Privacy Policy
Your trust is the foundation of our gallery. We are committed to protecting your personal data and being transparent about how we use it.
Introduction
Elite Gallery ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website, purchase artwork, subscribe to our newsletter, or interact with our services.
Information We Collect
We collect different types of information depending on how you interact with Elite Gallery:
Personal Information You Provide
- Identity Data: Name, username, or similar identifiers.
- Contact Data: Email address, phone number, billing address, shipping address.
- Financial Data: Payment card details (processed securely via PCI-compliant partners — we never store full card details).
- Transaction Data: Details about artwork purchases, returns, and order history.
- Profile Data: Your preferences, feedback, and survey responses.
- Marketing Data: Your preferences for receiving marketing communications.
Automatically Collected Information
- Technical Data: IP address, browser type, device information, operating system.
- Usage Data: Pages visited, time spent, referral source, click patterns.
- Cookies: Small data files stored on your device to enhance functionality (see Cookie section).
Information from Third Parties
We may receive data about you from analytics providers (like Google Analytics), payment processors, or social media platforms when you interact with our content.
How We Use Your Information
We use your personal data only for legitimate business purposes, including:
| Purpose | Types of Data | Legal Basis |
|---|---|---|
| Order fulfillment & delivery | Identity, Contact, Transaction | Contract performance |
| Customer support & inquiries | Identity, Contact, Profile | Legitimate interest |
| Marketing communications (opt-in) | Contact, Marketing preferences | Consent |
| Website improvement & analytics | Technical, Usage | Legitimate interest |
| Fraud prevention & security | Transaction, Technical | Legal obligation |
Legal Basis for Processing (GDPR & CCPA Compliance)
If you are located in the European Economic Area (EEA) or California, you have specific rights under GDPR and CCPA.
We process your data based on:
- Consent: When you subscribe to newsletters or accept cookies.
- Contract: To fulfill purchases and provide services.
- Legal Obligation: For tax, accounting, or fraud prevention requirements.
- Legitimate Interests: To improve our gallery, prevent fraud, and communicate about similar artworks.
Data Sharing & Disclosure
We never sell your personal information. However, we share data with trusted third parties essential to our operations:
- Delivery Partners: Shipping carriers to deliver your artwork.
- Payment Processors: Stripe, PayPal, or similar (PCI-DSS compliant).
- IT & Analytics Services: Google Analytics, hosting providers, email marketing platforms.
- Legal & Compliance: When required by law or to protect our rights.
All third parties are bound by confidentiality agreements and data protection standards.
Cookies & Tracking Technologies
We use cookies to personalize your experience, analyze traffic, and remember preferences. You can control cookies through your browser settings.
Types of Cookies We Use:
- Essential Cookies: Required for website functionality (shopping cart, login).
- Analytics Cookies: Help us understand how visitors use our site (Google Analytics).
- Preference Cookies: Remember your language or region.
- Marketing Cookies: Used for targeted advertising (only with your consent).
By continuing to use our site, you consent to our use of essential and analytics cookies. For marketing cookies, we request explicit opt-in.
Data Security & Retention
We implement industry-standard security measures including SSL encryption, firewalls, access controls, and regular security audits. Despite our efforts, no internet transmission is 100% secure.
Retention Period: We retain personal data only as long as necessary:
- Transaction data: 7 years (for tax and accounting compliance).
- Marketing data: Until you unsubscribe or request deletion.
- Customer support records: 3 years from last interaction.
When data is no longer needed, we securely delete or anonymize it.
Your Privacy Rights
Depending on your location, you may have the following rights:
- Right to Access: Request a copy of your personal data.
- Right to Rectification: Correct inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your data.
- Right to Restrict Processing: Limit how we use your data.
- Right to Data Portability: Receive your data in a machine-readable format.
- Right to Opt-Out of Sale: We do not sell data, but you may opt-out of marketing.
- Right to Withdraw Consent: For any processing based on consent.
Children's Privacy
Elite Gallery does not knowingly collect personal information from children under 16 years of age. If you believe a child has provided us with data, please contact us immediately so we can delete it.
International Data Transfers
Our gallery operates globally. Your data may be transferred to and processed in countries outside your residence, including the United States. We ensure adequate safeguards (such as Standard Contractual Clauses) are in place for international transfers.
Changes to This Privacy Policy
We may update this policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when revisions were made. We encourage you to review this page regularly.
For significant changes, we will notify you via email or a prominent notice on our website.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact our Data Protection Officer:
Elite Gallery – Privacy Compliance
Email: privacy@elitegallery.com
Phone: +1 (212) 555-8900
Address: 123 Gallery Street, Brooklyn, NY 11201, USA
Data Protection Officer: Alexandra Chen, alexandra@elitegallery.com