Legal
Privacy Policy
Last updated: May 2026
Who we are
Zebra One Gallery Ltd ("we", "us", "our") is an independent contemporary art gallery based in Hampstead, London. We are the data controller for the personal information you share with us through this website (zebraonegallery.com), by email, by phone, or in person at the gallery.
Contact: info@zebraonegallery.com · 020 7794 1281 · Zebra One Gallery, Hampstead, London NW3 1QX, United Kingdom.
What data we collect
We only collect personal data we genuinely need:
- Contact details — name, email, phone — when you submit an enquiry, consignment, consultation request or mailing-list signup.
- Order details — shipping address and billing details — when you purchase or place a hold on an artwork.
- Payment data — processed directly by Stripe; we never see your full card number.
- Consignment images — photographs you upload as part of an authentication enquiry.
- Site analytics — anonymous pages-viewed and device data, only if you accept analytics cookies.
How we use it
- To respond to enquiries, valuations, consignment and consultation requests.
- To fulfil and ship orders, and to provide aftercare (provenance, condition).
- To send our newsletter and exhibition invitations — only if you've opted in. You can unsubscribe at any time.
- To meet our legal and tax obligations (HMRC, anti-money-laundering checks on high-value sales).
Legal basis (UK GDPR)
We process your data on one of four bases: (a) your consent (for marketing emails and optional cookies); (b) contract performance (to deliver an artwork you've bought or process a consignment); (c) legitimate interests (to reply to an enquiry, prevent fraud); (d) legal obligation (tax records, AML checks).
Who we share it with
We share data only with trusted processors who help us operate the gallery:
- Stripe (card processing) · Mailchimp (newsletters) · DPD / FedEx (shipping)
- HMRC and our accountants where legally required
- Authentication bodies (e.g., Pest Control for Banksy) when you've asked us to handle authentication on your behalf
We never sell your data. We do not transfer data outside the UK/EEA except via processors covered by Standard Contractual Clauses or an adequacy decision.
How long we keep it
Enquiries are kept for up to 24 months unless you become a client. Sales records are kept for 7 years (HMRC requirement). Marketing subscribers are kept until you unsubscribe. Consignment images are kept for as long as the artwork remains in our care plus 3 years.
Your rights
Under UK GDPR you can:
- Request a copy of the data we hold about you
- Ask us to correct or delete it
- Object to processing or withdraw consent
- Lodge a complaint with the Information Commissioner's Office
To exercise any right, email info@zebraonegallery.com. We respond within 30 days.
Cookies
For details on the cookies we use, see our cookie policy. You can revisit your preferences at any time using the "Cookies" link in the footer.
Changes
We'll update this notice when our practices change. Material changes will be announced on the homepage and (where you've given consent) by email.
