A person may request access to their personal data, correction of inaccurate information, deletion where appropriate, or restriction of certain processing. A person may also object to processing based on legitimate interests, and may ask for clarification about how their data is used. Some requests may be limited where we must keep records for legal, accounting, or security reasons.
Available rights depend on the nature of the data and the legal basis for keeping it.
Requests
How to Make a Request
To make a privacy request, a person should provide enough information for us to identify the relevant record and confirm the scope of the request. We may ask for additional details before responding. If a request cannot be fully granted, we will explain the main reason in a concise manner.
Requests are reviewed before action is taken to protect confidentiality and prevent unauthorized disclosure.
Data Retention
Data Retention
Inquiry records are kept for the period needed to manage the request and any follow-up. Booking, invoice, and delivery records are retained for operational and accounting purposes. Gallery access data and technical logs are kept for a limited period unless a longer period is needed for security, dispute handling, or legal compliance. When data is no longer required, it is deleted, anonymized, or archived in a restricted form.
We keep data only for as long as it is needed for the service, recordkeeping, or legal obligations.
Policy Updates
Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our services, data practices, or legal requirements. The revised version will apply from the date it is posted on the website, unless a different effective date is stated. Where a change is material, we may provide a more direct notice through the usual contact channel or the private gallery.
We keep the policy under review and record the effective date when changes are made.
