PRIVACY POLICY

At Surpase Gallery, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, physical gallery, or use our services. Please read this privacy policy carefully.

1. Information We Collect

1.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Subscribe to our newsletter
• Create an account on our website
• Purchase artwork or services
• Register for exhibitions or events
• Contact us via email, phone, or contact forms
• Participate in surveys or promotional activities

This information may include:

• Name and contact information (email address, phone number, mailing address)
• Billing and shipping information
• Payment information (processed securely through third-party payment processors)
• Account credentials
• Art preferences and interests
• Communications you send to us

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Operating system
• Access times and dates
• Pages viewed and links clicked
• Referring website addresses
• Device information

1.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. Cookies are files with a small amount of data that are sent to your browser from a website and stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our website and services
• Process and complete transactions
• Send you updates about exhibitions, events, and new artworks
• Respond to your comments, questions, and provide customer service
• Send you technical notices and support messages
• Personalize your experience and deliver content relevant to your interests
• Monitor and analyze usage and trends to improve our services
• Detect, prevent, and address technical issues
• Comply with legal obligations
• Protect against fraudulent or illegal activity

3. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: You have given us permission to process your personal information for specific purposes
• Contract: Processing is necessary to fulfill our contractual obligations to you
• Legal obligations: We need to process your data to comply with legal requirements
• Legitimate interests: Processing is necessary for our legitimate business interests, provided these are not overridden by your rights and interests

4. How We Share Your Information

We may share your information in the following situations:

4.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as payment processing, shipping, email delivery, hosting services, customer service, and marketing assistance.

4.2 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4.4 Consent

We may share your information with your consent or at your direction.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection
• Secure data storage and backup procedures

However, please note that no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period depends on:

• The nature of the information
• The purposes for which it is used
• Legal requirements applicable to the situation
• The need to defend or establish legal claims

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy of that information in a structured, commonly used, and machine-readable format.

7.2 Correction

You have the right to request that we correct any inaccurate or incomplete personal information about you.

7.3 Deletion

You have the right to request that we delete your personal information, subject to certain exceptions.

7.4 Objection and Restriction

You have the right to object to or request that we restrict certain processing of your personal information.

7.5 Withdraw Consent

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

7.6 Opt-Out of Marketing

You can opt-out of receiving marketing communications from us by following the unsubscribe link in our emails or by contacting us directly.

8. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt-out of the sale of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information provided below.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. If you are located outside the United States and choose to provide information to us, please note that we transfer the information to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our services after any modifications to this Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide by the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

For EU residents: You also have the right to lodge a complaint with your local data protection supervisory authority.