Privacy Policy

1. Introduction

bread. contemporary art (“we”, “our”, “us”) is committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, and protect your information when you visit our website or interact with our gallery services.

We are the data controller for the personal data we process. Our business address is 112 High Street, Hungerford, RG17 0NB, United Kingdom.

2. Information We Collect

2.1 Information You Provide

• Inquiry Forms: Name, email address, phone number, and message content when you contact us about artworks or services
• Newsletter Signups: Email address when you subscribe to our newsletter
• Gallery Visits: Any information you provide during gallery visits or events

2.2 Information We Collect Automatically

• Website Usage: Pages visited, time spent, referring websites, and device information
• Cookies and Analytics: Data collected through Google Analytics and other tracking technologies (with your consent)
• Technical Data: IP address, browser type, operating system, and device identifiers

3. How We Use Your Information

We process your personal data for the following purposes:

3.1 Legitimate Interests

• Responding to your inquiries about artworks and gallery services
• Providing information about exhibitions and events
• Improving our website and services
• Preventing fraud and ensuring security

3.2 Consent

• Sending marketing communications and newsletters (where you have opted in)
• Using non-essential cookies and analytics (where you have consented)

3.3 Contract Performance

• Processing artwork purchases and commissions
• Managing gallery relationships and transactions

4. Data Retention

We retain your personal data for the following periods:

• Inquiry Data: 3 years from last contact or until you request deletion
• Newsletter Subscriptions: Until you unsubscribe or request deletion
• Purchase Records: 7 years for accounting and legal compliance
• Analytics Data: 26 months (Google Analytics default retention period)

5. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing communications at any time

To exercise these rights, contact us at admin@bread.gallery

6. Data Sharing

We do not sell your personal data. We may share your information with:

• Service Providers: Trusted partners who help us operate our website and business (e.g., hosting providers, email services)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with any merger, acquisition, or sale of assets

7. International Transfers

Some of our service providers may be located outside the UK/EEA. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government
• Standard contractual clauses approved by the UK
• Certification schemes and codes of conduct

8. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure data storage and backup procedures

9. Cookies and Tracking

We use cookies and similar technologies to enhance your browsing experience and analyze website usage. You can manage your cookie preferences through our cookie consent banner or by adjusting your browser settings.

For more information about our use of cookies, please see our cookie policy or use the “Manage cookies” link in our website footer.

10. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us:

13. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator: