Last updated: 11th February 2026

Gallery Midnight (“we”, “us”, “our”) is committed to protecting your privacy and ensuring that your personal information is handled securely and responsibly. This Privacy Policy explains how we collect, use, store, and share your information when you visit our website, make a purchase, or interact with us in any way.

1. Who We Are

Gallery Midnight, 12 Ritherdon Road, Balham, London, SW17 8QD. 

We operate www.gallerymidnight.com and sell fine art prints, originals, and related products.

2. Information We Collect

We collect information in the following ways:

A. Information You Provide Directly

• Name
• Email address
• Billing and shipping address
• Payment information (processed securely by Shopify; we do not store card details)
• Order details
• Messages sent via contact forms or email
• Newsletter sign‑ups (via Mailchimp)

B. Information Collected Automatically

When you browse our site, Shopify automatically collects:

• IP address
• Device type
• Browser type
• Pages viewed
• Time spent on pages
• Referring website
• General location data
• Cookies and tracking technologies (see Section 6)

C. Information from Third Parties

• Email engagement data from Mailchimp (e.g., opens, clicks)
• Analytics data from Shopify and integrated apps
• Social media interactions (if you engage with our Instagram, Facebook, or YouTube)

3. How We Use Your Information

We use your information to:

• Process and fulfil orders
• Communicate with you about purchases
• Send marketing emails (only if you opt in)
• Improve our website and customer experience
• Prevent fraud and maintain site security
• Comply with legal obligations
• Personalise content and product recommendations

4. Legal Basis for Processing (UK GDPR)

We process your data under the following lawful bases:

• Contract – to fulfil your orders
  
• Consent – for marketing communications
  
• Legitimate interest – website analytics, fraud prevention, business improvement
  
• Legal obligation – tax, accounting, and regulatory compliance

5. How We Store and Protect Your Data

Shopify

Our store is hosted on Shopify, which securely stores your personal data on servers protected by industry‑standard security measures. Shopify may store data in Canada, the US, or other regions, depending on infrastructure.

Mailchimp

If you subscribe to our newsletter, your email address and name are stored in Mailchimp. Mailchimp:

• Uses secure servers
• Complies with GDPR
• Allows you to unsubscribe at any time
• Tracks email engagement (opens, clicks)
• We never sell your data to third parties.

6. Cookies & Tracking Technologies

We use cookies to:

• Enable essential site functions (cart, checkout, login)
• Analyse website performance
• Personalise your browsing experience
• Support marketing and retargeting campaigns

Types of Cookies Used

7. Sharing Your Information

We share your data only with trusted service providers necessary to operate our business:

• Shopify (store platform)
• Payment processors (Shopify Payments, PayPal, etc.)
  
• Mailchimp (email marketing)
• Shipping carriers (Royal Mail, couriers)
  
• Analytics and marketing tools (if enabled)

These providers only receive the information required to perform their services.

8. Your Rights (UK GDPR)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (“right to be forgotten”)
• Withdraw consent for marketing
• Request data portability
• Object to certain processing activities

To exercise your rights, contact us at: info@gallermidnight.com

9. Data Retention

We keep your information only as long as necessary:

• Order records: 6 years (legal requirement)
• Marketing data: until you unsubscribe
• Analytics data: varies by tool (typically 26–38 months)

10. Children’s Privacy

Our website is not intended for children under 16. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page.

12. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact: info@gallerymidnight.com

Data Processing Addendum

For detailed information about how we work with third‑party processors such as Shopify and Mailchimp, please see our Data Processing Addendum.