Privacy Statement

We understand that our customers and suppliers care about the use and storage of their personal information and data. This document sets out our policy on how we collect, process and protect your personal information in accordance with the General Data Protection Regulations (“GDPR”) and Data Protection Act 2023. Please be assured that your personal data will be treated as strictly confidential.

For the purpose of the GDPR and Data Protection Act 2023, Mary Drummond is the "data controller" and any enquiry regarding the collection, processing, storage or amendment of your information should be addressed to
Mary Drummond, Dockside Gallery, 84 Main Street, Tweedmouth, Berwick-upon-Tweed TD15 2AA

Telephone 01289 302437. Email art@docksidegallery.co.uk

Contents of this policy:

  • How we store your data

  • How we use your personal information

  • Data Security

  • Data Retention and Disclosure

  • Our Web Site (third party links & widgets, cookies, Google Analytics)

  • International Data Transfers

  • Your Rights

  • Changes to Our Privacy Policy

How we collect data

The data we collect is provided to us by you when:

  • you send us a message via our website

  • you provide information to us in an email, delivery note, invoice or a letter

  • you provide information to us by telephone

  • you tell us in person.

This includes customers, artists and other suppliers or tradesmen we may work with.

Information we collect

We collect this information when you make an enquiry and ask us for information, or when you make a purchase, or when we are in contact about working together. This personal information may include any of the following:

  • your name, address, email address and telephone number

  • your credit/debit card details, bank account details or other payment methods

  • your interests regarding art if you wish to be notified about upcoming events

  • your artist statement and portfolio details.

How we store your data

We take all reasonable technical and organisational precautions to store your information in a secure manner and prevent its loss or misuse.

How we use your personal information

The personal information provided to us will only be used in connection with the services we are providing to you with regard to Dockside Gallery. We will only use your personal data when legally permitted to do so under the lawful bases laid out below.

We may use your personal information for the following purposes:

  • A. To respond to your questions or comments via email, telephone or post.

  • B. To provide information that may be useful to you.

  • C. To notify you of upcoming events or new items in stock.

  • D. To process payment for goods you have purchased at Dockside Gallery.

  • E. To process payment for artwork or other supplies which you have supplied to Dockside Gallery.

To use your personal data for purposes A, B and C, we use the basis of consent because you have asked us to keep you informed. You may withdraw your consent at any time. If using personal data to serve our legitimate interests, we will always balance your rights and interests in the protection of your information against our rights and interests.
As for processing payments (purposes D and E), this is done on the basis of contract. We may also need to comply with a legal or regulatory obligation (e.g. accounting, taxation or law enforcement such as fraud prevention).

Data Security

Any information you give us relating to debit/credit card details is handled by a PCI DSS compliant third party (WorldPay) and is encrypted using their secure server technology. We do not hold any debit/credit card information on our own computer.

The transmission of email information via the Internet is not completely secure. Although we will do our best to protect your personal data such as using a secure server to receive messages through our web site, we cannot guarantee the complete security of data while you are transmitting it to our email address (any such transmission is at your own risk). Once we have received your personal information, we have appropriate security measures to prevent your personal data from being accidentally lost or accessed in an unauthorised way.

Data Retention and Disclosure

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, financial, accounting, or reporting requirements. We will never sell, share or distribute your personal data to any third parties unless expressly requested by you and except where we may have to share your personal data with our accountant, and if requested with HM Revenue & Customs or other governing bodies.

By law we have to keep basic information about our customers and suppliers (including contact details and financial/transaction data) for six years for tax purposes.

Our Web Site

Third Party Sites / Widgets
Our website may include links to third-party web sites. Our website is hosted by Squarespace which inserts its own cookies which are necessary for the website to display across all devices. Clicking on third-party links or enabling cookies may allow third parties to collect or share anonymous data about you.

Cookies & Google Analytics

This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.

These functional and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.

These analytics and performance cookies are used on this site, as described below, only when you acknowledge our cookie banner. We use analytics cookies to view site traffic, activity, and other data.

This website collects personal data to power our site analytics, including:

  • Information about your browser, network and device

  • Web pages you visited prior to coming to this website

  • Your IP address

This information may also include details about your use of this website, including:

  • Clicks

  • Internal links

  • Pages visited

  • Scrolling

  • Searches

  • Timestamps

We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity.


Cookies are small text files which are placed on your computer or mobile device when you visit a web site. This information is used by Google Analytics to track visitor use of our web site and to compile statistical reports on web site activity, such as how many visitors we receive and which pages are the most popular. The data gathered is anonymous and cannot be used to identify individual users.
We do not use cookies to gather personal data such as names or email addresses. Cookies are used by nearly all websites and do not harm your system. You can set your Internet browser to block Google Analytics and/or not to accept cookies. See www.aboutcookies.org for more information or visit the official UK ICO site.

International Data Transfers

We do not transfer any of your personal data outside the European Economic Area (EEA). However you should be aware that anonymous data from our web site hits is collated and analysed by US-based Google Analytics software.

Your Rights

In accordance with UK and European law under the General Data Protection Regulation (GDPR), you may request that we provide you with a copy of the personal information we hold about you. Provision of such information will be subject to the supply of appropriate evidence of your identity. You also have the right to request that we delete and destroy your personal data. You can view full details about all of your rights under GDPR on this external web site: http://www.knowyourprivacyrights.org

Where we are using your personal data on the basis of your consent, you are entitled to withdraw that consent at any time subject to applicable law. Where we process your personal data based on our legitimate interest, you have the right to object at any time to that use of your personal data subject to applicable law.

We do not use any form of automated decision making in our business.

If you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK regulatory authority for data protection issues www.ico.org.uk. We would be grateful if you would contact us first if you do have a complaint so that we can try to resolve it for you.

It is very important that the information we hold about you is accurate and up-to-date. Please let us know if at any time your personal information changes.

If any breach of personal data occurs, we are obliged to notify the ICO within 72 hours of becoming aware of the breach.

Changes to Our Privacy Policy
Any changes we make to our privacy policy in the future will be posted on this page. This document will reviewed by us every 12 months.

Date: 21 May 2023