Privacy notice

Who we are

Gina Driver is an artist based in Oxfordshire, United Kingdom. For privacy questions, contact us at [email protected].

What we collect

• Contact form: name, email, optional phone, message, and a record that you consented to us processing your details to reply.
• Purchase / commission enquiries: name, email, optional phone, notes, painting of interest, and consent to reply.
• Technical data: a hashed network address and basic browser metadata used only for spam and abuse prevention (not for marketing profiles).
• Collector accounts (optional): if you register via our identity provider at auth.ginadriver.com, that service processes account credentials under its own policies.

Why we process your data (legal bases)

• Legitimate interests / steps prior to a contract: responding to enquiries about paintings, commissions, shipping, and availability.
• Consent: where you tick the form checkbox confirming we may use your details to respond (you can withdraw by emailing us).
• Legal obligation: records we must keep for tax or consumer law if a sale completes.

We do not sell your data, run advertising profiles, or send marketing unless you have separately asked for a mailing list (this site does not run one by default).

How long we keep it

Enquiry messages are kept only as long as needed to handle your request and for a short administrative period (typically up to 24 months), unless a longer period is required for a sale or dispute. Spam and abuse signals are retained briefly for security.

Who we share with

Hosting and email delivery providers process data on our instructions (for example cloud infrastructure in the EU/UK region where possible, and transactional email). We do not share enquiries with third parties for their marketing.

Your rights

Under UK GDPR you can request access, correction, erasure, restriction, or portability of your personal data, and object to certain processing. Contact [email protected]. You may also complain to the Information Commissioner's Office (ICO).

Security

Forms use HTTPS, rate limiting, bot checks, and minimal data collection. Admin areas are password-protected and not listed for search engines.