Privacy Policy

This Privacy Policy explains how Photolux, the independent fine art photography gallery of Dmytro Yatsenko (the “Site”, “we”, “us” or “our”), collects, uses and shares personal information when you browse the Site, contact us or request to purchase an artwork.

Information we collect

When you send a contact message, we collect your name, email address, message and any optional phone number or artwork name you provide. When you submit a purchase enquiry, we also collect your selected artworks, print options, quantities and quoted prices, and your country if supplied.

If a purchase is subsequently agreed, we may ask you directly for the billing, delivery and other information needed to fulfil it. The Site does not take online payments or collect credit card numbers through the contact or purchase-enquiry forms. Payment and delivery arrangements are agreed separately with the gallery.

Our hosting and delivery services process technical information, such as IP addresses, browser and request information, to deliver the Site, maintain security and prevent abuse. Request limits use hashed IP identifiers. Please do not include payment card details or other sensitive information in your messages.

How we use information

We use your information to respond to enquiries, help you choose an artwork, confirm availability and purchase details, arrange agreed payment and delivery, maintain correspondence and transaction records, prevent fraud and misuse, and meet applicable legal obligations.

Submitting an enquiry does not subscribe you to a mailing list. We do not sell your personal information or use your enquiry details for targeted advertising.

Legal grounds

Where the General Data Protection Regulation (“GDPR”) applies, we process information to take steps at your request before entering into a contract and to perform an agreed contract; to comply with legal obligations; and for our legitimate interests in responding to correspondence, operating and securing the gallery, and preventing abuse, subject to your rights and interests. Where processing requires consent, we ask for it separately and you may withdraw it.

Service providers and sharing

The gallery uses Amazon Web Services for hosting, content delivery, secure data storage and email notifications. Enquiry records and application services are hosted in Ireland. Content delivery and email services may also process technical or communication data in other locations.

We share information with service providers only as needed to operate the gallery and fulfil agreed purchases. After a purchase is agreed, this may include payment and delivery providers identified in our correspondence with you. We may also disclose information to comply with applicable law, respond to a lawful request or protect our rights.

The Site loads fonts from Google Fonts, which means your browser contacts Google to retrieve font files and may disclose technical information such as your IP address. External websites linked from the Site operate under their own privacy policies.

Where applicable law requires safeguards for international transfers of personal information, those safeguards must apply to the relevant processing. You can contact us for further information about the providers involved in your enquiry or purchase.

Browser storage and cookies

The public gallery uses your browser’s local storage to remember cart selections: artwork identifiers, print-option identifiers and quantities. Contact details and message text are not saved in that cart storage. You can remove these selections by clearing the cart or your browser’s site data. Blocking local storage may prevent the cart from remembering your choices.

On the live gallery, Google Analytics 4 loads automatically when you visit a page. It helps us understand visits, pages viewed, traffic sources and interaction with the gallery. Google processes technical information such as browser and device details and approximate location, together with cookie identifiers and usage events. Our integration does not intentionally send enquiry messages, names, email addresses or payment details to Google Analytics. We disable Google signals and advertising personalisation in our tag configuration.

Google Analytics uses first-party cookies such as _ga and _ga_TWP9ZNK5K2 to distinguish visits and sessions. Their lifetime depends on the Analytics configuration and may be refreshed on subsequent visits. The Site does not display an analytics consent banner or store an analytics consent choice. You can manage or block cookies through your browser settings and use Google’s Analytics opt-out browser add-on at https://tools.google.com/dlpage/gaoptout. Clearing cookies does not automatically delete data already collected.

Google provides Analytics and may process data outside your country, including in the United States. Further information is available in Google’s privacy notice at https://policies.google.com/privacy. Analytics data is retained according to the settings of our Google Analytics property; contact us for the current retention settings or to make a privacy request. External websites and services have their own privacy and cookie practices.

Retention

Enquiries and correspondence are retained for handling your request, following up on an agreed purchase, resolving disputes and meeting applicable record-keeping obligations. Retention depends on the purpose and any legal requirements. You may ask us to delete information that is no longer needed; some records may need to be retained for legal obligations or claims.

Your rights

Depending on applicable law, you may have rights to access, correct or erase your personal information, restrict or object to processing, and receive or transfer certain information. Where consent is the basis for processing, you may withdraw it without affecting the lawfulness of earlier processing. You may also complain to the competent data protection authority.

To exercise your rights, contact contact@photolux.art or use our contact form. We may request information needed to verify your identity before responding. These rights may be subject to legal conditions and exceptions.

Automated decisions

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. Technical rate limits help protect the Site against abuse; they do not decide whether you may purchase an artwork.

Children

The Site is not intended for children under 12 and we do not knowingly collect their personal information. If you believe a child has provided personal information, please contact us to request its removal. Purchases must be arranged by an adult with legal capacity to enter into the agreement.

Changes

We may update this Privacy Policy to reflect changes to our practices or operational, legal or regulatory requirements. The current version will be available on this page.

Contact

For privacy questions, rights requests or complaints, email contact@photolux.art or use the contact form.