Skip to main content
Now viewingPrivacy
Last updated: 2 June 2026

Privacy Policy

Who We Are

Galleria Objets ("we", "us", "our") is a contemporary art gallery located at 92 Brick Lane, London E1 6RL, United Kingdom. We operate the website and curator platform at curate.galleriaobjets.com. You can contact us at contact@galleriaobjets.com.

This policy sets out how we collect, use, and protect personal data in accordance with the UK GDPR and the Data Protection Act 2018.

Data We Collect

We may collect and process the following categories of personal data:

  • Contact and enquiry data: When you submit an enquiry or contact form, we collect your name, email address, and the content of your message.
  • Account data: For registered platform users, we store your email address, display name, and role. This applies to internal administrator accounts only.
  • Browsing data: We do not use tracking cookies or third-party analytics. Supabase, our database provider, may record standard server-side request logs (IP address, timestamp, request path) as part of normal infrastructure operation.
  • Instagram account data: If our Instagram Business account is connected via the IG Studio feature of our internal platform, additional data is collected from the Meta/Instagram Graph API. See our Social Media Policy for full details.

Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases depending on the processing activity:

  • Legitimate interest — for operating and securing our platform, and responding to enquiries.
  • Consent — where you have voluntarily provided personal data (e.g. submitting a contact form or connecting a social account).
  • Contract performance — for processing account data necessary to provide platform access to registered users.

Data Storage & Security

All personal data is stored in Supabase (hosted on AWS EU West — Ireland), which is located within the UK/EEA. Data is encrypted at rest using AES-256 and in transit via TLS. We follow industry-standard security practices including access controls, token rotation, and audit logging.

Data Retention

  • Enquiry and contact form data is retained for up to 2 years, then deleted.
  • Account data is retained for as long as the account is active. You may request deletion at any time.
  • Instagram account data is retained only while the account is connected to the platform. It is permanently deleted upon disconnection.

Cookies

We use only essential session cookies necessary for authentication and platform operation. We do not set advertising cookies, tracking cookies, or any third-party analytics cookies. No cookie consent banner is required for strictly necessary cookies under UK GDPR guidance.

Third-Party Services

We use the following third-party services to operate our platform:

  • Supabase — database infrastructure and authentication (AWS EU West, Ireland).
  • Vercel — website and platform hosting (edge network, UK/EU regions where applicable).
  • Meta / Instagram — only if IG Studio is connected; see our Social Media Policy for details.

We do not sell, rent, or share personal data with any other third parties.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access — you may request a copy of the personal data we hold about you.
  • Right to rectification — you may ask us to correct inaccurate or incomplete data.
  • Right to erasure — you may request deletion of your personal data ('right to be forgotten').
  • Right to restriction — you may ask us to restrict processing of your data in certain circumstances.
  • Right to data portability — you may request your data in a structured, machine-readable format.
  • Right to object — you may object to processing based on legitimate interest.

To exercise any of these rights, contact us at contact@galleriaobjets.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Data Requests

To submit a data access, rectification, or deletion request, email contact@galleriaobjets.com with the subject line "Data Request". You may also use our Data Deletion page for deletion requests specifically.

Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects when the most recent changes were made. Continued use of our platform following any changes constitutes acceptance of the updated policy.

For our Instagram and social media data practices, see our Social Media Policy.