The Cynthia Corbett Gallery (the “Gallery,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (GDPR), Anti-Money Laundering (AML) obligations, and other applicable data protection laws.
In this policy, “we,” “us,” and “our” means The Cynthia Corbett Gallery (trading as corbettPROJECTS), and “you” means the individual to whom the information relates. We are the data controller and we operate our website www.thecynthiacorbettgallery.com (our site).
By visiting our website, engaging with us, or using our services, you agree to the terms of this Privacy Policy.
Information we collect about you
We may collect and store the following types of information about you when you visit our site or by corresponding with us (for example, by e-mail). This includes information you provide when registering to use our sites or sharing any data via our social media functions. The information given to us may include:
- your name.
- your contact information such as your address, email address and telephone
number.
- your payment details / financial data i.e. your bank name, account number and sort code.
- when browsing our site, your IP address, your browser type and language.
- information related to your attendance of, and interest in, The Cynthia Corbett
Gallery events and art fairs.
- information about you that you give us in person at our events and fairs, by filling in forms on our site www.thecynthiacorbettgallery.com (our site) (e.g. the contact us section or to sign up to our mailing list) or by corresponding with us by phone, e- mail or otherwise;] and
- information in relation to your purchase of our artwork or use of our services.
How we collect information about you
We collect information through:
- Direct interactions: When you fill out forms on our website, make inquiries, purchase artwork, or communicate with us through email, phone, or social media.
- Automatic collection: We use cookies and similar technologies to collect data on your browsing activities on our website. For more details on cookies, please see our Cookie Policy.
Additionally, to comply with Anti-Money Laundering (AML) regulations, we may request personal information necessary to verify your identity when purchasing artwork or engaging in certain transactions.
The Cynthia Corbett Gallery is an Art Market Participant under the Money Laundering Regulations 2017. Accordingly, we might need to collect information from you to adhere to our responsibilities. Proceeding with such qualifying transactions is contingent on the provision of documents and details requested. Note that we employ a third-party service to securely collect and store personal data according to GDPR, the details of which can be provided upon request.
Per Article 13 of the UK GDPR, in relation to personal data received from the customer specifically for the business's adherence to the Money Laundering Regulations, personal data will be processed only—
(a) for the purposes of preventing money laundering, terrorist financing or proliferation financing, or (b) as permitted under paragraph (3).
See Regulation 41 via: https://www.legislation.gov.uk/uksi/2017/692/regulation/41
Legal basis for processing
Our processing of your personal information is necessary (i) for the purposes of legitimate interests pursued by us; (ii) in order to comply with a legal obligation to which we are subject; or (iii) for the performance of contracts to which you will be a party to and in order to take steps at your request prior to you entering into those contracts.
In relation to any processing of special categories of personal data, we will generally rely on obtaining specific consent from you at the time unless there is otherwise a legal requirement for us to process such information.
Legitimate interests
Where our processing is based on the legitimate interest grounds described above, those legitimate interests are:
- collecting personal information to provide you with a smooth and efficient client experience.
- running our business.
- to make sure you receive updated information on The Cynthia Corbett Gallery's activities.
- to provide the services you have requested; and
- for our own marketing, research and development.
- legal obligation: to comply with Anti-Money Laundering (AML) obligations and tax or regulatory requirements.
Anti-Money Laundering (AML) Obligations
To comply with UK HMRC regulations, we are required to undertake Customer Due Diligence (CDD) procedures for certain transactions. This means that we may need to verify your identity and other relevant information before processing certain transactions. This may include the collection of personal information such as proof of identity (e.g., passport or driving license), proof of address (e.g., utility bill), and source of funds.
We will inform you if such checks are necessary, and the personal data we collect for this purpose will be processed securely and only used for compliance with AML laws
How we use your information
We use your information to:
- provide information about our artwork and services to you.
- keep you informed about artwork, artists and events that we think you may find
interesting.
- carry out our obligations arising from any agreements entered into between you and us.
- communicate with you.
- administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes.
- keep our site safe and secure.
- to comply with legal obligations: including Anti-Money Laundering (AML) regulations and tax requirements.
- for security and to check your identity.
Sharing Information with Third Parties
We may share your personal data with third parties in the following circumstances:
- Service providers: We may share your data with trusted service providers who help us process payments, deliver products, or manage marketing communications.
- Legal obligations: We may disclose your personal data to law enforcement agencies, HMRC, or other governmental bodies if required by law, particularly in the context of AML obligations.
- Business transfers: If we undergo a business reorganization, sale, or transfer, your data may be transferred to a new entity.
All third-party processors are contractually bound to protect your personal data and to use it only as instructed by us.
Data Protection in Context of Customer Due Diligence (CDD)
If your transaction requires Customer Due Diligence (CDD), we will collect personal data necessary to comply with our AML obligations. This data may include your identification details, proof of address, and information regarding the source of funds.
We take appropriate measures to protect your personal data and ensure that it is processed securely. Your personal information will only be used for the purpose of compliance with AML laws and will not be used for any other purpose.
Your rights
Under the GDPR, you have the following rights:
- to request access to or a copy of any personal data which we hold about you;
- to rectification of your personal data, if you consider that the information we are holding is inaccurate;
- to ask us to erase your personal data, if you consider that we do not have the right to hold it;
- to withdraw consent to our processing of your personal data (to the extent such processing is based on previously obtained consent);
- to ask us to stop or start sending you marketing messages as described below in the marketing section;
- to restrict processing of your personal data;
- to data portability (moving some of your personal data elsewhere) in certain circumstances;
- to object to your personal data being processed in certain circumstances; and
- to not be subject to a decision based on automated processing and to have safeguards put in place if you are being profiled based on your personal data.
Any request from you for access to or a copy of your personal data must be in writing and we will endeavour to respond within a reasonable period and in any event within one month in compliance with data protection legislation. We will comply with our legal obligations as regards your rights as a data subject.
We aim to ensure that the information we hold about you is accurate at all times. To assist us in ensuring that your information is up to date, do let us know if any of your personal details change at the following email address info@thecynthiacorbettgallery.com.
Marketing
Where you are one of our clients or have otherwise agreed to be contacted for marketing we may use your personal information to send you information about our artwork, events, and art fairs. You can stop receiving marketing messages from us at any time by clicking the‘Unsubscribe’ link at the bottom of any email we send you.
You also have the option of "unsubscribing" from our mailing list at any time thereby disabling any further such e-mail or other communication from being sent to you by emailing info@thecynthiacorbettgallery.com.
We will action any opt out request from you without delay.
Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including to comply with AML and other legal obligations. In some cases, we may retain personal data for a longer period as required by law (e.g., for tax or accounting purposes).
Where we are permitted to send you direct marketing communications we may retain your contact information necessary for this purpose, for as long as you do not unsubscribe from receiving the same from us. If you opt out from marketing, we will retain your information to enable us to respect your wishes to not be contacted for marketing purposes.
Security and storage of your information
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
The information that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us, or for one of our service providers.
When we, or our permitted third parties, transfer your information outside the European Economic Area, we or they will impose obligations on the recipients of that data to protect your information to the standard required in the European Economic Area or otherwise require the recipient to subscribe to international frameworks intended to enable secure data sharing. In the case of transfers by us, we may also transfer your information where: (i) the transfer is to a country deemed to provide adequate protection of your information by the European Commission; or (ii) where you have consented to the transfer.
How we use cookies
What are cookies?
A cookie is a small file which asks permission to be placed on your computer’s hard drive.Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site.
A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. The "Help" or "Internet Settings" functions within your browser should tell you how. Please be aware that that if you select to refuse or restrict cookies you may be unable to access certain parts of our site. You can find more information about cookies at www.allaboutcookies.org.
Our use of cookies
We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our site in order to tailor it to customer needs. We only use this information for statistical analysis purposes; these cookies cannot be used to identify individuals.
Links to other sites
Our site may contain links to other websites, including via our social media buttons. While we try to link only to websites that share our high standards and respect for privacy, we are not responsible for the content, security, or privacy practices employed by other websites and a link does not constitute an endorsement of that website. Once you link to another website from our Sites you are subject to the terms and conditions of that website, including, but not limited to, its internet privacy policy and practices. Please check these policies before you submit any data to these websites.
Certain features of our site will allow for social networking. You should ensure when using these features that you do not submit any personal data that you do not want to be sent, collected or used by other users, such as profile details or e-mail address.
Complaints
Questions, comments and requests regarding this policy are welcomed and should be addressed to info@thecynthiacorbettgallery.com.
If you have any concerns about our use of your information, you also have the right (as a UK resident) to make a complaint to the Information Commissioner's Office, which regulates and supervises the use of personal data in the UK, via their helpline on 0303 123 1113.
Children under 14
We do not intentionally collect any information on children under 14 years of age. We will undertake to delete any details of such users where a parent or guardian has notified us that any such details have been obtained.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the introduction of new services. We will post any updates on this page and notify you of significant changes.
Contact Us
If you have any questions or concerns about how your personal data is processed or wish to exercise your rights, please contact us at:
The Cynthia Corbett Gallery
info@thecynthiacorbettgallery.com
This policy was last updated on 20 March 2025.