Privacy Policy

There are no two things we care about more than falling deeply in love with a work of art and the privacy of our customers.

This Privacy Policy applies to the information from Ramsay Fairs, which is owned and operated by Ramsay Fairs Group Ltd. We are registered in England and Wales (“Ramsay Fairs,” “we,” “us,” or “our”).

We appreciate you visiting our website – RamsayFairs.com (the “Site“). We are committed to protecting your privacy and we’ve created this Privacy Policy to let you know what to expect when you interact with us on the Site, register for our events and buy art from our art fairs (collectively, “Services”). This Privacy Policy may be updated from time to time and we will notify you of any material changes by posting the new Privacy Policy on the Site. We recommend you consult this policy regularly for any changes.

By accessing or using our Services in any way, you agree that your information may be collected, stored, shared, and used as described in this Policy. This Policy applies to all of our Services, regardless of how you use them. This Policy only applies to how we collect, store, share, and use information. This Policy does not apply to any entity that we do not own or control, or to any person that we do not employ or manage.

For the purpose of the Data Protection Act 2018 (the Act), the data controller is The Affordable Art Fair Ltd., a company registered in England and Wales. Our company number is 11679676 and our registered office is Unit 2.14 Chester House, 1-3 Brixton Road, London SW9 6DE. Our Data Protection Officer (DPO) is the Chief Marketing Officer. If you have any requests concerning your personal data or any queries with regard to how we handle your data you can contact the DPO by email marketing@ramsayfairs.com or by post using the address above.

INTERNATIONAL CUSTOMERS

This Privacy Notice applies internationally, but there are additional terms for certain countries which supplement this notice and take priority over any conflicting provisions. You’ll find more information in the ‘For all non-UK customers‘ section below.

PROCESSING YOUR PERSONAL DATA

We collect information to improve, protect and customise our Site, Services, features and content, develop new Services and to enable you and other Users to enjoy and easily navigate the Site.

We may collect personal data when you:

1. Fill in forms on our Site, such as mailing list sign-up

2. Register tickets, either through our Site, or through our ticketing partners

3. Purchase artwork from art fairs

4. Correspond with us by phone, email, and social media

5. Enter into a competition

6. Complete a survey

7. Agree to the use of Cookies and other web tracking tools

8. Report problems or make a complaint

The information you give us may include:

1. Name, home address, email address, telephone number, credit/debit card or other payment details;

2. Details of your preferences, opinions and lifestyle;

3. Information about your use of our website, events and services;

4. The communications you exchange with us or direct to us via letters, emails, chat service, calls, and social media.

5. Location, including real-time geographic location of your computer or device through GPS, Bluetooth, and your IP Address, along with crowd-sourced Wi-Fi hotspot and cell tower locations, if you use location-based features and turn on the Location Services settings on your device and computer.

We use ticketing partners such as See Tickets and Eventbrite for payment. Your personal data may be shared with us by third parties in certain circumstances. This may include (but is not limited to) ticketing information such as date of purchase, date of visit, ticket type, number of tickets and purchase history.

You can learn more about See Tickets and read their T&C’s here: https://www.seetickets.com/content/terms-and-conditions.

You can learn more about Eventbrite and read their privacy policy here: https://www.eventbrite.co.uk/support/articles/en_US/Troubleshooting/eventbrite-privacy-policy?lg=en_GB.

PURPOSE OF PROCESSING YOUR PERSONAL DATA

Activity Purpose of processing Lawful basis

Registering for an event Dealing with your request to attend an event Contract

Internal accounting processes Legal requirement

Providing you with information about our products and services Legitimate interest

Adding you to our mailing list Consent

Making an enquiry Dealing with your enquiries or requests Legitimate interest

Providing you with information about our products and services Legitimate interest

Browsing and searching our website Personalising your visit by using cookies to recall your preferences and previous interactions with us Consent

Completing a survey Providing you with more relevant offers and information about our products and services Legitimate interest

Adding you to our mailing list Consent

Entering a competition Dealing with your entry and administering the competition Contract

Adding you to our mailing list Consent

Website maintenance and security Protecting your personal data and responding to threats and incidents Legitimate interest

THE LEGAL BASIS ON WHICH WE RELY ARE:

Legitimate interests

We rely on legitimate interests as a basis for processing including intra-group transfers and some of our marketing.

For example, if you are a previous customer, we may process your personal data to personalise your emails, or to update you about significant changes to our Services.

An intra-group transfer may occur with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

We carefully weigh up our legitimate interests against your rights, taking into consideration your reasonable expectations, based on your relationship us. We will inform you of the processing activity and give you the option to opt out when you give us your data, or in our first communication with you.

For more information, you can request a copy of our Legitimate Interests Assessment.

Consent

We rely on consent as a basis for sharing your information for other organisations to use and for some of our marketing. For example, if we have no prior direct relationship with you as a customer, we will ask your consent before we send you emails.

Consent is based on genuine choice and will always be freely given, specific and fully informed.

Contract

Where processing is necessary for us to carry out the pre-contract and contractual relationship between us, our customers and the suppliers we use to deliver our contracts.

Vital interests

If there is an emergency at one of our events, we may share limited personal data with the emergency services to protect the lives and vital interests of our guests and the general public. For example, if the only ID a guest carries is their event ticket, we may provide their personal data to the ambulance service to facilitate contact with their GP and next of kin.

MARKETING

We would like to use your personal data to send you details of products or services that we offer that we have identified as likely to be of interest to you. We will only send you information in line with the preferences you communicate to us.

We use profiling to personalise the marketing communications you receive. For example, we might like to use your name, email address, location and website history to send you invitations to a local art fair, recommending artists there that would suit your tastes and suggesting website content that would help you to get the most from your visit.

If at any point you would like to opt-out of receiving communications from us, please use the Update Preferences in your emails from us, or contact marketing@ramsayfairs.com

RECIPIENTS / CATEGORIES OF RECIPIENTS

In carrying out our business including our obligations to you, we may use sub-contractors. These include couriers, mailing houses, email broadcasters, and marketing agencies. We will ensure that they respect your privacy and abide by all data protection laws.

Disclosure of your information

We will disclose your personal information to third parties:

1. in the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets;

2. if The Affordable Art Fair Limited or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets;

3. if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of and other agreements; or to protect our rights, property, or safety or that of our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction;

4. in specific situations where you give us explicit consent to do so, e.g. if you request direct contact with a gallery exhibiting artwork on our website.

TRANSFERS TO THIRD COUNTRIES

We operate businesses and store data in multiple jurisdictions, some of which are not located in the European Economic Area (EEA). As part of our processing activities we may transfer and store your personal data to our staff and partners, including locations in USA, Hong Kong and Singapore. We will always ensure we have a written data processing agreement in place to ensure the same level of data protection in the United Kingdom will apply.

RETENTION PERIODS

We will keep your personal data in connection with the services/products you have bought for 7 years after the last purchase. We need to retain this data for our own accounting purposes and for legal and tax purposes.

In terms of personal data we use for marketing, we will keep this data for as long as we are able to market to you. If you withdraw your consent or opt-out of marketing communications, we will keep your contact details only to ensure that we do not contact you again for marketing purposes.

Where we use consent or legitimate interest as the basis for direct marketing, we will take this to be valid for 2 years from the time of your most recent significant interaction with us, which may include registering for an event ticket or opening one of our marketing emails.

COOKIES

A cookie is a small file of letters and numbers that is downloaded on to your computer when you visit a website.

We use cookies, as almost all websites do, to help provide you with the best experience we can. Our cookies do a number of essential things such as ensuring our website works as you would expect and remembering your preferences.

We also use cookies to improve our website and make our communication with you more relevant. These things involve your personal data being processed by other organisations, including Google and Meta.

We need your consent to use cookies in this way, so we show a notice before we do so. We take your continued use of our site, by scrolling, clicking or dismissing the notice as consent. We only use cookies if your browser privacy settings allow it. These settings are in your control and can be changed. For more information about how we use cookies and how you can control them, check out our Cookies Policy.

DATA SUBJECT’S RIGHTS

You have rights in respect of your personal data. If you wish to exercise any of these rights, we will need to confirm your identity before we can consider the request.

The right to be informed

You have the right to be told about the collection and use of the personal data you provide.

This privacy policy sets out the purpose for which we process your personal data, how long we will keep your data, who we will share your data with. If you have any questions on how and why we process your data please contact the DPO. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-be-informed/.

Right of access

You have the right to know whether we are processing your personal data, and to a copy of that data. We would need as much information as possible to enable us to locate your data. We will respond to your request within 28 days of receipt of your request.

If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-of-access/.

Right to rectification

You have the right to have any incorrect personal data corrected or completed if it is incomplete. You can make this request verbally or in writing. We will need as much information as possible to enable us to locate your data. We will look at any request and inform you of our decision within 28 days of receiving the request.

Right to erasure

This right, often referred to as the right to be forgotten allows you to ask us to erase personal data where there is no valid reason for us to keep it. We will look at any request and inform you of our decision within 28 days of receiving the request.

Right to restrict processing

You have the right to ask us to restrict processing of your data. We will look at any request and inform you of our decision within 28 days of receiving the request.

If you want to exercise this right, please contact the DP at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-restrict-processing/.

Right to data portability

You have the right to move, copy or transfer your personal data from one IT environment to another.

This right applies to data that you have provided to us and that we are processing on the legal basis of consent or in the performance of a contract and that processing is by automated means. We will respond to your request within 28 days of receipt of your request.

Right to object

You have the right to object to our processing of your personal data based on (1) legitimate interests, or for the performance of a task in the public interests/exercise of official authority (including profiling); (2) direct marketing (including profiling); and (3) for purposes of scientific/historical research and statistics.

1. Legitimate interests/legal task – your objection should be based on your particular situation. We can continue to process the data if we can demonstrate compelling legitimate grounds which override your interests.

2. Direct marketing – you have an absolute right to ask us to stop processing for the purposes of direct marketing. We will action your request as soon as possible.

3. Scientific/historical research and statistics – your objection should be based on your particular situation. If we are conducting research where the processing is necessary for the performance of a public task, we can refuse to comply with your objection.

Rights relating to automated decision making including profiling

You have the right in respect of automated decision making, including profiling.

Where we carry out solely automated decision making, including profiling, which has legal or similarly significant effects on you, we can only do this if it is in connection with a contract with you, we have a right under law or you have provided your explicit consent. We will tell you if this happens and tell you how you can request human intervention or challenge the decision.

Right to withdraw consent

Where we process your personal data based on your consent you have the right to withdraw that consent at any time without reason.

You can opt-out by using the unsubscribe/opt-out in any marketing we send you and you can contact the DPO at the contact details above.

The right to lodge a complaint

If you are unhappy with any aspect of our handling of your data you can make a complaint to the Information Commissioner’s Office – https://ico.org.uk/concerns/.

THIRD PARTY WEBSITES

Our Site may, from time to time, contain links to and from the websites of our partner and ticketing networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

FOR ALL NON-UK CUSTOMERS

By browsing our website, including for analytics and website usage research, and/or agreeing to receive direct marketing electronic communications as described in this Privacy Notice and our Cookies Notice10, you expressly consent to the processing of your personal data by us or on behalf of us. Of course, you still have the right to ask us not to process your data in these ways, and if you do so, we will respect your wishes.

Sometimes we will need to transfer your personal data between countries to enable us to supply the goods or services you have requested. In the ordinary course of business, we may transfer your personal data to third parties located in the UK to your country of residence. You hereby expressly consent to such overseas use, transferring and disclosure of your personal data outside of your country of residence for such purposes.

We shall endeavour to ensure that reasonable steps are taken to procure that all such third parties outside of your country of residence shall not use your personal data other than for that part of the purposes as set out in this Privacy Notice and to adequately protect the confidentiality and privacy of your personal data.

We will ensure that any third parties only process your personal data in accordance with their legitimate interests. These third parties may be subject to laws that differ from the laws which apply in the country where you reside. We do not actively take steps to ensure that any overseas recipient of your personal data complies with the laws which apply in your country.

If you have any questions, please contact our Data Protection Officer, and we will respond within your local timeframe response requirements. To complain about an alleged breach of this Privacy Notice or our privacy obligations at law, please provide us with as much detail as possible in relation to your complaint. We will take any privacy complaint seriously and any complaint will be assessed with the aim of resolving any issue in a timely and efficient manner.

Australia

For the purposes of this Privacy Notice, “personal data” means any information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information or opinion is true, or opinion is recorded in a material form.

We are committed to keeping your personal information secure and will use all reasonable precautions to protect it from loss, misuse or unauthorised access or alteration. However, except to the extent liability cannot be excluded due to the operation of statute, we exclude all liability (including in negligence) for the consequences of any unauthorised access to, disclosure of, misuse of or loss or corruption of your personal information. Nothing in this Privacy Notice restricts, excludes or modifies or purports to restrict, exclude or modify any statutory consumer rights under any applicable law including the Competition and Consumer Act 2010 (Cth).

If you are in Australia, you may submit a complaint to our Data Protection Officer who will come back to you within 30 days. If we have not come back to you or you are not happy with the response that you receive you may submit a complaint to the Office of the Australian Information Commissioner.

USA

To learn more about our cookies and website ‘track’ and ‘do not track’ practices please see our Cookies Notice.

Canada

If you submit a request to stop direct marketing communications from us, it will take no longer than 10 days.

As your data may be transferred to third parties outside the country where you are located, local police or other enforcement, regulatory or Government bodies may have access to that data with or without Affordable Art Fair’s knowledge. The personal data we process may be accessed by persons within Affordable Art Fair, or our third party service providers, who require such access to carry out the purposes indicated in this Privacy Notice, or such other purposes as may be permitted or required by the applicable law. Personal data we collect is maintained primarily in the UK.

If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal information, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada, or in some Canadian provinces, your local Privacy Commissioner.

Hong Kong

Terms used in this Privacy Notice shall have the same meanings ascribed to them in the Personal Data (Privacy) Ordinance (the “PDPO”).

Under the Personal Data (Privacy) Ordinance (the “PDPO”), individuals must be notified at the point of collection of the purposes for which the data was collected and thereafter the data can only be used for those purposes unless consent is obtained for a new purpose.

If you are in Hong Kong you may submit a complaint to our Data Protection Officer who will come back to you within 30 days. If we have not come back to you or you are not happy with the response that you receive you may submit a complaint to the Office of the Privacy Commissioner for Personal Data.

Malaysia

Terms used in this Privacy Notice shall have the same meanings ascribed to them in the Personal Data Protection Act 2010 (“PDPA”).

If you are in Malaysia you may submit any questions, comments or complaints to our Data Protection Officer who will come back to you within 21 days.

South Korea

The transfer of data to enable the company to supply the goods or services a customer has requested can be deemed as a Delegation.

Singapore

Terms used in this Privacy Notice shall have the meanings assigned to them by the Personal Data Protection Act 2010 (also known as the PDPA).

By placing an order with us, opening an account, browsing our website and/or agreeing to receive digital direct marketing communications, you agree that we may process your personal data as described in this Privacy Notice and our Cookies Notice, including for analytics and research into website use.

CHANGES TO THE PRIVACY POLICY

This privacy policy is regularly reviewed and will be updated when necessary. If we make any significant changes to the policy we will communicate these to you. This policy was last updated in January 2023.