Privacy Policy

Last updated: 17 July 2026

Norton Way Gallery ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, why, how we use it, and your rights in relation to it, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to https://nortonwaygallery.com.


Who we are

Norton Way Gallery is the data controller responsible for your personal data.

Address: 51 Norton Way North, Letchworth, Hertfordshire, SG6 1BH
Phone: +44 (0)1462 685139
Email: info@nortonwaygallery.com

Norton Way Gallery is registered as a data controller with the Information Commissioner's Office (ICO), the UK's data protection regulator.

Our ICO registration reference is ZC201124.


What information we collect

We collect personal data when you:

  • Contact us via our Contact page form (name, email address, subject, phone number, message)
  • Enquire about an artwork, including via our Own Art finance enquiry popup (name, email address, phone number, message)
  • Join our mailing list (name, email address)
  • Visit our website (IP address, browser/device information, and cookie data — see Cookies below)

We do not collect payment card details directly — these are handled by our payment provider(s) and are never stored on our systems.


Why we collect it and our legal basis

What we collect Why we use it Legal basis
Contact form details To respond to your enquiry Legitimate interest (responding to enquiries you've initiated)
Artwork/Own Art enquiry details To respond to your enquiry about purchasing an artwork, including discussing Own Art finance options Legitimate interest / Steps taken at your request prior to a possible contract
Mailing list sign-up To send you news, exhibitions, and updates from the gallery Consent (you can withdraw this at any time — see Your Rights below)
IP address / cookies To understand site traffic and keep the site secure Legitimate interest

We only use your information for the purpose you provided it for, unless we reasonably consider we need to use it for another reason and that reason is compatible with the original purpose.


Own Art enquiries — important note

If you enquire about purchasing an artwork using the Own Art scheme, we (Norton Way Gallery) act as a credit broker, introducing you to our credit provider, Novuna Consumer Finance (a trading style of Mitsubishi HC Capital UK PLC), via the Own Art scheme operated by Creative Sector Services CIC (trading as Creative United).

The initial enquiry form on our website does not submit your details directly to Novuna or Creative United. If you decide to proceed with an Own Art credit application, a member of our staff will take you through that application separately, and at that point your details will be shared with Novuna Consumer Finance and, where relevant, Creative United, in order to process your credit application. Their own privacy policies will apply to their handling of your data from that point — we'd encourage you to review these before applying:

Note these are two separate companies — Novuna Consumer Finance (a trading name of Mitsubishi HC Capital UK PLC) is the actual lender, while Creative United (Own Art) runs the wider scheme. Both may hold your data if you apply, so both policies are worth reading.


Who we share your information with

We do not sell your personal data. We may share it with:

  • Novuna Consumer Finance and Creative United, but only if you proceed with an Own Art credit application (see above)
  • Mailchimp, if you join our mailing list, so we can send you updates. Mailchimp's own privacy policy is available at https://mailchimp.com/legal/privacy/
  • Google Analytics, to help us understand how visitors use our site (see Cookies below)
  • Google, via reCAPTCHA, to help protect our forms from spam (see Google's Privacy Policy: https://policies.google.com/privacy)
  • PayPal, when you make a payment or pay a deposit through our site. We do not handle or store your card or payment details ourselves — these are processed directly by PayPal. See PayPal's own privacy policy: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
  • WooCommerce, the e-commerce platform that manages and stores your order details on our website
  • Our website hosting provider (Cloudways), who stores the data submitted through our site on our behalf
  • Law enforcement or regulators, where we're required to by law

We do not transfer your personal data outside the UK except where a third party listed above does so as part of their own service (for example, if a service provider's servers are located outside the UK). Where this happens, appropriate safeguards (such as the UK's International Data Transfer Agreement or adequacy regulations) will apply.


How long we keep your information

  • Contact and enquiry form submissions: kept for up to 12 months from your last contact with us, in case of follow-up regarding an artwork or enquiry, then deleted.
  • Purchase and order records: if you make a purchase through our site, we're legally required to keep transaction and order records for at least 6 years, in line with UK tax and accounting record-keeping requirements (HMRC).
  • Mailing list data: kept for as long as you remain subscribed and engaged. If you unsubscribe, or ask us to remove you, we will delete your details. We periodically review inactive subscribers (for example, contacts who haven't opened any emails in over 2 years) and may remove them or ask if they'd like to stay subscribed.
  • Server logs / IP addresses: kept for up to 12 months.

Cookies

Our website may use cookies to understand how visitors use the site. You can control or delete cookies through your browser settings — most browsers let you refuse cookies or alert you when a cookie is being set. Blocking cookies may affect how parts of the site function.

We use Google Analytics to help us understand how visitors use our site (for example, which pages are most visited). Google Analytics uses cookies to collect this information, which may include your IP address. This data is processed by Google in accordance with their own privacy policy: https://policies.google.com/privacy

You can opt out of Google Analytics tracking across all websites using Google's browser add-on: https://tools.google.com/dlpage/gaoptout


Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Erase your data ("right to be forgotten"), in certain circumstances
  • Restrict or object to our processing of your data
  • Withdraw consent at any time where we rely on consent (e.g. mailing list — you can unsubscribe via the link in any email, or by contacting us)
  • Data portability, where applicable
  • Complain to the Information Commissioner's Office (ICO) if you believe we have not handled your data properly:
    ICO website: https://ico.org.uk — Helpline: 0303 123 1113

To exercise any of these rights, contact us using the details above.


Security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.


External links

Our site contains links to other websites (including artists' own sites, social media, and the Own Art website). We are not responsible for the privacy practices or content of external sites. We encourage you to review their privacy policies separately.


Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page shows when it was last revised. We encourage you to review this page periodically.


Contact us

If you have any questions about this policy or how we handle your data, please contact us:

Norton Way Gallery
51 Norton Way North, Letchworth, Hertfordshire, SG6 1BH
Phone: +44 (0)1462 685139
Email: info@nortonwaygallery.com

Or use our Contact page.