Last updated: September 2026

 

Overview

At Colours Across Art Gallery ("we", "us" or "our"), your privacy matters. This Privacy Policy explains how we collect, use, share and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025.

This Privacy Policy explains:

• what personal data we collect;

• how and why we use your data;

• who we may share it with;

• how long we keep it;

• your data protection rights; and

• how to contact us.

 

Our Contact Details

Data Controller: Katarzyna Drabek
Trading as: Colours Across Art Gallery
Email: coloursacross@gmail.com
Business Address: 46 Groves Way, Cottenham, CB24 8BH
Phone / WhatsApp: +44 7580 017698

The Personal Data We Collect

Depending on how you interact with us, we may collect:

• your name;

• email address;

• telephone number;

• billing and delivery address;

• order and purchase history;

• communications you send to us;

• marketing and communication preferences;

• device and browser information;

• website usage and interaction data; and

• information collected through cookies and similar technologies.

 

We do not directly collect or store your full payment card details. Payments are processed securely through the payment providers and financial institutions, including Wix Payments, Stripe, PayPal and our banking provider, where applicable;

 

How We Collect Your Data

Most personal data is provided directly by you when you:

• make a purchase;

• make an enquiry about an artwork;

• contact us by email, telephone, WhatsApp or through our website;

• complete a website form;

• make a payment to us, including by bank transfer;

• sign up to receive marketing communications; or

• otherwise interact with Colours Across Art Gallery.

Some technical information may also be collected automatically when you use our website, for example through cookies and similar technologies.

 

How We Use Your Data

We may use your personal data to:

• process and fulfil your order;

• arrange delivery or collection of an artwork;

• communicate with you about an order or enquiry;

• provide customer service;

• process returns, refunds or delivery claims;

• maintain business, tax and accounting records;

• operate and improve our website and services;

• prevent fraud and protect our business and customers; and

• send marketing communications where we have the appropriate permission or lawful basis to do so.

 

Lawful Basis for Processing

Under UK data protection law, we rely on different lawful bases depending on why we are using your personal data.

These may include:

• Contract – where processing is necessary to take steps at your request or to fulfil a purchase or other agreement with you.

• Consent – where you have given us permission, for example for certain marketing communications or cookies where consent is required.

• Legitimate interests – where necessary for the legitimate operation, administration, security and improvement of our business, provided those interests do not override your rights and interests.

• Legal obligation – where we need to retain or process information to comply with legal, tax, accounting or regulatory requirements.

 

Who We Share Your Personal Data With

We only share personal data where reasonably necessary for operating our business, fulfilling an order, providing our services or complying with the law.

This may include:

• payment providers such as Wix Payments, Stripe or PayPal;

• website and technology service providers;

• delivery and courier companies;

• professional advisers or service providers where necessary; and

• public authorities where disclosure is required by law.

 

Featured Artists

Some artworks sold through Colours Across are held by our Featured Artists.

Where a Featured Artist is responsible for dispatching an artwork directly to you, we may share the personal information reasonably necessary to fulfil your order, such as your name, delivery address and relevant delivery contact details, with that artist.

Featured Artists are only provided with information necessary for fulfilling the relevant order and are not permitted by Colours Across to use customer information supplied by us for their own unrelated marketing purposes.

Where possible, customer communication relating to the sale, delivery, return or refund will continue to be coordinated through Colours Across.

International Data Transfers

Some of the service providers we use may process personal data outside the UK.

In addition, where an artwork is dispatched directly by a Featured Artist based outside the UK, it may be necessary to share your delivery details with that artist in their country so that your order can be fulfilled.

Where personal data is transferred internationally, we take reasonable steps to ensure that appropriate safeguards or another lawful transfer mechanism applies where required under UK data protection law.

 

Cookies & Analytics

Our website uses cookies and similar technologies for purposes including website functionality, security, analytics and improving your experience.

These may include:

• essential cookies necessary for the website to function;

• analytics or statistical cookies;

• functionality cookies; and

• cookies associated with third-party services.

Where consent is legally required for a particular cookie or similar technology, it will not be used until the appropriate consent has been obtained.

You can manage available cookie choices through the cookie controls provided on our website and, where applicable, through your browser settings.

For further information, please see our Cookie Policy.

 

Marketing

We may send you marketing communications where you have consented to receive them or where another lawful basis permits us to do so.

You can unsubscribe at any time using the unsubscribe link included in marketing emails or by contacting us at coloursacross@gmail.com.

Withdrawing consent for marketing will not affect communications that are necessary to fulfil an order or provide customer service.

 

How We Store and Protect Your Data

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

Personal data may be stored using Wix and other trusted service providers used to operate our website, process payments and administer our business.

Access to personal data is limited to those who reasonably need it for the purposes described in this Privacy Policy.

 

How Long We Keep Your Data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting and tax requirements.

Certain transaction and business records may be retained for up to six years or longer where required by law.

Other information, such as marketing information, may be retained for a different period depending on its purpose and whether you continue to consent to or engage with our communications.

When personal data is no longer required, we will delete or anonymise it where reasonably practicable.

 

Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you rights including the right to:

• ask for access to your personal data;

• ask us to correct inaccurate or incomplete information;

• ask us to erase your personal data in certain circumstances;

• ask us to restrict the processing of your personal data;

• object to certain processing;

• request transfer of your personal data in certain circumstances; and

• withdraw consent where processing is based on consent.

These rights are not absolute and may depend on the circumstances and the lawful basis on which we process your information.

To exercise your rights, please contact us at coloursacross@gmail.com.

You will not normally be required to pay a fee for exercising your data protection rights.

 

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our business practices, services or applicable law.

The latest version will always be published on our website, with the date of the most recent update shown at the top of this policy.

Where appropriate, we will take reasonable steps to bring significant changes to your attention.

 

Complaints

If you have concerns about how we use your personal data, please contact us first at coloursacross@gmail.com so that we have an opportunity to address your concerns.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

Further information is available on the ICO website.

 

Contact Us

If you have any questions about this Privacy Policy or how Colours Across Art Gallery uses your personal data, please contact:

Colours Across Art Gallery
coloursacross@gmail.com