Privacy Policy
1. Introduction
At Braunstein Quay Gallery (accessible via braunsteinquaygallery.com), we are deeply committed to upholding your privacy and safeguarding your personal information. Your trust is paramount, and we are dedicated to fulfilling our obligations under all applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines the manner in which we collect, use, store, and protect your personal data, and describes your rights with respect to that information.
2. Scope of Policy and Data Controller Responsibilities
This Privacy Policy applies to all personal data collected from users who interact with braunsteinquaygallery.com, including through browsing, registering an account, making purchases, contacting us, or subscribing to our communications. Braunstein Quay Gallery, as the data controller, determines the purposes and means of processing your personal information in accordance with applicable privacy legislation.
For the purposes of data protection law, “personal data” refers to any piece of information that relates to an identified or identifiable individual.
3. Categories of Data Processed
In the course of operating our services and website, we collect the following categories of personal data:
a. Usage Data
Information about how you interact with braunsteinquaygallery.com, including IP address, browser type, language preferences, operating system, previously visited websites, and the date, time, and duration of your visit.
b. Account Data
Identifiable information such as your full name, billing/shipping address, email address, telephone number, and login credentials collected during account registration or checkout.
c. Profile Data
Information about your preferences, product interests, user behavior, browsing history, bookmarks, and saved items.
d. Communication Data
Correspondence such as support inquiries, submitted forms, customer service chat records, and any interactions you have with us via email or the website.
e. Technical Data
Information automatically collected about your device and software, including device identifiers, geographic location (where consented), screen resolution, and system configuration.
f. Transaction Data
Records related to your orders, payment methods (e.g., last four digits of the card), delivery address, purchase or return history, and billing details.
g. Preference Data
Marketing communication preferences, opt-in or opt-out status, product likes or dislikes, and personalization settings.
4. Legal Bases for Processing
Your personal data is processed solely under the lawful bases articulated by applicable data protection frameworks:
– Performance of Contract: When processing is necessary to fulfill a transaction or provide the services you have requested (e.g., processing an order).
– Consent: When you provide clear permission for us to process your data for a specific purpose, such as email marketing.
– Legal Obligation: When we are legally required to retain or disclose certain information.
– Legitimate Interests: When processing is necessary for the function and improvement of our services, provided these interests are not overridden by your rights and freedoms.
– Vital Interests: Where processing is required to protect life or safety.
5. Your Rights
Under GDPR and CCPA, you are entitled to exercise the following rights with respect to your personal information, subject to applicable requirements:
– Right of Access: You may request confirmation as to whether we process your personal data and obtain a copy of such data.
– Right to Rectification: You may request correction of inaccurate or incomplete data.
– Right to Erasure (“Right to be Forgotten”): You may request that we delete your personal data, subject to lawful grounds for retention.
– Right to Restrict Processing: You may request to limit certain processing activities of your data.
– Right to Data Portability: You may request the transfer of your data in a structured, commonly used, machine-readable format.
– Right to Object: You may object to processing carried out under legitimate interests, including profiling for direct marketing.
– Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of prior processing.
– Right to Opt Out of “Sale” (for California Residents): Under the CCPA, you may request not to have your personal data sold to third parties.
To exercise your rights, please contact us via the details provided in Section 13.
6. Security Measures
We have implemented robust security protocols to preserve the confidentiality, integrity, and availability of your personal data. Our security measures include, but are not limited to:
– End-to-end data encryption during transmission and storage
– Role-based access controls and multi-factor authentication for system access
– Regular security audits, vulnerability assessments, and penetration testing
– Secure backup systems and disaster recovery procedures
– Employee training on data protection and breach response protocols
While no system is entirely infallible, we continuously strive to implement leading industry practices to safeguard your data.
7. International Transfers
As Braunstein Quay Gallery may work with vendors or partners outside your country of residence, your data may be transferred internationally. Where applicable, we rely on:
– Standard Contractual Clauses approved by the European Commission,
– Adequacy decisions for countries with equivalent data protection laws,
– Binding corporate rules adopted by our suppliers.
All such transfers are conducted in accordance with GDPR and CCPA requirements to ensure continued protection of your personal data.
8. Data Retention
Your personal data is retained for only as long as necessary to fulfill the purposes for which it was collected, including compliance with legal obligations and enforcement of our agreements. Typical retention periods include:
– Account Data: Up to 5 years after last activity or account closure
– Transaction Data: Retained for a minimum of 7 years for tax and regulatory compliance
– Communication Data: Retained for up to 3 years for administration and quality control
– Usage and Technical Data: Up to 24 months to monitor site usage and improve services
– Marketing Consents: Retained until withdrawal of consent or up to 2 years after last interaction
Upon expiry of these retention periods, the data shall be securely deleted or anonymized in a legally compliant manner.
9. Cookie Policy
We use cookies and similar tracking technologies on braunsteinquaygallery.com to ensure site functionality, performance assessment, content personalization, and to conduct analytics. The categories of cookies include:
– Essential Cookies: Necessary for core site functionality and access to secure areas
– Functional Cookies: Enable enhanced functionality and website customization
– Analytics Cookies: Collect anonymous data on user behavior and interactions to improve user experience
– Performance Cookies: Assess system performance, error messages, and loading speeds
Cookies may be placed by us (“first-party cookies”) or by third parties acting on our behalf (“third-party cookies”).
10. Cookie Management and Regulatory Compliance
In alignment with GDPR and CCPA, we provide full transparency and control over cookie usage. When visiting braunsteinquaygallery.com, you are presented with a cookie consent banner enabling you to:
– Accept or reject cookies by category
– Withdraw or modify preferences at any time through our cookie settings center accessible on every page
– Learn more about each cookie category and the data collected
We honor Do Not Track (DNT) signals where supported and required by applicable laws.
11. Children’s Privacy
Our website, braunsteinquaygallery.com, is not intended for or directed to children under the age of 13. We do not knowingly collect personal data from individuals under the age of 13. If we discover that such data has been provided to us inadvertently, we will take immediate and appropriate steps to delete it. Parents or guardians who believe their child has submitted personal data may contact us directly to request deletion.
12. Policy Updates and Notification
We reserve the right to amend this Privacy Policy to reflect changes in our practices, legal requirements, or service offerings. Material modifications will be communicated to our users via notifications on braunsteinquaygallery.com or through direct communication, where appropriate. Continued use of our services following any updates signifies your acceptance of the revised terms.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us using the following information:
Braunstein Quay Gallery
Email: [email protected]
Your privacy is important to us. We are fully committed to compliance with the GDPR, CCPA, and other applicable privacy frameworks, and welcome any inquiries you may have about how your data is handled.