Privacy Policy
Michael McGrath respects your privacy. This policy explains how we collect, use, and protect your personal information in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
Information We Collect When you make a purchase or submit an inquiry, we collect your name, email address, shipping address, and payment information. We also collect browsing data through cookies to improve your experience. Specifically, we may collect: - Personal identification details (name, email, phone number) - Shipping and billing addresses - Order history and transaction records - Device and browser information (IP address, browser type, operating system) - Browsing behavior on our website (pages visited, time spent)
Legal Basis for Processing (GDPR) We process your personal data under the following legal bases: - Contract performance: to fulfill orders and provide services you have requested - Legitimate interest: to improve our website, prevent fraud, and communicate about your orders - Consent: for marketing communications and non-essential cookies (analytics and marketing cookies) - Legal obligation: to comply with tax, accounting, and other legal requirements
How We Use Your Information - To process orders and deliver artworks - To respond to inquiries and provide customer support - To send order confirmations and shipping updates - To improve our website and services - To analyze website traffic and usage patterns (with your consent) - To send marketing communications (only with your explicit consent)
Payment Security All payment transactions are processed through secure, PCI-compliant payment providers (Square and/or PayPal). We do not store your credit card information on our servers.
Data Sharing We do not sell or rent your personal information to third parties. We may share information with: - Shipping carriers to fulfill orders - Payment processors to complete transactions - Analytics providers (such as Google Analytics) to understand website usage, only when you have given consent - Legal authorities when required by law
Cookie Policy We use cookies and similar technologies on our website. Cookies are small text files stored on your device that help us provide and improve our services.
Essential Cookies These cookies are necessary for the website to function properly. They enable core features such as shopping cart functionality, account authentication, and security. These cookies cannot be disabled. - Cart and session data - Security tokens - Cookie consent preferences
Analytics Cookies With your consent, we use analytics cookies (such as Google Analytics) to understand how visitors interact with our website. These cookies collect information about pages visited, time spent on the site, and how you arrived at our website. This data is aggregated and anonymized.
Marketing Cookies With your consent, we may use marketing cookies to deliver relevant advertisements and track the effectiveness of marketing campaigns. These cookies may be set by third-party advertising partners.
Managing Your Cookie Preferences When you first visit our website, a cookie consent banner allows you to accept all cookies or manage your preferences. You can change your cookie preferences at any time by clearing your browser cookies and revisiting the site. You can also configure your browser to block or delete cookies, though some website features may not function properly without essential cookies.
Data Retention We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Order records are retained for accounting and legal purposes as required by applicable law.
Your Rights (GDPR) Under the GDPR and other applicable data protection laws, you have the following rights: - Right of access: request a copy of the personal data we hold about you - Right to rectification: request correction of inaccurate or incomplete data - Right to erasure: request deletion of your personal data ("right to be forgotten") - Right to restrict processing: request that we limit how we use your data - Right to data portability: receive your data in a structured, machine-readable format - Right to object: object to the processing of your data for specific purposes - Right to withdraw consent: withdraw consent for processing at any time, without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us at michael@mmcgrath.com. We will respond to your request within 30 days.
International Data Transfers If your data is transferred outside your country of residence, we ensure appropriate safeguards are in place to protect your personal information in accordance with applicable data protection laws.
Children's Privacy Our website is not directed at children under 16 years of age, and we do not knowingly collect personal data from children.
Third-Party Services Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
Changes to This Policy We may update this privacy policy from time to time. Changes will be posted on this page with the date of the last revision. We encourage you to review this policy periodically.
Contact For privacy-related questions, data protection inquiries, or to exercise your rights, please contact us at michael@mmcgrath.com.