1 Introduction

The CERA PROJECT is committed to protecting your privacy. We comply with the General Data Protection Regulation (GDPR) when dealing with your data. Further details on GDPR can be found on the website of the Information Commissioner (www.ico.org.uk). We may change this Policy from time to time so please check this page to ensure that you are happy with any changes.

2 Cookies

Cookies are small text files used to store information. They are placed on your computer and are commonly used by many reputable internet websites. ceraproject.com uses cookies to tailor our site to your needs and interests. Some of the information we store includes: > if you have logged in. Your browser must be set to accept cookies to enjoy the advanced features and services of the website. In the interests of safety, we never store information regarding your password, bank or credit card details in cookies. In addition, we have configured all our cookies so that only ceraproject.com can view them.

3 How do we collect information from you?

You may provide us with information by corresponding with us by phone, e-mail, or online. This includes information you provide when you use our website, enquire about or purchase an artwork or publication, or attend an exhibition or gallery event. The personal information we collect might include your name, address, email address, phone number, and financial and debit/credit card information. 16 Years and Under If you are aged 16 or under, please get your parent/guardian's permission beforehand whenever you provide us with personal information.

4 How is your information used?

We may use your information to: process a purchase that you have made; carry out our obligations arising from any contracts entered into by you and us; and send you communications which you have requested and that may be of interest to you. You have a choice about whether you wish to receive information from us. If you do not want to receive direct marketing communications from us then you can request to be removed from our database or unsubscribe from our newsletter. The accuracy of your information is important to us. If you change your email address or any of the other information we hold is inaccurate or out of date, please contact us. You have the right to ask for a copy of the information the CERA PROJECT holds about you.
You have the right to take any complaints about how we process your data to the Information Commissioner.

5 Links to third-party sites

Our website may contain links to other websites run by other organizations. This privacy policy applies only to our website, so we encourage you to read the privacy statements on the other websites you visit. If you linked to our website from a third-party site, we cannot be responsible for the privacy policies and practices of that third-party site and recommend that you check the policy of that third-party site.

6 How we Protect Your Data

When you give us personal information, we take steps to ensure that it is treated securely. We have implemented generally accepted standards of technology and operational security to protect personal data from loss, misuse, or unauthorized alteration or destruction. We will notify you promptly in the event of any breach of your data which might expose you to serious risk. We will not transfer information about you outside the European Economic Area without suitable safeguards.

7 How long do we keep your information?

We are required to hold some types of information to fulfil our statutory obligations (for example financial records regarding purchases). We will hold your data on our systems for as long as it is in the gallery's legitimate interest to do so. We will review your data and our retention periods to establish whether we are still entitled to process it. If we decide that we are not entitled to do so, we will stop processing your data except that we will retain your data in an archived form to be able to comply with future legal obligations e.g. compliance with tax requirements and exemptions, and the establishment, exercise or defence of legal claims. We securely destroy all financial information once we have used it and no longer need it.