Privacy Policy

Privacy Policy / Data Protection Notice

Graham Duncan Elder and his/its affiliated entities located inside and outside the EEA (“Graham Duncan Elder”, “the studio,” “we”, “us” or “our”) respects your privacy and seeks to protect your personal data.

The following information describes how we gather and use that data. The amount of information we hold on you and how we use it depends on your relationship with us and some of the sections below may not be relevant to you. We reserve the right to alter and update this Privacy Policy from time to time. The date of the most recent update is stated at the bottom of this Privacy Policy.

Graham Duncan Elder’s Data Principles:

i. We keep to a minimum the amount of information we hold about you.

ii. We use your data to respond to your enquiries and provide you with information that we believe you would like to receive about the studio, our available artworks and our events (the lawful basis for this is “legitimate interest”).

iii. We also use your data to complete transactions with you on our website and also via our galleries and other affiliated businesses (the lawful basis for this is “contract”).

iv. We also use your data to communicate with you where you have signed up and opted in to receive information from us (the lawful basis for this is “consent”).

v. We only hold your data for as long as necessary.

vi. We apply appropriate security mechanisms to protect your personal data.

vii. Our legitimate business interests are balanced with your interests, rights
and freedoms and your consent.

The General Data Protection Regulation (“GDPR”) is a European Regulation concerning the use and processing of personal information. We are committed to processing your information in line with high standards and in compliance with the GDPR, wherever you are located. For the definition of terms used within this Privacy Policy please refer to the GDPR. You can find out more about the GDPR from the European Commission’s website.

We are happy to answer any questions you have about this Privacy Policy. Email us at graelder@gmail.com

FAQs

We hope to answer some of the most frequently asked questions about our Privacy Policy below. For further information, please read our Privacy Policy in full.

What information does Graham Duncan Elder collect about me?

We may collect some (or all) of the following: your name, phone number, email address, IP address, information about you (for example, age, gender,
socio-economic status), data provided by cookies and other similar technologies, functional data such as registration and system data, as well as
additional usage data – for instance, your purchasing history, communication permissions, artist preferences and creative interests or information about your attendance at one of our events.

Why does Graham Duncan Elder need my information?

We use your data to help us provide the best experience of our website and studio, which includes using data to improve (and, where possible,
personalize) your experiences. We use your data to communicate with you, for example, informing you about new shows, events and website updates.
We also use data to fulfil contracts, to send you the goods you have bought, invoices and to collect payments.

Can I opt-out of sharing my information with Graham Duncan Elder (the website)?

Yes, you do not have to share your information with us that you do not want us to process and you may opt-out to receive communications from us at any time by contacting us at graelder@gmail.com. We will respect your rights under the GDPR in this regard.

How do I delete my personal data from Graham Duncan Elder (this website) and what are the consequences?

You can email graelder@gmail.com to request that your data be deleted. However, please note, by deleting your personal data, you may impact your experience of the website. We will not delete data which is needed to fulfil a contract until that contract is completed or unless we agree to terminate the contract. We will inform you if deleting your data will impact our ability to perform a contract in case this affects your decision.

How long does Graham Duncan Elder (the website) keep my information?

We retain personal data for as long as necessary, to fulfil the transactions you have requested, or for other essential purposes (for example, complying with our legal obligations, resolving disputes and fulfilling our agreements).

How is information stored?

We are committed to protecting the security of your personal data. We store data in a number of places depending on our requirements to access and use it. We use a variety of security technologies and procedures to help protect your personal data from unauthorized access, use or disclosure. For example, we store the personal data you provide on cloud-based or computer systems that have limited access and are in controlled facilities. Where possible, we avoid storing paper records.

Is Graham Duncan Elder using cookies to gather information?

We use cookies when you visit our website. By visiting our website, you agree to the use of cookies and similar technologies for the purposes described in our Privacy Policy and our Cookie Policy. This helps us to provide you with the best experience and allows certain parts of our website to function properly. If this concerns you, you can adjust your browser or device settings in order not to accept cookies and similar technologies.

How can I contact Graham Duncan Elder if I have questions regarding this Privacy Policy statement?

If you have any questions about the use of your personal information, please email us at graelder@gmial.com.

What personal data do we hold and why?

When you contact us to make an enquiry, we will use your name and contact information to respond. We will then use this information to communicate with you in the future.

We may obtain, collect and update information about you via direct contact with you, from third parties who refer you to us or automatically via your engagement with Graham Duncan Elder, including your use of our social media channels.

On request, we can provide you with access to all information, including proprietary information, that we maintain about you (but not other users unless required to do so by law) including unique identifier information (for example, your customer number or password) and contact information (for example, your name, address and phone number). You can request this information by emailing us at graelder@gmail.com. We will correct inaccuracies on provision of the correct details or, where relevant, you can do this by changing your registered details online.

How we use your information?

Graham Duncan Elder collects and uses your information to administer, support, improve and obtain feedback on our business (website and studio) and to improve your experiences.
The information we collect is used for internal review and to improve the content of our website and services. It is also used to notify users about updates about the website and studio. This information is not shared with other organizations for commercial purposes. If you submit an employment application to us online through our website or otherwise, all of the information you submit may be used for any and all purposes ordinarily associated with processing an employment application. If you do not want to receive emails from us in the future, please let us know by sending an email to graelder@gmail.com.

Who do we share your information with?

We work with third parties in the provision of some of our services and it may be necessary for us to share your information with them in order to provide those services.
On request, and when relevant, we will provide details of which third parties we work with. We will also discuss and agree on any specific security questions or requirements you may have during the provision of our services.

The third parties we work with are encouraged to meet the requirements of the GDPR. When we contract with third parties we enter into agreements that encourage GDPR compliance. For example, for marketing purposes we store your data with Mailchimp. We have entered into a contract with Mailchimp to comply with the GDPR. Your data may be stored in the cloud and we have entered into an agreement with Google in compliance with the GDPR.

If we sell an artwork to you, we keep a copy of the invoice for our records.

We share your data internally and have a data transfer agreement in place that complies with EU law for sharing data to and outside of the EU.

Exemptions to the above are where we are asked to provide information as a result of a court order or to recover monies due.

We do not share nor sell your personal data to anyone else.