Privacy Policy

Effective date: 17/02/2026

1. What this policy covers

This Privacy Policy explains how McKenna Gallery (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you visit our website, make an enquiry, join our mailing list, or purchase artwork online.

2. The personal data we collect

2.1 Data you provide to us

• Identity and contact details: name, email address, phone number, billing and delivery address.
• Order details: items purchased, order value, delivery instructions, communications about your order.
• Enquiries and messages: information you send via forms, email, phone, or social media.
• Marketing preferences: whether you opt in/out of email marketing and what you prefer to hear about.

2.2 Data we collect automatically

• Technical data: IP address, browser type/version, device, operating system, referral source.
• Usage data: pages visited, time on site, clicks and interactions (often via analytics and cookies).
• Cookie data: preferences and identifiers, where enabled (see “Cookies” section below).

2.3 Payment data

We do not store full payment card details. Payments are processed by our payment providers. They will process your payment details in accordance with their own privacy policies.

3. Why we use your data (purposes)

• To process orders, take payment, deliver purchases, and provide order updates.
• To respond to enquiries and provide customer support.
• To improve our website, services, and user experience (e.g., analytics).
• To send marketing communications (only where you have opted in, or where permitted by law).
• To prevent fraud, keep the site secure, and enforce our terms.
• To comply with legal obligations (e.g., tax and accounting rules).

4. Lawful bases for processing (UK GDPR)

We rely on one or more of the following lawful bases:

• Contract: when processing is needed to fulfil an order or provide requested services.
• Legal obligation: when we must keep records for tax, accounting, or other legal reasons.
• Legitimate interests: to run and improve our business (e.g., site security, basic analytics), provided your rights do not override those interests.
• Consent: for marketing emails and non-essential cookies where required (you can withdraw consent at any time).

5. Who we share your data with

We may share personal data with trusted third parties, only as needed to run our services:

• Website/hosting and platform providers (to host and operate the website).
• Payment processors (to take payments and prevent fraud).
• Delivery and logistics providers (to ship purchases to you).
• Email/marketing platforms (if you join our mailing list or opt in to marketing).
• Analytics providers (to measure and improve website performance, where enabled).
• Professional advisers (accountants, legal advisers) where necessary.
• Authorities where required by law or to protect rights and safety.

We require third parties to respect the security of your personal data and to treat it in accordance with the law.

6. International transfers

Some service providers may process data outside the UK. Where personal data is transferred internationally, we will take steps to ensure appropriate safeguards are in place (for example, UK adequacy regulations or appropriate contractual protections).

7. Marketing

If you opt in, we may send you updates about new works, artists, exhibitions, and gallery news by email. You can unsubscribe at any time by using the link in our emails or by contacting us.

We may also send non-promotional messages relating to your purchase (e.g., order confirmations and shipping updates).

8. Cookies

Our website uses cookies and similar technologies. Some cookies are strictly necessary for the website to work. Other cookies (e.g., analytics or marketing cookies) are optional and will be used only when enabled via your cookie preferences.

• Strictly necessary cookies: essential for site functionality and security.
• Preferences cookies: remember your settings (where enabled).
• Analytics cookies: help us understand usage and improve the site (where enabled).
• Marketing cookies: help personalise marketing (where enabled).

You can manage cookie preferences at any time using the cookie controls on our site (if available) and/or via your browser settings.

9. Data retention

We keep personal data only as long as necessary for the purposes set out in this policy, including legal, tax, accounting, or reporting requirements. For example, we may keep order records for a number of years to comply with applicable legal obligations.

10. Security

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. However, no website can guarantee absolute security.

11. Your rights

Under UK data protection law, you may have the right to:

• Request access to your personal data (a “subject access request”).
• Request correction of inaccurate or incomplete data.
• Request deletion of your data in certain circumstances.
• Object to or restrict processing in certain circumstances.
• Request data portability in certain circumstances.
• Withdraw consent where processing is based on consent (this won’t affect prior processing).

To exercise your rights, contact us using the details above. We may need to verify your identity before we can respond.

12. Complaints

If you’re unhappy with how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk/
Telephone: 0303 123 1113

13. Children

Our website is not intended for children and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us.

14. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.