Privacy Policy

Brian Sinfield Gallery Privacy Policy

The Basics

The terms “Us”, “We” and “Our” all refer to the Brian Sinfield Gallery. “You”, “Your” and other similar terms all refer to the users of our website and our services.

“Site” and “Website” refer to “Gallery” refers to our art gallery at 127 The Hill, Burford, Oxfordshire OX18 4RE.

The Brian Sinfield Gallery (BSG) website collects information through the use of cookies and interactive forms to provide services to you such as customised art galleries, remembering your login settings etc, and provides BSG certain information about you, your use of our website and website analytics, which are described in this document.

As part of our GDPR (General Data Protection Regulation) compliance, this Privacy Policy states what information we collect about you, how we process this data and how you can exercise your rights under GDPR to access, correct or remove personal data from our systems quickly and easily.


What Information Do We Collect?

If you use our website we may collect and process data such as your name, telephone number, street address, email address, IP address, web browser information, the pages you visit on our website, the artwork you show an interest in and your purchasing history.

Some of this data is anonymous and is used to measure metrics that help us to run an efficient business, such as the performance of our website.

Some of this data is personally identifiable to you and helps us understand the artwork you are interested in so that we can follow-up with personalised communications and offers. We also process the personal data we collect when you fill in a form on the website or correspond with us using email, telephone or postal mail.

Visitors to our gallery or to our exhibition stands who leave their contact information with us will also, with consent, be added to our marketing database along with details of our conversations regarding art preferences.

Depending on how you interact with our site or the level of enquiry you make, the following levels and types of information will be collected by us:


Previous Clients & New Leads

As with any business, our existing client base is a vital source of repeat business, while visitors to our website and gallery in Burford are similarly indispensable sources of new business.

If you have previously been a client of ours, have filled in a website form or registered as a user on our website, or have visited us in person and filled in a Contact Form, then we will have some information about you which could include your name, phone number, email address, home address, art preferences, details of our conversations and shopping cart activity.

We keep comprehensive details about our client's preferences and conversations with us as many are art collectors and have an expectation that we will continue working in their interests without necessarily having been formally instructed to do so. This allows us to perform such services as tracking down artworks they are interested in, alerting clients when desired art comes onto the market and keeping them abreast of artists and artworks that have come into our gallery.

We take the opportunity to ask both physical and virtual visitors to leave their details with us so that we may contact them in the future with details about new artists, art, exhibitions and events that we think may be of interest.

The nature of these contacts may be email announcements or by sending exhibition catalogues in the post, depending on individual preferences.

If you opt-in to hear from us, you can change your mind at any time by clicking the Unsubscribe link on any of our emails, or by following the instructions in the Removing your Details section of this document.


Anonymous Website Users

If you haven’t registered for an account on our website, or you have registered but you aren’t logged into your account, your use our website will be anonymous. We do not attempt to collect any personal data from you, however your visits may be tracked by third parties such as Google for their Google Analytics product. There is more information about that under the Cookies section of this document.


Registered Website Users

If you register for an account on our website, you will be able to access advanced features such as the Wish List, where you are able to add artwork from different artists to your own unique gallery.

We collect some information about how registered users use our website;

As well as the information you entered when registering (such as name, email address, phone number, postal address) we also note which artworks you place into your Wish List, which items you request further information about and which items you place into the shopping cart, as well as whether you completed the purchase or abandoned the cart.



We keep comprehensive data about our employees which may include all or some of the following: name, address, email address, phone number, curriculum vitae, HR related records, payroll records, National Insurance Number and any other information necessary for us to act as a responsible employer.

Employees can access this data by making a request to the gallery manager who will arrange for the data to be collated without undue delay.

Due to the sensitive nature of these records they will be printed and sealed to be given directly to the employee or sent by Recorded Mail to the home address we have on file. For ex-employees whose home address has changed, we will need proof of identity before we can action your GDPR request.



We keep detailed records of the artists we represent which can include name, address, website, email address, phone number(s), exhibition history, catalogue of artwork, sales history, commission history, digital images of artwork, images of artist, and other pertinent information necessary for making sure we are able to represent each artist to the highest possible standards.


Email Correspondence

We keep email correspondence for reference as they provide a record of our conversations with customers, potential customers, artists and suppliers and it is in the legitimate interest of those parties that we do so to conduct our business conversations with them effectively and efficiently.


Our Use of Cookies & Browser Data

Cookies are small pieces of data generated by our website and stored on your computer when you use our website.

We use two types of cookies: session cookies and persistent cookies.

Session cookies are created when you visit the website and are deleted from your system when you close your web browser. These cookies use data unique to your browsing session to provide services necessary to use the website such as your login status as you move from page to page. These cookies are deleted when you exit your browser.

Persistent cookies are used on our site for data that may need to survive between website visits such as whether you are logged in and the contents of your shopping cart. Their use allows you to use our website more easily by making user-friendly features available to you that would otherwise be impossible.

Some persistent cookies can be used to identify you as an individual. We do not use them for that purpose, but third-party suppliers such as Google will do so as part of their analytics service. There is more information about Google and how you can exercise your privacy rights with them below.

You can read more about how cookies work, what they can do and how to control them here:


Our Use of Google Analytics

We use Google Inc.’s Google Analytics product to monitor various aspects of the website including the number of website visitors we have, where they were referred from, times of visits, pages visited, length of visits, country of origin, errors generated by the site, website page speeds etc. These analytics give us valuable insight into how our website is used and problems users might be experiencing while navigating the site.

To provide these services, Google use their own persistent (tracking) cookies and then provide us with anonymised information once the data has been processed and aggregated. At no time do we have access to the “raw” data that can identify you personally or track your movements across the Web, but these cookies will allow Google to do so.

It is not necessary for you to allow these cookies onto your computer in order to use our website, and you can opt-out of Google Analytics by making preference changes on Google’s own systems here:

You can see Google’s Privacy Policy here:


Our Use of Credit Card Processors

If you make a purchase directly from our website, your credit card and billing information will be processed by one of our two card processing suppliers, and PayPal Inc.

When you enter your credit card information, you will be doing so directly into their systems rather than ours. Although we record information about the sale (your name, address etc.), at no time are your credit card details made known us.

You can see’s Privacy Policy here:

You can see PayPal’s Privacy Policy here:

For purchases made over the telephone, you will be asked for your personal details which are recorded and maintained on our customer database and, separately, for your credit card information which will be entered directly into a credit card payment terminal without being recorded or stored by us.


Data you Submit

If you contact us through the website, by phone or email, you may need to supply us with personal data to allow us to deal with your requests.

For data submitted on our website you will have the option to opt-in to receive promotional material from us if desired.

If you visit us in person at the gallery you will have the option of filling in a form asking us to keep in touch with you, again, at your discretion.

You do not need to consent to receiving marketing material and you can change your mind at any time by following the Unsubscribe link in the footer of all emails we send, or by following the instructions here.


Data Retention

Purchase history is kept indefinitely as ownership history is often vital to proving an artwork’s provenance in the future.

If you have given consent to be contacted for marketing purposes, we will keep your data indefinitely or until such a time when you request to be removed.

Employee Data is kept for seven years following the date employment ended.

Supplier Data (companies) may be kept indefinitely if doing so serves a beneficial purpose. Supplier data (partnerships and sole traders) is kept for three years after the last transaction.

Artist details are kept indefinitely as they provide vital history and provenance for their artwork.

Emails are kept indefinitely but are archived after 3 years.

Where we are required to by law to retain data for a given period of time we will do so in accordance with those laws.


Who is Collecting and Processing This Data?

We are The Brian Sinfield Gallery of 127 The Hill, Burford, Oxfordshire OX18 4RE.

Miranda Marks is our ICO Registered Data Controller and our Data Processor.


Who Will this Data be Shared With?

We do not sell, rent or lend our customer / artist or lead data to any third parties. The only exception is if we are compelled to by a law enforcement agency presenting legal authority to acquire such data from us.


Assignment on Sale of Business

If we sell our business in the future, all our assets, including our customer list and personally identifiable data, may be transferred with the business to the new owner. The new owner will be compelled to use your data in compliance with this Privacy Policy. If the new owner wishes to make changes to this Privacy Policy, they will be obliged to inform you of those changes and seek your permission to continue contacting you under the new terms.


Accessing, Amending or Deleting Your Data

You can request a copy of the data we hold about you by writing to our Data Controller or by making the request via the Contact Us page on our website.

If you would like to view and amend the data we hold about you, simply write to the address above detailing your request and, once we have confirmed your identity, this will be actioned within 30 days.

The request will be verified using the contact information we hold on file as a precaution against unauthorised data requests.

Note: We will not send any personal data to any email address or postal address that has not previously been verified as legitimate. If your email or postal address has changed, additional proof of identity may be required.


Removing your Details

You can easily remove your details from our marketing database by following the “Unsubscribe” link on any email you receive from us, or you can use the Contact Us page on our website.

Once we have confirmed your identity, this will be actioned within 30 days. The request will be verified using the contact information we hold on file as a precaution against unauthorised data requests.



This Privacy Policy was last updated on the 29th of June 2018, and is subject to future updates from time to time.