Privacy Policy

Introduction

Welcome to Tooraji Gallery. We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, subscribe to our newsletter, or purchase artwork from us. In compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Tooraji Gallery is the data controller for your information.

Information We Collect

We only collect personal data that you voluntarily provide to us and which we can legally justify. This may include:

  • Personal Identifiers: Name, billing address, and delivery address.
  • Contact Information: Email address and telephone number.
  • Transaction Data: Details of products purchased and payments made (please note all financial transactions are processed securely through third-party payment gateways; we do not store your card details).
  • Digital Data: IP addresses, cookie preferences, and browsing behaviour collected through your interaction with our website.

How We Use Your Information

We process your personal data based on lawful grounds to manage our business relationship efficiently. Your data is used to:

  • Process and fulfill your online orders, including shipping and transit insurance.

  • Respond to enquiries, bespoke commission requests, and provide customer support.

  • Send promotional emails, digital catalogues, or gallery updates, provided you have explicitly opted in to receive them.

  • Comply with statutory legal and financial obligations, such as UK tax reporting (HMRC).

Data Security and Storage

The security of your personal data is highly important to us. We implement robust technical measures at our facility to prevent unauthorised access, loss, or alteration of your information. This includes enforcing Two-Factor Authentication (2FA) across our digital management platforms. Your data is only stored for as long as necessary to fulfill the purposes outlined in this policy or to satisfy legal requirements.

Your Rights under UK GDPR

Under the UK data protection laws, you have clear rights regarding your personal information. These include:

  • The right to access the personal data we hold about you.

  • The right to request the correction of inaccurate information.

  • The right to request the erasure of your data (the ‘right to be forgotten’).

  • The right to object to or restrict direct marketing communications at any time.

Cookies and Tracking

Our website uses cookies to enhance your browsing experience, analyze site traffic, and understand customer behaviour. You will be prompted to accept or reject website cookies upon your first visit. You can manage your preferences at any time through your browser settings.

Third-Party Disclosure

We do not sell, trade, or transfer your personal data to outside parties, except for trusted third parties who assist us in operating our website, conducting our business, or delivering your artwork (such as premium courier services), as long as those parties agree to keep this information confidential.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. Any updates will be published directly on this page.

Contact Us

If you have any questions about this Privacy Policy, your rights, or how we handle your data, please contact us: