Privacy Policy

1. Introduction

The Shah Gallery ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website theshah.org, in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws.

2. Information We Collect

2.1 Personal Data

We may collect the following personal data when you use our services:

• Name and email address (when you log in via Google OAuth)
• Profile picture (if provided by Google)
• IP address and browser information
• Cookies and usage data

2.2 User-Generated Content

When you upload images to our platform, we store:

• The uploaded images
• Upload timestamps
• Association with your user account

3. Legal Basis for Processing

We process your personal data based on:

• Consent: When you create an account and upload content
• Legitimate Interests: To maintain and improve our service
• Legal Obligations: To comply with applicable laws

4. How We Use Your Information

We use your information to:

• Provide and maintain our service
• Authenticate users and manage accounts
• Process and display uploaded content
• Communicate with you about our service
• Ensure security and prevent fraud
• Comply with legal obligations

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only:

• With your consent
• To comply with legal obligations
• To protect our rights and safety
• With service providers who assist our operations (under strict confidentiality agreements)

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. User accounts and associated data may be deleted upon request.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at enquiries@rodmena.co.uk

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure HTTPS connections
• Encrypted session management
• Regular security assessments
• Access controls and authentication

9. Cookies

We use essential cookies to maintain your session and preferences. You can control cookie settings through your browser. Refusing cookies may limit functionality.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the UK/EEA. We ensure appropriate safeguards are in place for such transfers.

11. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect data from children under 16.

12. Contact Information

For privacy-related inquiries or to exercise your rights, contact us at:

The Shah Gallery
Email: enquiries@rodmena.co.uk
Data Controller: RODMENA LIMITED

13. Complaints

If you're not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

14. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.