Last updated: 17 June 2026
This Privacy Policy explains how Peace & Colour Gallery (“we”, “us”, or “our”) collects, uses, shares, and protects your personal information when you visit https://peaceandcolour.com (the “Website”), enquire about or purchase artwork, or otherwise interact with us.
We are committed to protecting your privacy and handling your data in an open and transparent manner, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are (Data Controller)
The data controller responsible for your personal data is:
- Business name: Peace & Colour Gallery
- Address: 5 Marlborough Street, London, SW3 3PS, United Kingdom
- Email: irina@peaceandcolour.info
- Phone: +44 77 9886 7300
2. The information we collect
We collect and process the following categories of personal data:
Information you give us
- Identity data — first and last name;
- Contact data — email address, phone number, billing and delivery address (including city, county, postcode, and country);
- Enquiry data — the content of messages you send us about artworks, commissions, exhibitions, or general questions;
- Transaction data — details of artworks you enquire about or purchase, and correspondence relating to orders and delivery. (Card payments are handled by our payment provider — see section 6 — and we do not store full card details.)
Information we collect automatically
- Technical data — IP address, browser type and version, device type and identifiers, operating system, and time-zone setting;
- Usage data — pages and artworks you view, links you click, the date and time of your visit, and how long you spend on the site;
- Cookie data — see our Cookies section (section 8).
We do not knowingly collect any special category data (such as data about health, race, religion, or political opinions), and we ask that you do not send such information to us.
3. How and why we use your information (lawful bases)
Under UK GDPR we must have a lawful basis for processing your data. We rely on the following bases:
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiries and providing customer support | Legitimate interests; steps prior to entering a contract |
| Processing and fulfilling an artwork purchase, commission, or delivery | Performance of a contract |
| Sending order updates and service messages | Performance of a contract |
| Sending marketing emails or newsletters (where offered) | Consent (you can withdraw at any time) |
| Operating, securing, and improving the Website | Legitimate interests |
| Analytics and understanding how the site is used | Consent (via cookie controls) |
| Meeting legal, accounting, and tax obligations | Legal obligation |
| Detecting, preventing, and addressing fraud or technical issues | Legitimate interests; legal obligation |
Where we rely on legitimate interests, we have assessed that our use of your data is proportionate and does not override your rights and freedoms.
4. Marketing communications
We will only send you marketing communications where you have asked us to or otherwise consented. You can opt out at any time by clicking the “unsubscribe” link in any email, or by contacting us using the details in section 1. Opting out of marketing will not affect service messages relating to an order or enquiry.
5. How long we keep your data
We keep your personal data only for as long as necessary for the purposes set out in this policy:
- Enquiries that do not lead to a purchase: typically up to 24 months, then deleted;
- Customer and transaction records: retained for at least 6 years to comply with UK tax and accounting law;
- Marketing data: until you unsubscribe or ask us to delete it;
- Website analytics data: as set by the retention period of our analytics provider.
6. Who we share your data with
We do not sell your personal data. We share it only with trusted third parties who help us run our business, and only to the extent necessary. These may include:
- Website hosting and infrastructure providers;
- Payment processors (for example, the provider that handles card transactions securely);
- Delivery, courier, and fine-art shipping partners (for fulfilling orders);
- Email, CRM, and marketing platforms (where you have subscribed);
- Analytics providers (for example, Google Analytics — see section 8);
- Professional advisers such as accountants and legal advisers;
- Government bodies, regulators, or law enforcement where required by law.
All our processors are required by contract to keep your data secure and to use it only for the purposes we specify.
7. International transfers
Some of our service providers may be based outside the UK. Where we transfer your personal data outside the UK, we ensure a similar degree of protection by relying on an adequacy decision (“adequacy regulations”) or appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses. You can contact us for more information about these safeguards.
8. Cookies and tracking
Cookies are small text files stored on your device when you visit a website. We use cookies and similar technologies to operate the site, remember your preferences, keep it secure, and understand how it is used.
- Strictly necessary cookies — required for the site to function (for example, session and security cookies). These cannot be switched off.
- Preference cookies — remember your settings and choices.
- Analytics cookies — help us understand how visitors use the site so we can improve it. These are only set with your consent.
You can manage or refuse cookies through your browser settings, and through any cookie banner shown on our Website. If you disable certain cookies, some parts of the site may not work properly.
Analytics
We may use Google Analytics, a service provided by Google, to analyse Website traffic and usage. Google may process this data on our behalf. You can opt out across all websites by installing the Google Analytics opt-out browser add-on. For details of how Google handles data, see Google’s Privacy Policy.
9. Your rights
Under UK data protection law, you have the right to:
- Be informed about how your data is used (this policy);
- Access a copy of the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data (the “right to be forgotten”) in certain circumstances;
- Restrict our processing of your data in certain circumstances;
- Object to processing based on legitimate interests, and to direct marketing at any time;
- Data portability — receive your data in a portable format;
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, contact us using the details in section 1. We will respond within one month. There is normally no charge.
10. How we protect your data
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure hosting, encryption of data in transit (HTTPS), access controls, and regular review of our security practices. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
11. Links to other websites
Our Website may contain links to third-party websites, including artists’ pages or social media. We are not responsible for the privacy practices or content of those sites, and we encourage you to read their privacy policies.
12. Children’s privacy
Our Website and services are not directed at children under the age of 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Where changes are significant, we will provide a more prominent notice. Please review this page periodically.
14. How to contact us or make a complaint
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
- Email: irina@peaceandcolour.info
- Phone: +44 77 9886 7300
- Post: 5 Marlborough Street, London, SW3 3PS, United Kingdom
- Contact form: https://peaceandcolour.com/contact/
You also have the right to lodge a complaint with the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at any time:
- Website: https://ico.org.uk
- Helpline: 0303 123 1113
We would, however, appreciate the chance to address your concerns directly before you approach the ICO.