Privacy Policy
Who we are
One Paved Court is an artist-run art gallery and studio in the centre of Richmond upon Thames, Surrey, UK. We run a programme of artist-led exhibitions.
Our address is 1 Paved Court Richmond TW9 1LZ. Company no. 10714354.
Our website address is: https://onepavedcourt.co.uk.
What personal data we collect and why we collect it
We use information about your visit and related contacts in the following ways:
- To enable us to review, develop and improve the website and services;
- To respond to your requests if you contact us with a query;
- To provide you with information that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes; and to inform you of service and price changes.
How do we collect Data from you?
We receive information about you when you use our website, complete forms on our website, if you contact us by phone, email, or otherwise in respect of any of our services or during the purchasing of any product. Additionally we also collect information from you when you sign up, submit a proposal, or when you inform us of any other matter.
If you provide us with personal data about a third party (for example when booking on behalf of someone else), you warrant that you have obtained the express consent from the third party for the disclosure and use of their personal data.
Your personal data may be automatically collected when you use our services, including but not limited to, your IP address, device-specific information, server logs, device event information, location information and unique application numbers.
Comments
Comments are not currently collected on the site. Should this change, we will collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
As and when comments are activated, an anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms
Our Contact forms are provided by WordPress. You can review the relevant privacy policies by typing ‘GDPR’ in the search box on WordPress.com
By providing your data to us, you agree to this transfer and storage. However, we will ensure that reasonable steps are taken to protect your data in accordance with this privacy notice.
Newsletter
Our Newsletter service provider is MailChimp, based in the USA. MailChimp’s updated data processing agreement adheres to the General Data Protection Regulation and is certified to the EU-U.S. Privacy Shield Framework and the Swiss-U.S Privacy Shield Framework. You can review relevant policies on MailChimp’s privacy page.
Cookies
If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
We do not currently maintain analytics for the website. We will update this Privacy Polity item on or about 1 September 2020.
Who we share your data with
Your data is used by One Paved Court Ltd and the website administrator to manage the website, enquiry forms and newsletter mailing list.
We process your data for administration, billing, and the provision of services.
We do not share your data with any third parties (please note ‘Embedded content from other websites’, above).
How long we retain your data
We do not accept comments on this site. Should this change in the future, the following will apply: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through Akismet, an automated spam detection service.
How we protect your data
We use Wordfence Security and scanning. We have a current SSL Certificate.
If you sign up to our newsletter/ mailing list, we collect your name and email address for these purposes only. We use a Mailchimp newsletter. (see above)
We do not receive data from third parties.
Third Parties
For the avoidance of doubt, we do not and never shall sell your personal data to third parties for marketing or advertising purposes.
We will not pass your personal data to third parties for the provision of services on our behalf.
We do not use automated decision making and/or profiling.
Accessing and updating your data
You have the right to access the information we hold about you. Please email your requests to [email protected] so that we can obtain this information for you.
Industry regulatory disclosure requirements
As the transmission of information via the internet is not completely secure, we cannot guarantee the security of your data transmitted to our site and any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Liability
We agree to take reasonable measures to protect your data in accordance with applicable laws.
What data breach procedures we have in place
In the event of a data breach, we shall ensure that our obligations under applicable data protection laws are complied with where necessary.
Contact us
Please email any questions or comments you have about privacy to us at [email protected]
Your right to make a complaint
You have the right to make a complaint about how we process your personal data to the Information Commissioner: https://ico.org.uk/concerns/
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113