Privacy Policy
6th of June 2019 (Version 1)
1. About this policy
This is the privacy policy of IvyGo Art, which sets out our policy in relation to data and information I collect and use in relation to my visitors and customers . IvyGo Art keeps your data confidential and only use it and share it as detailed in this privacy policy. IvyGo Art will comply with the Data Protection Act 1998 and the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) in relation to your data. We do not sell your data to third parties.
2. About us
IvyGo Art is a private company registered in England, our details can be found on the website
3. How to contact us
To contact us, please write to ivygoart
4. What types of data IvyGo Art holds about you
The data and information I hold and process about you consists of the following:
a. Information about you:
• Your name
• Your contact details, including address, telephone, mobile, fax, own website, and e-mail.
b. Information relating to your orders
• Your purchase transactions
• Your purchase orders
• Your payment information and payment history
• Order delivery, fulfilment and returns information.
c. Administration Information
• Communications between you and IvyGo Art, including queries, problems, support, and survey responses, and including via e-mails, web-forms, and telephone.
5. How IvyGo Art obtains your data
IvyGo Art obtains your data through a variety of means, including:
a. Forms you fill in / data you provide.
• From forms which you complete and submit on IvyGo Art website
• From printed forms which you obtain from IvyGo Art website or us
• Data IvyGo Art collects face-to-face, or by means of e-mail or telephone
b. Other information you supply
• From any other information you supply from time to time, including through telephone calls, emails and other communications between you and IvyGo Art.
• From any information supplied by other customers.
c. Generated Information
• From information generated by IvyGo Art as a result of dealings, transactions and communications with you, including supplying any goods or services to you, providing the functionality of IvyGo Art website, operating competitions, and dealing with queries, support requests and complaints.
6. Data uses
IvyGo Art uses your data for the following operational purposes:-
a. Operate and improve IvyGo Art website
• To provide our website and its features and functionality.
• To analyse the performance of and improve our website.
• To keep you informed with status or other administrative notices.
b. Supply of goods and services
• To perform each order from you for the supply of goods and services.
• To collect payments due from you.
c. Provision of membership accounts
• To provide, administer and manage your accounts and the associated services included in those accounts.
• To collect payment of all account fees.
• To pay commission on sales to artists.
d. General administration
• To monitor our staff.
• To communicate with you for administrative and support purposes.
• To manage complaints, disputes and claims.
• To enforce our contracts and terms and bring claims.
e. Marketing e-mails and communications
IvyGo Art will also use your data to send you marketing materials and newsletters relating to IvyGo Art website, products, services and events, but only where you have consented to this through the appropriate setting in your website account, and you have not withdrawn your consent. You may change your consent by adjusting the appropriate setting or informing us through our contact details in this policy.
f. Data IvyGo Art holds on you is done so on our secure computer servers. I hold this data to ensure that I am able to manage your account and provide details to you on previous purchases, wishlist items and your account preferences. If you require me to remove this information, please see section 11.
7. Who we disclose your data to
a. Our contractors and suppliers
Where IvyGo Art uses third parties to provide or supply any part of the website or any goods, services, events, insurance or other things, or to enforce or administer any contracts or terms, then IvyGo Art may provide your data to them as reasonably required for those purposes, including to the artists from whom work is purchased from, delivery agents, payment processors, and insurers.
Your data may be held by them as data processor on our behalf, in which case we will remain the data controller, and your data will only be held and used by them on our behalf and in accordance with our instructions and this policy. Your data will also only be held or as long as it is required to undertake their services, after which time it will be securely removed from their systems.
In some cases, your data may need to be provided to them to be used by them for their own purposes, as data controller, where this is reasonably necessary, for the purposes of provision of any goods, services, insurance, event etc. by them. In such case, they should inform you separately that they are holding your data as data controller.
b. Legal requirements
IvyGo Art may supply your data to a government authority where required to comply with a legal requirement, for the administration of justice, or where reasonably required to protect your vital interests.
8. Where we process your data
IvyGo Art and IvyGo Art contractors normally store and process your data in the United Kingdom. However, some contractors may from time to time store and process your data elsewhere, including outside the European Economic Area. This may be because our contractor or supplier who carries out any order fulfilment or payment processing, for instance, may be based elsewhere.
If your data is to be stored or processed outside the European Economic Area, IvyGo Art will comply with, and take all reasonable steps to ensure our contractors comply with, the rules under the Data Protection Act 1998 and General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) for processing personal data outside the European Economic Area.
9. Data security and preventing unauthorised access
a. Information Security Policy
IvyGo Art is responsible for ensuring confidentiality of sensitive information. Art Gallery recognises the importance of information security. The primary purpose of our information security is the protection of services to members and customers, and the customer information we are supplied with. It is the company’s aim to ensure that customers have confidence in our information security and are safe in the knowledge that we are responsive to their security concerns.
This policy is subject to review annually to ensure that at a strategic level it addresses the evolving information security threats and objectives needed for the organisation to be successful.
b. Payment Card Security
IvyGo Art process payment cards through Safe Payment Page, accessed from authorised PCs on a dedicated network segment. There shall be no access to this network segment from the Internet, or from other sections of Art Gallery. PCs and other devices on this network shall be configured to meet the requirements of PCI DSS, and may only be accessed by authorised users.
11. Your rights
a. Access to your data
Under the Data Protection Act 1998 and General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), you are entitled to a copy of all personal data we hold about you. If you would like to exercise this right, please contact us via email at help@artgallery.co.uk, requesting a Subject Access Request Form.
b. Your right to stop marketing messages
If we are sending you marketing literature (including paper-based and electronic messages), you have the right to ask us to stop doing this. Please contact us using our contact details above.
c. Your right to stop use causing distress
You have the right to ask us to stop using any data for any purpose where that purpose is causing you substantial distress. If you have any concerns regarding our use of your data, please contact us using our contact details in this policy.
d. Your right to alter inaccurate data
You are entitled to ask us to change or modify any inaccuracies in your personal data, by contacting us using our contact details above.
12. Third-Party Websites
Links to third-party websites may appear on IvyGo Art website. Such third-party websites are responsibility of IvyGo Art, our galery do not endorse them and you visit and use them at your own risk. If you supply any data to them, you should read their own privacy policy.
13. Changes to this policy
IvyGo Art may at any time change this privacy policy by publishing a new version on our website. IvyGo Art will not be required to inform you of this. You are responsible for regularly reviewing IvyGo Art website stay up to date with the latest version of this policy. By continuing to use our website and services after any such change you will be considered to have accepted the change.
14. Legal status of this policy
This privacy policy is not intended to and does not create any contractual or other legal rights in or on behalf of any party other than such rights as already exist by law separately to this privacy policy.