Privacy Policy

Last updated: April 2026

At Sheba Gallery, we are committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you visit our gallery in Eastcote, use our website, or engage our concierge services.

1. Who We Are

Sheba Gallery is the "Data Controller" for the information you provide.

  • Address: 255 Field End Road, Eastcote

2. Information We Collect

We collect information to provide a personalized gallery experience. This includes:

  • Identity Data: Your name and title.

  • Contact Data: Email address, telephone number, and home address (required for in-home rug trials and deliveries).

  • Transaction Data: Details about payments and the specific rugs you have purchased or inquired about.

  • Technical Data: Your IP address and browsing behavior on our website (collected via cookies).

3. How We Use Your Data

We only use your data when the law allows us to. Most commonly, we use it to:

  • Fulfill Orders: To process your purchase and deliver your rug.

  • Concierge Services: To coordinate private viewings or in-home rug trials.

  • Communication: To respond to your inquiries via our contact forms.

  • Marketing: If you opt-in, to send you updates on new acquisitions or gallery events. You can opt-out at any time.

4. Data Sharing and Security

We never sell your data. We only share it with trusted third parties necessary to run our business:

  • Payment Processors: We use Stripe/Squarespace Payments and PayPal. We do not store your credit card details on our servers.

  • Delivery Partners: We share your address with professional couriers to deliver your rugs.

  • IT Services: Our website is hosted by Squarespace, which maintains high-level security protocols.

5. International Transfers

As a UK business, we ensure your data is protected under the UK General Data Protection Regulation (UK GDPR). Some of our service providers (like Squarespace) may process data in the US; we ensure they meet the required "adequacy" standards for data protection.

6. Your Legal Rights

Under the UK GDPR, you have the right to:

  • Access the personal data we hold about you.

  • Correct any inaccurate information.

  • Request Deletion of your data (the "right to be forgotten").

  • Withdraw Consent for marketing at any time.

To exercise any of these rights, please contact us via the Contacts Page

7. Cookies

Our website uses cookies to improve your browsing experience and analyze our traffic. You can manage your cookie preferences through the banner that appears when you first visit our site.

8. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us directly. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection.