Privacy Notice

This notice explains how we use the personal details you give us through the enquiry form on this website, on the Get in Touch page and from the Enquire buttons on artwork pages. It also explains how the website itself handles information about your visit.

Who we are

Dantzig (Woodstock) Limited, company number 13398634, registered in England and Wales, trades as Ewan Macfarlane Gallery. We are the data controller for the personal data described in this notice.

Gallery and correspondence address: 1 Market Street, Woodstock, OX20 1SU.
Registered office: The Old Tannery, Hensington Road, Woodstock, OX20 1JL.
Email: woodstock@ewanmacfarlanegallery.com
Telephone: 01993 812000

Ewan Macfarlane is our data protection contact for any privacy or data protection question. You can reach Ewan Macfarlane using the email address above.

What we collect

When you send an enquiry through the form we collect:

• your name and email address, and your telephone number if you choose to give it;
• the message you write;
• the title and reference of the artwork, if you came to the form from that artwork's page; and
• the web page you sent the form from.

Why we use your details, and our legal basis

General enquiries and correspondence: legitimate interests. Our legitimate interest is in replying to the people who contact the gallery, and in keeping a record of that correspondence so that we can follow up, give consistent answers and run the gallery. We have weighed this against your interests and rights. People who send us an enquiry would normally expect us to reply and to keep a record of the conversation. You can object at any time (see Your rights).

Quotations, purchases and commissions: contract. If you ask for a quotation, or take steps towards buying an artwork or commissioning a work, we use your details where that is necessary to take the steps you have asked for before we enter into a contract.

Where your details are stored, and where they may go

Details sent through the form are stored in the gallery's customer database, which is provided by HubSpot, Inc. (based in the United States). Our HubSpot account uses HubSpot's EU data centre. HubSpot's own service providers may handle data in other countries, including the United States.

Our website is hosted by Cloudflare, Inc. (based in the United States), which runs a global network and handles technical information about visits, such as your IP address, so that it can deliver and protect the website.

When personal data is sent outside the UK, both companies state in their published data processing terms that they rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. For transfers to the United States they also rely on their participation in the Data Privacy Framework (including its UK Extension).

Who we share it with

We will never sell personal data. We may share personal data with HubSpot and Cloudflare as described above, and with other payment processors, IT service providers, accountants or legal advisors, and regulatory authorities where the law requires it. Our service providers are bound by contractual obligations to keep personal data secure and to use it only for specified purposes.

How long we keep it

We keep ordinary enquiry records for as long as they are useful for dealing with your enquiry and any follow-up, and we review them regularly. We delete or anonymise records we no longer need, unless there is a documented reason to keep them. Records connected with a purchase, a commission, invoicing or accounting are kept separately, for the periods that the law and our accounting requirements require.

Cookies, analytics and the map

This website does not set cookies or use similar browser storage, and it does not use analytics or advertising tracking. We have checked the website, including the map described below, and found none.

The Contact page shows a map supplied by OpenStreetMap. When that page loads, your browser connects directly to OpenStreetMap's servers, which receive your IP address and basic technical details such as your browser type. See the OpenStreetMap privacy policy. The Contact page also has ordinary links to what3words, Google Maps and OpenStreetMap. They share nothing about you unless you choose to click them.

Our website host and visit logs

Cloudflare handles technical information about visits for us, as our data processor, so that the website can be delivered and protected. We do not use optional visitor analytics, and we keep Cloudflare's optional request logging switched off. Cloudflare also keeps technical records for the security and operation of its own network, under its own terms.

How we protect it

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration or destruction.

Your rights

Under the UK General Data Protection Regulation you have the right to:

• access your personal data;
• have inaccurate personal data corrected;
• ask us to erase your personal data;
• ask us to restrict how we use your personal data;
• receive your personal data in a portable form;
• object to our processing of your personal data, including where we rely on legitimate interests; and
• withdraw your consent where we rely on it.

To exercise any of these rights, please write to us at the email or postal address above. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Changes to this notice

We may update this notice from time to time. The current version will always be available on this website.