Legal
Privacy Policy
1. Who we are
This Privacy Policy explains how Teal Creatives Ltd (“we”, “us”, “our”) collects, uses and protects your personal data when you use our websites or get in touch with us.
We are the “data controller” for your personal data under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
Teal Creatives Ltd
Company number: SC746327
Registered in Scotland
Privacy contact email:
privacy@tealcreatives.co.uk
2. Websites this policy covers
This policy applies to:
and any associated sub-domains or pages that link to this Privacy Policy.
3. The personal data we collect
3.1 Information you provide to us
We collect personal data when you choose to share it with us, for example:
- Contact and enquiry forms – name, email address and the content of your message.
- Commissions, sales and purchases – name, contact details, delivery address and basic transaction details (what you purchased and when).
- Newsletter / subscription sign-ups – name, email address and any preferences you choose to share (for example, interest in exhibitions or new work).
3.2 Information we collect automatically
When you visit our websites, we may automatically collect some technical information, for example:
- IP address and approximate location;
- browser type and device type;
- pages visited, time and date of visit, and how you arrived at the site.
We use this information to run the websites, understand how they are used, and keep them secure.
3.3 Cookies
Our websites use cookies and similar technologies to help them work properly and to understand how they are used. You can control cookies through your browser settings. If we use any non-essential cookies (for example, analytics), we will ask for your consent where required.
4. How and why we use your data
We use your personal data for the following purposes:
- To respond to enquiries and messages you send us.
- To manage commissions, artwork sales and any contracts between us.
- To send you email updates where you have subscribed to our mailing list.
- To operate, maintain and improve our websites.
- To keep business and financial records that we are required to hold by law.
We rely on different legal bases depending on the context:
- Contract – where we need your data to respond to an enquiry about a commission or sale, or to fulfil a contract with you.
- Legitimate interests – for example, to respond to general enquiries, maintain our websites and keep basic records, as long as this is proportionate and respects your rights.
- Consent – for sending you email newsletters and updates where you have chosen to subscribe. You can withdraw your consent at any time using the unsubscribe link or by contacting us.
- Legal obligation – where we are required to keep certain records for tax or accounting purposes.
5. Sharing your personal data
We do not sell your personal data, and we do not share it with third parties so they can market to you.
We only share your data with trusted third parties where this is necessary to provide our services or run our business, for example:
- Website hosting and email providers.
- Payment service providers, when you purchase artwork or services.
- Email newsletter platforms, if you choose to subscribe.
- Professional advisers (such as accountants), where required.
These third parties are only allowed to use your data to provide services to us and must keep it secure.
6. International transfers
Some of our service providers may be based outside the UK. Where this is the case, we will ensure that appropriate safeguards are in place (for example, standard contractual clauses) so that your personal data remains protected to UK standards.
7. How long we keep your data
We keep your personal data only for as long as we reasonably need it for the purposes described in this policy, including to meet legal, accounting or reporting requirements. As a guide:
- Enquiries: usually up to 2 years after our last interaction.
- Newsletter subscribers: until you unsubscribe or we close the mailing list.
- Sales and financial records: normally 6 years from the end of the financial year, to comply with tax and accounting rules.
We may keep information for longer if we need it to establish, exercise or defend legal claims.
8. How we protect your data
We take reasonable technical and organisational measures to protect your personal data, including:
- Using reputable hosting and email providers.
- Restricting access to personal data to those who need it.
- Using passwords and other security measures on systems that hold personal data.
However, no method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Your rights
Under data protection law, you have rights in relation to your personal data. Subject to certain conditions, these include:
- Access – to ask for a copy of the personal data we hold about you.
- Rectification – to ask us to correct inaccurate or incomplete data.
- Erasure – to ask us to delete your data in certain circumstances.
- Restriction – to ask us to limit how we use your data in certain circumstances.
- Object – to object to our use of your data where we rely on legitimate interests, or for direct marketing.
- Data portability – to ask for a copy of certain data in a machine-readable format, in some circumstances.
- Withdraw consent – where we rely on consent (for example, email newsletters), you can withdraw this at any time.
To exercise any of these rights, please contact us at privacy@tealcreatives.co.uk.
10. Complaints
If you have any concerns about how we use your personal data, please contact us first so we can try to resolve the issue.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK data protection regulator:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
11. Third-party links
Our websites may include links to other websites, such as galleries, magazines or social media platforms. We are not responsible for the privacy practices or content of those sites. We recommend that you read their privacy policies before providing any personal data.
12. Children
Our websites and services are not primarily aimed at children. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data without appropriate consent, please contact us and we will delete it.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example to reflect changes in law or how we operate. When we do, we will update the “Last updated” date at the top of this page.
We encourage you to review this page from time to time to stay informed about how we use your personal data.