Privacy Policy

Last updated: [07/06/2025]

At The Oriel Gallery, we are committed to protecting your privacy and handling your personal information transparently and securely. This Privacy Policy explains how we collect, use, and protect your data in accordance with the General Data Protection Regulation (GDPR) and applicable Irish law.

1. Who We Are

The Oriel Gallery
17 Clare Street, Dublin, D02 W925, Ireland
Phone: +353 1 676 3410
Email: info@theoriel.com

2. What Information We Collect

We may collect and process the following types of personal information:

• Name
• Email address
• Postal address
• Telephone number
• Payment details (if you make a purchase)
• Any other information you provide via our website forms, email, phone, or in person

3. How We Collect Your Information

We collect personal data when you:

• Fill out forms on our website (e.g., contact, purchase, newsletter)
• Communicate with us by phone, email, or in person
• Place an order or make a purchase
• Sign up for our newsletter or marketing communications
• Interact with us on social media
• Visit and interact with our website (usage data is collected via cookies and analytics tools)

4. How We Use Your Information

We use your personal information to:

• Process and fulfil your orders or requests
• Communicate with you regarding your enquiry, order, or account
• Provide customer support
• Send marketing communications, newsletters, or promotional offers (only if you have opted in)
• Improve our website, services, and customer experience
• Analyse website traffic and user behaviour (using Google Analytics)
• Comply with legal obligations

We do not sell your personal information to third parties. We may share your data with trusted service providers (see below) strictly for the purposes outlined above.

5. Third-Party Services

We use trusted third-party services to help us operate our website and communicate with you:

Google Analytics
We use Google Analytics to help us understand how visitors use our website. Google Analytics may collect information such as your IP address, device type, browser, referring website, and pages visited. Data is anonymised where possible.
Learn more about how Google uses data.

Mailchimp
If you subscribe to our email newsletter, your name and email address will be processed by Mailchimp, an email marketing platform. Mailchimp’s servers may be located outside the EU, but they are GDPR-compliant and use appropriate safeguards.
Read Mailchimp’s privacy policy.

WordPress Newsletter Plugin
We use the WordPress Newsletter plugin to manage newsletter subscriptions and email communications. Your subscription details are stored securely within our website and may be used to send you relevant updates, if you have opted in.

Other Providers
We may use additional providers for payment processing, web hosting, or analytics. We ensure all such providers meet applicable data protection requirements.

6. Lawful Basis for Processing

We process your data based on at least one of the following legal grounds:

• Your consent (for example, when you subscribe to our newsletter)
• The performance of a contract (e.g., when you place an order)
• Compliance with legal obligations
• Our legitimate interests (such as improving our services or responding to enquiries)

7. Data Retention

We only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law. This may vary depending on the nature of your interaction with us.

8. International Data Transfers

Some of our service providers (e.g., Mailchimp, Google) may process your data outside the European Economic Area (EEA). We ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your information.

9. Your Rights

Under the GDPR, you have the following rights:

• Access: Request access to your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (“right to be forgotten”)
• Restriction: Restrict processing of your data in certain circumstances
• Objection: Object to our processing of your data
• Portability: Request a copy of your data in a portable format
• Withdraw Consent: Withdraw your consent at any time (for consent-based processing)
• Lodge a Complaint: Contact the Data Protection Commission (DPC) if you believe your rights have been violated

To exercise your rights, please contact us.

10. How We Protect Your Information

We take your data security seriously. We implement appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. Sensitive information (such as payment details) is encrypted and handled securely.

11. Children’s Privacy

Our website and services are not intended for children under 16 years old. We do not knowingly collect personal data from children under this age.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Please check back periodically to stay informed.

13. Contact Us

If you have any questions, concerns, or wish to exercise your data rights, please contact us at:
info@theoriel.com

For details about how we use cookies and similar technologies, please refer to our Cookie Policy.

Please use the contact form below to send us a confidential message.
We will never share your contact details with any third parties.