1. Definition of Personal Information

For the purposes of this Privacy Policy, “Personal Information” is defined in line with the Protection of Personal Information Act 4 of 2013 (POPIA) and the General Data Protection Regulation (GDPR) (EU) 2016/679. Gallery Direct Global upholds the principles of lawful electronic data collection outlined in POPIA, GDPR, and related legislation. We are committed to protecting the accuracy, confidentiality, and integrity of the Personal Information we collect.

2. Commitment to Privacy

We recognize the need to balance our legitimate business operations with your right to privacy. While we take all reasonable steps to safeguard your information against loss, misuse, or unauthorised access, we cannot guarantee 100% security.

3. Types of Information Collected

When using our website or services, or when your information is provided through third-party services (such as lead generation), we may request:

• First Name & Surname
• Email Address
• Physical Address
• Contact Number
• Bank Account Details
• Business / Company Name
• Registration Number

We limit the information collected to what is relevant and necessary. Your use of this site and services indicates consent as required by POPIA and/or GDPR. Where additional consent is legally required, we will request it directly.

We will not collect or process sensitive personal data (such as racial or religious information) without your explicit consent unless required or permitted by law.

4. Use of Personal Information

By using this website, you consent to Gallery Direct Global processing your Personal Information for purposes including (but not limited to):

• Delivering and managing our services to you
• Communicating updates and changes to our website or services
• Providing marketing communications relevant to our offerings
• Responding to enquiries and requests
• Building user profiles for improved customer experiences
• Understanding user trends and website engagement
• Administrative, security, and legal compliance purposes
• Developing market research insights

5. Data Security & Storage

We maintain reasonable technical and organisational safeguards to protect your data. While absolute security cannot be guaranteed, we continually update measures in line with technology and law.

Personal Information may be stored in a central database, including transfers to jurisdictions outside South Africa. Where international transfers occur, safeguards such as GDPR-compliant standard contractual clauses will be applied.

Data will only be retained as long as necessary for the purposes outlined in this Policy or as required by law. Access is restricted to authorised employees, contractors, or representatives bound by confidentiality obligations.

6. Children’s Privacy

Gallery Direct Global does not knowingly accept or process Personal Information from individuals under 18 without parental or guardian consent.

7. Your Rights

As a user, you have the right to:

• Access the Personal Information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of information no longer necessary (“right to be forgotten”)
• Restrict or suspend processing of your information where appropriate
• Withdraw consent at any time (where processing is based on consent)
• Object to the processing of your information for legitimate interests or marketing purposes
• Lodge a complaint with the relevant data protection authority if you believe your rights are being infringed

8. Disclosure of Personal Information

We may share your information with:

• Service providers and suppliers assisting in service delivery
• Affiliated companies working with us to fulfil orders or requests

If a third-party is required to assist in providing services, they may require access to certain Personal Information.

9. Log Files & Analytics

When you visit our site, we may automatically collect anonymised technical data such as your IP address, browser type, device, referring pages, and visit duration. While this information does not identify you directly, it may be linked with other data you provide.

10. Cookies

We use cookies to improve user experience:

• Session Cookies: Temporary files that expire once your browser closes. Required for basic site functionality.
• Persistent Cookies: Stored on your device to recognise repeat visitors and personalise experiences. These do not contain Personal Information.

11. Links to Third-Party Websites

Our website may contain links to external sites, such as payment gateways or social platforms. Gallery Direct Global is not responsible for the content, privacy policies, or security practices of third-party websites. Users should carefully review these policies before providing any information.

12. Electronic Communications & ECT Act Compliance

In line with the Electronic Communications and Transactions Act 25 of 2002 (ECT Act):

• Data messages will be deemed received once acknowledged by us.
• Communications sent from your device will be assumed to be authorised by you.
• We are not required to use encryption or electronic signatures for valid communications.

13. Contact Information

This website is owned and operated by Gallery Direct Global (a division of Emstel Art & Framing).

Address: 129 Daisy Street, Sandown, Johannesburg, 2196
Email: sales@gallerydirect.africa
Website: www.gallerydirect.africa

14. Lodging of Complaints

If you are dissatisfied with how your Personal Information has been handled, you may contact us at the details above, or lodge a complaint with the appropriate supervisory authority.