Privacy Policy

Last updated: Jan 2020

Introduction
1. This privacy policy sets out the basis on which we, Marlborough Fine Art (London) Limited (MFAL), Marlborough Gallery, Inc., New York (MNY) (referred to together as Marlborough, we or us) will process any personal data that we collect or that you provide to us when you use our websites (Site) or if you otherwise deal with us.
2. Please read the following privacy policy carefully to understand how we use and protect the personal data that we collect. In this policy, personal data means any personally identifying information about you or other information from which you can be identified. This may include your name, email address, home/business address, phone number and other relevant information about you, such as your purchasing history or your preferences/interests.
3. We reserve the right to make changes to this privacy policy from time to time. Any such changes will be posted to our Site so please make sure you have seen the latest version. If appropriate, we may contact you with details of any significant changes.
4. MFAL and MNY are controllers of your personal data. This means they may jointly or separately decide the purposes for which your personal data may be used in accordance with this privacy policy and applicable laws that protect and regulate privacy of personal data from time to time. These laws include, but are not limited to, the European Union (EU) General Data Protection Regulation (GDPR) and other applicable laws (together Data Protection Law).
5. If you would like to exercise any of your legal rights under Data Protection Law or if you have any other questions in relation to this privacy policy, please contact us at:
  Stefani Thatcher
  GDPR@marlboroughgallery.com
  Marlborough Fine Art (London) Limited
  6 Albemarle Street London
  W1S 4BY United Kingdom
The personal data that we collect about you
1. We will collect any personal data or other information you provide to us when you visit any of our Galleries, contact us via phone/email or interact with us.
2. We will collect any information contained in any communication between you and us. For example, information you communicate to us for invoicing purposes or, if you contact us with a complaint or enquiry or communicate with us using social media, we may keep a record of that information/communication. We may also ask you for information when you report a problem with our Site.
3. We may also collect certain information about your visits to our Site and how you use it using 'cookies' or similar tracking technology. This may include your geographical location, IP address, device information, browser type, referral source, length of visit and number of page views and similar information. We may use this information for a number of purposes including Site administration, optimising the use and performance of the Site, disclosing information to third party contributors or for security purposes. Individual users will not be identifiable from this information. See our Website Cookies & Terms of Use for more details about the cookies we use (below).
Use of your personal data
1. We will use the personal data that we collect from you in accordance with this privacy policy and, if applicable, the Website Cookies & Terms of Use (below).
2. Personal data about you will be used for:
  1. dealing with your enquiries or complaints;
  2. providing customer services (including any after-sales services);
  3. processing and fulfilling any order you place with us to (as well as dealing with any specific requirements you have);
  4. contacting you with further information about our services or any changes;
  5. financial management and administration of our business;
  6. recording your artistic interests and marketing preferences (including any opt-out requests);
  7. improving our services or Site;
  8. or other purposes you may consent to from time to time.
3. In addition to the specific uses set out above, we may use your information for the following purposes:
  1. to ensure that content from our Site is presented in the most effective manner;
  2. to develop our Site and your viewing experience;
  3. to provide third parties with statistical information about our Site users but this information will not be able to be used to identify any individual;
  4. to send direct marketing and other communications about Marlborough products, services or events. Where direct marketing is conducted by electronic means (such as email, SMS and/or MMS) and where required under applicable law, we will only send such marketing communications where we have your prior consent or, if you are an existing customer, where communications are in relation to works, products or services of the type that you purchased previously (or you have looked to purchase with us); and
  5. for security purposes - for example, when monitoring use of our IT systems or recording images of Gallery visitors in accordance with Data Protection Law.
Disclosure of your data
1. Other than as set forth in this privacy policy or as otherwise permitted under Data Protection Law, we will not share, sell or distribute any of the personal data you provide to us without your consent.
2. We may disclose your personal data to third parties as follows:
  1. to Marlborough affiliates or our service providers, who have to handle that data on our behalf and in accordance with our instructions under written contracts in accordance with applicable Data Protection Law (called "data processors"). These data processors include IT and software suppliers, data hosting providers, mail management companies or agencies we use to conduct identity/fraud checks. They may also include third-party companies and/or organisations to whom disclosure is necessary to enable us to provide you with the works, services or products you have purchased or sell through us, such as providers of insurance, shipping and delivery services; payment processors or parties who we use to administer/collect money owed to us;
  2. to artists and their representatives, for their own records;
  3. if our business or substantially all of our assets are acquired by a third party, in which case personal data held by us about our clients or contacts will be one of the transferred assets although your data will continue to be used for the same purposes as set forth hereunder;
  4. where disclosure is necessary to enable us to enforce our legal rights, or to protect the rights, property or safety of our clients or employees, including without limitation, disclosure to our attorneys or legal advisers for these purposes; or
  5. where disclosure may be required by law such as to a court, regulator or other relevant authority, such as a tax or customs authority or a collecting society.
    
    Where such personal data is shared externally, we will endeavour to ensure that information is only used for the purposes for which it was disclosed and in accordance with Data Protection Law.
Third party content on our Site
1. Our Site may contain content and links to other websites and microsites that are operated by third parties that use.
2. We do not control these third-party websites and this privacy policy does not apply to them. Any information such third parties collect by virtue of you clicking on a third-party link on our Site will be collected and used in accordance with the privacy policy of that third party. Please therefore consult the terms and conditions and privacy policy of those third-party websites and microsites to find out how they collect and use your personal data and to establish whether and for what purpose they use cookies or other tracking technologies.
Security of your data
1. We employ appropriate technological and operational security measures to protect personal data we hold against any unauthorised access, any unlawful processing or loss.
2. Data transmission over the internet is inherently insecure, and although we employ appropriate technological and organisational security measures to protect your data from unauthorised access we cannot guarantee the security of any data sent over the internet or by public communications services.
3. You must take reasonable steps to protect yourself against fraud. For example, if you receive any unsolicited communication that claims to be from a Marlborough email account asking for financial details or payment, please contact us by phone and do not act without taking steps to make sure it is genuine.
4. For security purposes, we may also monitor and block emails that are sent to us which are suspicious or we believe may contain attachments or content likely to disrupt or damage our systems.
International data transfers
1. Marlborough operates internationally. This means that the personal data that you provide to us may be stored in the United States, United Kingdom and countries of the EU and European Economic Area (EEA) where we operate.
2. Contact details of clients and other individuals who have been in contact with us are held on our global database. Access to this database may be shared between MFAL, MNY and our other Marlborough Galleries as listed on our Site. This means that we can note your particular interests and send information regarding particular artists, works, exhibitions or events in our Galleries that are relevant to you.
3. In addition, we may use IT and back-office service providers who act as our data processors using equipment located in the United States and other countries outside of the EU/EEA.
4. The United States is one of the countries outside the EEA whose laws are currently not considered to meet the same legal standards of protection for personal data as those set out under the GDPR. However, we will only transfer personal data out of the EEA under an appropriate contract or method authorised under the GDPR to make sure that such data is appropriately safeguarded.
How long do we keep your personal data for?
1. The period for which we keep your personal data usually depends on the purpose for which your information was collected in the first place
2. We have data retention policy that sets out the different periods we retain personal data for in accordance with our duties under Data Protection Law.
3. The criteria we use for determining relevant data retention periods are based on:
  1. Whether we need to keep data to comply with a contract obligation, deal with any potential claims or to enforce our rights. This is usually the legal limitation period for dealing with any claims under the applicable law of the relevant contract;
  2. Various legislative requirements - for example, duties under tax laws to hold financial transaction details and accounting records;
  3. The purpose for which we collected that personal data and where we have identified a continued legitimate need to hold that personal data to serve such purpose, such as keeping a record of provenance in respect of artworks; and
  4. Guidance issued by relevant regulatory authorities under Data Protection Law in a country where Marlborough processes personal data.
    
    Personal data that we no longer need to hold is securely disposed of and/or anonymised, so you can no longer be identified from it.
Lawful basis for processing your personal data under EU Data Protection Law
1. In accordance with GDPR requirements, we process your personal data relying on one or more of the following lawful grounds:
  1. where we agree to provide any product and/or service to you, in order to take any pre-contract steps at your request and/or to perform our contract obligations to you;
  2. where we need to use your personal data for our legitimate interests of being able to market and sell our works, products or services; provide our gallery services and administer our business. We will always seek to pursue these legitimate interests in a way that does not unduly infringe on your legal rights and freedoms and, in particular, your right of privacy;
  3. where you have freely provided your specific, informed and unambiguous consent to us using your personal data for particular purposes, such as receiving electronic direct marketing;
  4. where we need to protect your vital interests or those of someone else (such as in a medical emergency); and/or
  5. we need to collect, process or hold your personal data to comply with a legal obligation.
2. If we collect any sensitive personal data (or special category data) about you such as data relating to health, ethnic origin, religious/philosophical or political beliefs or sex life, we will only do this with your explicit consent; or, to protect your vital interests or those of someone else; and/or, where you have clearly publicised such data; and/or, where we need to use such data in connection with a legal claim.
Your legal rights if you are located in the European Union (EU)
If you are located in the European Union (EU), under the GDPR you have certain rights:
1. You have the legal right to request information about the personal data that we hold about you, what we use that personal data for; who it has been disclosed to, as well as certain other related information (called a subject access request). Usually we will have one month to respond to such a subject access request, although in the case of complex requests, we may require a further two months to respond. We may refuse or charge for administrative time in dealing with any manifestly unreasonable or excessive requests. We may also ask for further information to locate the specific information you seek and may apply certain legal exemptions when responding to a subject access request.
2. You also have the following rights, which are exercisable by making a request to us in writing:
  1. that we correct personal data that we hold about you which is inaccurate or incomplete;
  2. to object to any automated processing (if applicable) that we carry out in relation to your personal data, for example if we conduct any automated credit scoring;
  3. to object to our continued use of your personal data for direct marketing purposes;
  4. to require us to erase your personal data without undue delay and/or to object to or to restrict the use of your personal data by us unless we have a legitimate reason for continuing to hold or use that data (e.g. in relation to a legal claim); or
  5. that we transfer your personal data to another party where the personal data has been collected with your consent or is being used to perform contract with you and we are processing that data by automated means (i.e. on computer).
3. If you are not satisfied with our response or believe that we are illegally processing your personal data, you have the right to complain to the data protection regulator in the country where you are located. If you live in the United Kingdom, the relevant regulatory authority is the UK Information Commissioner's Office (ICO) who is currently our lead authority for GDPR purposes - see: https://ico.org.uk/concerns/.
Complaints and Mandatory Law
1. If you have any questions or concerns about how we use your personal data - even if you are not located in the EU - please contact us at the address in the Introduction above.
2. When you make any request, we may ask you to provide us with appropriate evidence to verify your identity before we can respond.
3. This privacy policy is without prejudice to any mandatory rights that you have under applicable Data Protection Law in the territory where you are located or reside.

Cookies & Terms of Use

In common with other websites we use cookies to ensure that you get the most out of our website:https://www.marlboroughgraphics.com/ (“Site”), and to improve the service we offer. A cookie is a text file containing small amounts of information which is downloaded to your device when you access a website. The text file is then sent back to the server each time your browser requests a page from the server. This enables the web server to identify and track the web browser you are using.
We use the following cookies:
1. Strictly necessary cookies.
  These are cookies that are required for the administration and operation of our Site. Some cookies that we use are necessary for our Site to function properly and to enable you to move around the Site and use its features. They include, for example, cookies that enable you [to log into secure areas of our Site.
2. Analytical/performance cookies.
  We may also use an analytics service provider (including Google Analytics) for website traffic analysis and reporting. Analytics service providers generate statistical and other information about the use of the Site by using cookies, which are stored on users’ computers. They allow us to recognise and count the number of visitors and to see how visitors move around our Site when they are using it. This helps us to improve the way our Site works, for example, by ensuring that users are finding what they are looking for easily. The information generated relating to the Site may be used to create reports about the use of the Site and the analytics service provider will also store this information.
3. Functionality cookies.
  In addition we may also use functional cookies that allow our Site to remember choices you have made in relation to the Site so as to provide a more personalised by remembering your preferences (for example, enhanced user experience by delivering content specific to your interests).
4. Targeting cookies.
  These cookies record your visit to our Site, the pages you have visited and the links you have followed. We will use this information to make our Site more relevant to your interests. We may also share this information with third parties for this purpose.
  
  You can find more information about the individual cookies we use and the purposes for which we use them in the table below:
  _ga
  Google Analytics
  This cookie enables us to estimate our audience size and usage pattern and how visitors reached our Site.http://www.google.co.uk/intl/en/analytics/privacyoverview.html
  
  _marlborough
  Marlboroughgraphics.com
  Store information about your preferences, and so allow us to customise our Site and to provide you with offers that are targeted at your individual interests.
Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.
Except for essential cookies, all cookies will expire after 2 weeks.
If you do not wish us to install cookies on your computer for these purposes, you may change the settings on your internet browser to reject cookies. For more information please consult the “Help” section of your browser. Please note that if you do set your browser to reject cookies, you may not be able to use all of the features of our Site. To indicate your acceptance of our use of cookies in accordance with this Cookie Policy you can click accept in the appropriate place on the banner that appears on our Site. However, please note that if you do not click accept but you continue to browse the Site you will be deemed to have accepted our use of cookies in accordance with this Cookie Policy.