Privacy

Privacy notice

Steve Foster, trading as Gallery Growth, is responsible for the personal information used to handle your enquiries and deliver consultancy services. You can contact him at hello@gallerygrowth.co.uk.

Information we use

When you enquire, we use your name, email address, gallery name, website address and the information you choose to include in your message. If you become a client, we also use the correspondence, agreed brief, billing information and working materials needed to deliver the engagement. Please do not send passwords, payment-card details or confidential information about collectors in your enquiry.

Purposes and lawful bases

We use enquiry information to assess and respond to your request. Our lawful basis is our legitimate interest in responding to relevant business enquiries, or taking steps at your request before entering a contract where you are the prospective contracting party. We process client information to perform a contract, or on the basis of legitimate interests when dealing with a client organisation’s representatives. Where we must retain financial records, we rely on our legal obligations. Enquiries are not added to a marketing list.

Service providers

The website is hosted through OpenAI Sites using Cloudflare infrastructure. These services process technical information such as IP addresses and request details to deliver and protect the website. Email enquiries are handled through our Microsoft 365 mailbox, supplied through GoDaddy. We share information with service providers only as needed to operate the website, handle correspondence and deliver our work; we do not sell enquiry information.

International processing

Some providers process information outside the United Kingdom, including in the United States. Applicable contractual terms and transfer safeguards must cover processing outside the UK. You may contact us for information about the arrangements relevant to your data.

Retention

Our retention policy is to delete enquiries that do not lead to work within 12 months of the last substantive contact, unless a dispute or legal obligation requires longer retention. Client correspondence and project records are retained for up to six years after the engagement ends where necessary for accounting or legal claims, and then reviewed for deletion. Information in backups may remain until those backups expire.

Cookies and measurement

We use GoatCounter to measure page visits, referring websites, broad visitor locations, browser types and screen sizes, together with clicks on audit-request and email links. These clicks indicate interest; they do not confirm that an enquiry was sent or a purchase made. We do not send enquiry contents to GoatCounter. Its visitor measurement uses no cookies or persistent browser identifiers, and IP addresses are processed temporarily rather than stored in its analytics database. We use aggregate reporting and have not enabled individual pageview records. The dashboard is private. GoatCounter stores data in Finland and Germany; see its privacy policy for details. Aggregate reports are retained for comparisons over time and reviewed during our website audits. We do not use advertising pixels. Hosting and security services may process technical request data or use storage necessary to provide the service.

Your rights

Depending on the circumstances, you may request access to your information, correction, deletion, restriction or portability. You can object to processing based on legitimate interests. These rights are subject to legal conditions. Email hello@gallerygrowth.co.uk to make a request or raise a concern. You can also complain to the Information Commissioner’s Office.

Last updated 5 September 2026