your data, what data is retained, and how we can ensure that it is protected at all times.

What Can I Do About The Data You Hold About Me?

We will only use your data with your consent. This may be through opting in to receive information via digital formats, by post or phone.

Additionally when placing an order with us you are as per our terms and conditions permitting us to utilise your data to fulfil your order and process any queries you may have. As per UK law and EU data protection regulations including GDPR you have the following rights:

To request access to the personal data we have held about you

To request to be unsubscribed from receiving marketing information

To ask us to update your information when it is incorrect

To withdraw consent for us to process your data by making a request, even if you have freely given consent previously

If you wish to amend your data at any time, you can do this via your account on our website if you have one, or if you can visit our update your preferences page and complete the form if you do not have an active account with us.

You can also contact galleryshopco customer services at [email protected]. If you have any questions regarding your personal data.

To stop receiving direct marketing emails from us, you can click on the “unsubscribe” link on any email we send to you – it will normally be located in the footer of the email. To stop receiving SMS messages from us, please follow the instructions contained within the SMS message you receive. Alternatively you can contact our customer services team and they can action either your email or SMS unsubscription for you. You cannot update this preference in the “my account” section of our website, because your email address is your login, but we can manually amend this for you. Please allow 48 hours after doing so for the change on our email/SMS system to take effect. If you would like to request a copy of any information we are holding on our system, you can make a requests in writing to The Data Protection Officer, GALLERY SHOP CO LTD, 1164 Leigh Hunt Drive, London. N14 6DQ

Who Do I Contact If I Have a Concern Or Complaint?

In the first instance please do contact us if you have any concerns over the use of your data and the application of our Privacy Policy. Our Data Protection Officer is here to ensure we treat your data with care and correctly within current regulations.

If you are unhappy with our handling of any requests you make regarding your personal data and you are resident in the UK or EU, you can make a formal complaint with the Information Commissioner’s Office (ICO).

They can be contacted by phone: 0303 123 1113 or you can visit them online at
https://ico.org.uk/concerns

What If I Still Have A Question?

If you have any questions that are not addressed by our Privacy Policy you can contact the Data Protection Officer here at galleryshopco. You can email us at [email protected] or write to
us at:

The Data Protection Officer,
GALLERY SHOP CO LTD,
164 Leigh Hunt Drive,
London.
N14 6DQ