Privacy Policy

Effective date: September 5, 2026

1. Who we are

Garth Greenan Gallery (“the Gallery”, “we”, “us”) operates the website at garthgreenan.com (“the Site”). This policy explains what personal information we collect when you visit the Site, subscribe to our mailing list, or buy from our online shop, how we use it, whom we share it with, and the choices you have.

For visitors in the European Economic Area, the United Kingdom, and Switzerland, the Gallery is the data controller for the personal information described here.

2. Information you give us

Mailing list
When you subscribe using the form in the Site footer, we collect your name and email address. Subscriptions use double opt-in: you receive a confirmation email and are only added to the list once you click the link in it. We use Mailchimp to store the list and send our emails.

Online shop
When you buy a publication or edition through the Site, checkout is handled by Shopify. Shopify collects the information needed to complete the order: your name, email address, billing and shipping addresses, phone number, and payment details. Payment details are processed by Shopify and its payment providers. The Gallery never sees or stores your full card number.

Correspondence and gallery business
If you contact us by email or phone, we keep the correspondence and any details you share so we can respond. In the ordinary course of gallery business we also keep records of clients’ contact details, artwork interests, purchase and consignment history, and invoices.

3. Information collected automatically

The Site uses a small number of cookies and similar technologies. None are used for advertising.

Google Analytics
We use Google Analytics 4 to understand which pages are visited and how visitors reach the Site. Google collects your IP address, approximate location, browser and device type, and the pages you view. Google Analytics 4 does not log or store full IP addresses. We have not enabled Google’s advertising or remarketing features. You can prevent Google Analytics from running by installing Google’s browser opt-out add-on or by blocking cookies in your browser. Google’s own policy is at policies.google.com/privacy.

Blocking or deleting cookies will not stop the Site from working, except that the shopping cart will not remember its contents.

4. How we use your information

• To send you our newsletter and invitations to exhibitions and events, if you have subscribed.
• To process and ship orders from the online shop, and to contact you about an order.
• To respond to your inquiries and manage our relationship with you as a client of the Gallery.
• To understand how the Site is used and improve it.
• To comply with legal, tax, and accounting obligations, and to protect the Gallery’s rights.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

5. Legal bases for processing

Where European or UK data protection law applies, we rely on the following bases:

• Consent, for the mailing list. You can withdraw consent at any time using the unsubscribe link in any email.
• Performance of a contract, for orders placed through the shop and for sales and consignments arranged with the Gallery.
• Legitimate interests, for site analytics, responding to enquiries, and maintaining client records, where those interests are not outweighed by your rights.
• Legal obligation, for records we must keep under tax and accounting law.

6. Who we share information with

We share personal information only with the services we need to run the Site and the Gallery:

• Mailchimp (Intuit Inc.), which hosts our mailing list and sends our emails. Privacy statement.
• Shopify (Shopify Inc.), which runs our online shop and checkout and processes payments. Privacy policy.
• Google (Google LLC), which provides Google Analytics. Privacy policy.
• Shipping and art-handling companies, which receive the name and address needed to deliver your order.
• Professional advisors such as accountants, lawyers, and insurers, where necessary.
• Authorities, where required by law, a court order, or to protect the rights and safety of the Gallery or others.

7. International transfers

The Gallery is based in New York, and our service providers store information on servers in the United States. If you are visiting from the European Economic Area, the United Kingdom, or Switzerland, your information will be transferred to the United States. Mailchimp, Shopify, and Google each rely on the EU–US Data Privacy Framework and standard contractual clauses approved by the European Commission to protect transferred data.

8. How long we keep information

• Mailing list details are kept until you unsubscribe, after which Mailchimp retains only the minimum needed to honour the unsubscribe.
• Order records are kept for as long as required by tax and accounting law, generally seven years.
• Correspondence and client records are kept for as long as we have an ongoing relationship with you, and for a reasonable period afterwards.
• Google Analytics data is retained for 2 months, user retention for 14 months.

9. Your rights and choices

Everyone. You can unsubscribe from our emails at any time using the link at the bottom of each email, or by contacting us. You can control cookies through your browser settings. You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it, by contacting us using the details in section 12. We will respond within 30 days.

European, UK, and Swiss residents. You have the right to access, correct, delete, or receive a portable copy of your personal information, to object to or restrict its processing, and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data protection authority.

California residents. Under the California Consumer Privacy Act you have the right to know what personal information we collect, use, and disclose; to request its deletion or correction; and not to be discriminated against for exercising these rights. In the past twelve months we have collected the categories described in sections 2 and 3, for the purposes in section 4, and disclosed them to the service providers in section 6. We do not sell personal information and do not share it for cross-context behavioural advertising, so there is nothing to opt out of. You may make a request through the contact details in section 12. We will need to verify your identity, and you may use an authorised agent.

Other US states. Residents of states with comparable privacy laws, including Colorado, Connecticut, Virginia, and Texas, may exercise the same rights by contacting us.

10. Children

The Site is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Security, other websites, and changes

The Site is served over HTTPS, and our service providers maintain their own security programmes. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable steps to protect your information.

The Site links to other websites, including Shopify’s checkout pages, our social media accounts, and the sites of artists, publishers, and institutions. This policy does not cover those sites, and we encourage you to read their privacy policies.

We may update this policy from time to time. The effective date at the top shows when it was last changed. Significant changes will be announced on the Site or, for subscribers, by email.

12. Contact

Questions and requests about this policy or your personal information can be sent to:

Garth Greenan Gallery
25 Greene Street
New York, NY 10013
info@garthgreenan.com
212.929.1351