Privacy policy

Privacy Policy

At Graffiti Gallery, we are committed to protecting your privacy and handling your personal data with transparency and care. This policy explains what information we collect, how we use it, your rights, and how we keep your data safe, in line with UK GDPR and current data protection laws.

1. Who We Are

Graffiti Gallery (“we”, “us”, “our”) is the data controller for this website. If you have questions about this policy or your data, contact us at sales@graffitigallery.co.uk.

2. What Information We Collect

We collect information to provide and improve our services, including:

Contact details: name, email, address, phone number
Account and transaction details: login, purchase history, payment information (handled securely by third-party providers)
Technical data: IP address, browser type, device information
Usage data: pages visited, interactions, preferences
Marketing preferences
Special category data: only if necessary, and with extra safeguards

3. How We Collect Information

Directly: when you create an account, place an order, or contact us
Automatically: through cookies and analytics tools
From third parties: such as payment processors and advertising partners

4. Why We Use Your Data

We process your data for:

Fulfilling orders and contracts
Managing your account and customer service
Sending marketing communications (with your consent)
Improving our website and services
Fraud prevention and security
Meeting legal obligations
Our recognised legitimate interests (as permitted by UK law)

5. Automated Decision-Making

We may use automated systems for things like fraud detection or personalised offers. If a decision has a legal or significant effect on you, you have the right to request human review, express your view, or contest the decision.

6. Cookies and Marketing

We use cookies and similar technologies for website functionality, analytics, and targeted advertising. You can manage your cookie preferences at any time. We always obtain your consent for marketing communications and non-essential cookies.

7. Sharing Your Data

We may share your data with:

Service providers (e.g., Shopify, payment processors)
Advertising and analytics partners

8. Data Retention

We keep your data only as long as needed for the purposes described or as required by law. When no longer needed, your data is securely deleted or anonymised.

9. Your Rights

You have the right to:

Access your data
Correct inaccurate data
Request deletion (“right to be forgotten”)
Restrict or object to processing
Data portability
Withdraw consent at any time (where applicable)
Complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113

10. Children’s Privacy

Our services are not intended for children under 13. We do not knowingly process data of children under 13 without parental consent. Please contact us if you believe we have collected such data.

11. Security

We use technical and organisational measures to protect your data, including encryption and strict access controls.

12. Changes to This Policy

We may update this policy to reflect changes in law or our practices. The latest version will always be posted here with the effective date.

13. Contact Us

For privacy questions or to exercise your rights, contact:
Email: sales@graffitigallery.co.u