Privacy Policy


Privacy Notice for Gables Gallery

Effective date: 18.09.2026
Last updated: 18.09.2026

At Gables Gallery, we respect your privacy and are committed to handling your personal information fairly, lawfully, and transparently. This Privacy Notice explains what information we collect through this website, how we use it, how long we retain it, and your rights in relation to your personal data.

1. Who we are

Gables Gallery is operated by Esther Jenkins, sole trader. For the purposes of data protection law, the data controller is:

Esther Jenkins trading as Gables Gallery
Address: Woodbridge, IP12 2TA
Email: gablesgallery@post.com

If you have any questions about this Privacy Notice or how your data is handled, please contact us using the details above.

2. The personal data we collect

We may collect and store the following personal information through this website:

  • your name
  • your email address
  • your telephone number, if you choose to provide it
  • details contained in your enquiry or message
  • details relating to a purchase or reservation, such as the artwork, amount, payment status, and transaction reference
  • payment information needed to take a payment by telephone, where you choose this method
  • your mailing list preferences, if you sign up for updates
  • technical information collected through cookies or similar technologies, where applicable

We only collect personal data that is relevant to the purposes described in this notice.

3. How we collect your data

We collect personal data when:

  • You complete and submit an enquiry form on the website
  • You contact us by email
  • You sign up to receive updates about artworks or exhibitions
  • You browse the website, where cookies or similar technologies are in use
  • You purchase or reserve an artwork and pay through SumUp, either by secure payment link or by telephone

Privacy information should be available when personal data is collected, so this notice should be linked in the website footer and near any relevant forms.

4. How we use your personal data

We use your personal data to:

  • respond to your enquiries about artworks, exhibitions, or related matters
  • communicate with you about your enquiry
  • keep a record of correspondence
  • process payments and manage purchases or reservations of artworks
  • maintain transaction and accounting records where required
  • send you email updates about artworks, exhibitions, or gallery news, if you have asked to receive them
  • administer and improve the website
  • comply with any legal or regulatory obligations

Payments are not processed directly by this website. Where a purchase is agreed, payment is taken through SumUp, either by secure payment link or by telephone.

5. Our lawful bases for using your data

We rely on the following lawful bases under UK data protection law:

Legitimate interests
We use your personal data to respond to enquiries, manage correspondence, and run the website in a sensible and secure way. We believe this is a reasonable and proportionate use of personal data for a small gallery business.

Contract
We use personal data where necessary to take steps at your request before a purchase, or to fulfil a sale, including arranging and processing payment.

Consent
When you choose to join our mailing list or receive marketing emails about artworks, exhibitions, or gallery news, we rely on your consent. You can withdraw that consent at any time.

Legal obligation
We may keep or use certain information where required by law.

The ICO (Information Commissioner’s Office) says organisations should decide their lawful bases before they start using people’s data and explain them clearly in their privacy notice.

6. Payments through SumUp

Payments for artworks may be taken through SumUp, either by secure payment link or over the telephone using SumUp’s payment service.

If you pay by payment link, you enter your payment details directly into SumUp’s secure payment page. Gables Gallery does not receive or store your full card details.

If you choose to pay by telephone, you may provide your card details verbally so that they can be entered directly into SumUp. Gables Gallery does not write down or retain full card details. Please do not send card details by email, website contact form, text message, or social media.

SumUp processes payment information in accordance with its own privacy and security terms. Gables Gallery may retain transaction information needed to manage the sale and meet accounting, legal, or fraud-prevention requirements, such as the amount, date, payment status, and transaction reference.

7. Mailing list and marketing emails

If you would like to receive updates from Gables Gallery, you can opt in to our mailing list. We will only send marketing emails to individuals where we have the legal right to do so. In most cases for this website, that means we will ask for your specific consent before adding you to the mailing list.

Submitting an enquiry form does not automatically add you to our mailing list. We recommend using a separate unticked opt-in box for marketing emails.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in the email or by contacting us directly. We may keep a minimal record of your unsubscribe request so we can honour it in the future. The ICO’s current guidance says marketing emails to individuals generally require specific consent, and that consent should be clear, specific, freely given, and easy to withdraw.

8. Who we share your data with

We do not sell your personal data.

We may share your information with trusted service providers where necessary to operate the website or communicate with you, for example:

  • website hosting or website platform providers
  • email providers
  • mailing list providers
  • SumUp, our payment service provider, when you make a payment
  • cookie or analytics providers, where used
  • professional advisers or technical support, where necessary

We only share personal data where it is appropriate and lawful to do so. If a third-party provider processes data on our behalf, we expect them to handle it securely and in accordance with data protection law.

9. International transfers

Some of our website, email, mailing-list, or payment service providers may store or process personal data outside the UK. Where this happens, we will take reasonable steps to ensure appropriate safeguards are in place to protect your information in line with UK data protection requirements. The ICO says privacy information should explain international transfers and the safeguards used where relevant.

10. How long do we keep your information

We keep personal data only for as long as it is reasonably needed for the purposes set out in this notice.

As a guide:

  • general enquiries: up to 24 months after our last meaningful contact
  • mailing list records: until you unsubscribe or withdraw consent
  • suppression records: for as long as reasonably necessary to ensure we do not send further unwanted marketing
  • purchase and payment records: for as long as reasonably necessary for accounting, tax, legal, and fraud-prevention purposes

We may retain information for longer periods where required for legal, regulatory, or record-keeping purposes. The ICO says privacy information should include retention periods or the criteria used to decide them.

11. Cookies and similar technologies

This website may use cookies or similar technologies to help it function properly and, where applicable, to understand how visitors use the site.

Where cookies are strictly necessary for the website to work, they may be used without consent. Where cookies are used for analytics, embedded content, or other non-essential purposes, we will provide appropriate information and request consent where required.

You can manage your cookie preferences through the cookie banner or your browser settings. The ICO’s current guidance states that cookie information must be clear and that valid consent is required for non-essential cookies and similar technologies.

12. Your rights

Depending on the circumstances, you may have the right to:

  • ask for access to the personal data we hold about you
  • ask for inaccurate information to be corrected
  • ask for your information to be erased
  • ask us to restrict how we use your data
  • object to our use of your data in some situations
  • withdraw consent at any time, where we rely on consent
  • ask for a copy of certain information in a portable format, where applicable

To exercise any of these rights, please contact us using the details in this notice. The ICO says people must be told about their rights, including the right to withdraw consent where consent is used.

13. Complaints

If you have any concerns about how we handle your personal data, please contact us first, and we will do our best to help.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection matters. Information about how to do this can be found on the ICO website.

The ICO currently recommends telling people how they can complain, and it has also confirmed that further complaint-handling requirements under the Data (Use and Access) Act 2025 are due to commence on 19 June 2026.

14. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in the law, our services, or how we use personal data. The most recent version will always appear on this page, with the latest update date shown at the top. The ICO says privacy information should be kept under review and updated when processing changes.

For the website itself, I would also suggest a short form notice directly above or below the enquiry form, something like this:

When you contact Gables Gallery using this form, we will use your details to respond to your enquiry. Please do not include sensitive personal information or payment card details in this form. For more information about how your data is used, please see our Privacy Notice. This matches the ICO’s approach of making key privacy information visible at the point of collection, with a fuller notice linked nearby.

And for the mailing list box, use separate wording such as:

I would like to receive occasional email updates from Gables Gallery about artworks, exhibitions, and gallery news. I understand that I can unsubscribe at any time. That reflects the ICO’s current marketing guidance, which states that email marketing to individuals generally requires specific consent, ideally through a clear opt-in.