PRIVACY POLICY

Last updated: 18 September 2026

Agony + Ecstasy Gallery (“Agony + Ecstasy”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use and protect personal information when you visit www.agonyecstasygallery.com, purchase from us, contact us, subscribe to our mailing list or otherwise interact with Agony + Ecstasy Gallery.

1. WHO WE ARE

Agony + Ecstasy Gallery is an online photography gallery and publisher specialising in photographic archives, limited-edition photography and publications.

For the purposes of applicable data protection legislation, including the UK GDPR and EU GDPR where applicable, Agony + Ecstasy Gallery is the controller of your personal data.

2. WHAT PERSONAL DATA WE COLLECT

We may collect personal information that you provide to us directly, including:

• Full name

• Email address

• Telephone number

• Billing address

• Delivery address

• Payment and transaction information

• Information relating to your orders and purchases

• Information you provide when contacting us

• Information provided when making an enquiry about an artwork or publication

• Your preferences when subscribing to our mailing list

• Any other information you voluntarily provide to us

We may also automatically collect certain technical information when you visit our Website, including:

• IP address

• Browser type and version

• Device type

• Operating system

• Pages viewed

• Links clicked

• Date and time of visits

• Referring websites

• Information about how you interact with our Website

3. HOW WE COLLECT YOUR DATA

We collect personal information in several ways, including when you:

• visit our Website;

• create or use an account;

• purchase an artwork, book or other product;

• contact us by email or through our contact forms;

• sign up to our mailing list;

• request information about an artwork, artist or publication;

• communicate with us through social media; or

• otherwise voluntarily provide information to us.

Some information is also collected automatically through cookies and similar technologies when you browse our Website.

4. WHY WE USE YOUR PERSONAL DATA

We use personal information only where we have a lawful reason to do so.

We may use your information to:

• process and fulfil your orders;

• arrange delivery of your purchases;

• process payments;

• communicate with you regarding an order or enquiry;

• respond to messages and customer service requests;

• provide information you have requested;

• manage our relationship with customers and clients;

• send newsletters and information about Agony + Ecstasy Gallery where you have consented to receive them or where otherwise permitted by law;

• understand how visitors use our Website;

• improve our Website, services and customer experience;

• maintain the security of our Website;

• detect and prevent fraud or misuse; and

• comply with legal, accounting and regulatory requirements.

We do not sell your personal data.

5. OUR LEGAL BASIS FOR USING YOUR DATA

Depending on the circumstances, we process your personal data on the following legal bases:

Contract: where we need your information to process an order or provide a service you have requested.

Legal obligation: where we are required to process or retain information to comply with legal, tax or accounting obligations.

Legitimate interests: where processing is necessary for the operation, administration and improvement of our business, provided that our interests do not override your rights.

Consent: where you have actively given us permission to use your information for a particular purpose, such as receiving certain marketing communications.

Where we rely on consent, you can withdraw that consent at any time.

6. MARKETING

If you choose to subscribe to our mailing list, we may use your name and email address to send you communications relating to Agony + Ecstasy Gallery.

These may include information about:

• new photographic editions;

• publications;

• artists and archives;

• exhibitions and events;

• gallery news;

• collaborations; and

• other relevant gallery updates.

You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.

We use Klaviyo to manage and distribute certain marketing communications. Your information may therefore be processed by Klaviyo on our behalf.

7. COOKIES AND TRACKING TECHNOLOGIES

Our Website uses cookies and similar technologies.

Cookies are small files placed on your device when you visit a website. They allow the Website to function, remember preferences and, where permitted, help us understand how visitors use the Website.

We may use:

Essential cookies
These are necessary for the Website to operate, including functions such as shopping baskets, checkout and secure areas.

Analytics cookies
These help us understand how visitors use our Website, such as which pages are visited and how visitors navigate the site.

Preference cookies
These allow the Website to remember choices you make.

Marketing cookies
Where applicable and with your consent where required, these may be used to understand advertising performance or provide more relevant advertising.

You can control cookies through your browser settings and, where applicable, our cookie consent tool.

8. WHO WE SHARE YOUR DATA WITH

We may share personal information with carefully selected third parties where necessary to operate our business.

These may include:

• Shopify, which provides our ecommerce platform;

• payment processors, such as Paypal and Stripe to process transactions;

• Klaviyo, for email marketing;

• delivery and courier companies, where necessary to fulfil an order;

• website hosting and technical service providers;

• analytics and security providers; and

• professional advisers, such as accountants, lawyers or insurers, where necessary.

We only provide third parties with information that is reasonably necessary for them to provide their services.

We do not sell or rent your personal information to third parties.

9. PAYMENT INFORMATION

Payments made through our Website are processed by third-party payment providers.

We do not store your full payment card details on our own systems.

Payment providers may collect and process payment information in accordance with their own privacy policies and applicable security requirements.

10. INTERNATIONAL TRANSFERS

Some of the service providers we use may process personal data outside the UK or European Economic Area.

Where your personal data is transferred internationally, we take appropriate steps to ensure that it receives an appropriate level of protection in accordance with applicable data protection law.

This may include the use of adequacy decisions, contractual safeguards or other legally recognised transfer mechanisms.

11. HOW LONG WE KEEP YOUR DATA

We keep personal information only for as long as necessary for the purposes for which it was collected.

Certain information relating to purchases, transactions and invoices may need to be retained for longer periods because of legal, accounting or tax requirements.

If you subscribe to our marketing communications, we will retain your email address until you unsubscribe or we determine that there is no longer a legitimate reason to retain it.

When personal information is no longer required, we will securely delete it or anonymise it where appropriate.

12. YOUR RIGHTS

Depending on the applicable data protection legislation, you may have the right to:

• request access to the personal data we hold about you;

• request that inaccurate personal data is corrected;

• request deletion of your personal data in certain circumstances;

• request restriction of processing;

• object to certain types of processing;

• request the transfer of your personal data to another organisation where applicable;

• withdraw consent where we rely on consent; and

• object to direct marketing at any time.

You do not normally have to pay a fee to exercise these rights.

To make a request, please contact us at:

info@agonyecstasygallery.com

We may ask you to provide information necessary to confirm your identity before processing your request.

13. DATA SECURITY

We take appropriate technical and organisational measures to protect personal information against accidental loss, unauthorised access, alteration, disclosure or destruction.

However, no transmission of information over the internet can be guaranteed to be completely secure.

14. THIRD-PARTY WEBSITES

Our Website may contain links to other websites, including websites belonging to artists, estates, publishers, galleries, social media platforms and other third parties.

If you follow a link to another website, that website will have its own privacy policy and terms. We are not responsible for the privacy practices of third-party websites.

We recommend reviewing the privacy policy of any website before providing personal information.

15. SOCIAL MEDIA

We may use social media platforms such as Instagram to communicate with our audience and share information about our gallery, artists, exhibitions, publications and photography.

If you interact with us through social media, the relevant platform may collect and process your personal information according to its own privacy policy.

We do not control how third-party social media platforms process personal information collected through their services