Privacy Policy

When you browse our website, we may collect basic technical data such as your IP address, browser type, and pages visited. This data is collected automatically via cookies and analytics tools.

When you make an enquiry, place an order or subscribe to our journal, we collect personal information including your name, email address, postal address and phone number.

If you apply for a position with us, we collect the information included in your application such as your CV, cover letter and contact details.

To process and fulfil your orders, including shipping, invoicing and order updates.

To respond to your enquiries and provide customer support.

To send our journal and marketing communications — only where you have given us explicit permission to do so.

To improve our website and services through anonymised analytics data.

To comply with legal obligations where required.

We use essential cookies to make our website function correctly. These cannot be disabled as the site would not work without them.

We use optional analytics cookies (via Google Analytics) to understand how visitors use our site. These are only set with your consent.

We do not use advertising or tracking cookies. We will never sell your data to third-party advertisers.

You can manage your cookie preferences at any time through our cookie settings panel.

We do not sell, rent or trade your personal data to any third parties.

We may share your information with trusted service providers who help us operate our business — such as payment processors, shipping partners and email platforms — but only to the extent necessary to provide their services.

All third-party providers we work with are contractually required to handle your data securely and in accordance with UK GDPR.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Order records are kept for 7 years in line with HMRC requirements.

Marketing preferences and communication history are kept until you unsubscribe or request deletion.

Under UK GDPR, you have the right to access the personal data we hold about you.

You have the right to request correction of inaccurate data, or deletion of your data where there is no legal reason to retain it.

You have the right to object to processing, withdraw consent for marketing at any time, and request data portability.

To exercise any of these rights, please contact us at privacy@tilegallery.com. We will respond within 30 days.

We take the security of your personal data seriously. Our website is served over HTTPS and all payment processing is handled by PCI-compliant third-party processors — we never store your card details.

While we implement appropriate technical and organisational measures, no method of transmission over the internet is 100% secure. We encourage you to use a strong password and keep your account details confidential.

If you have any questions about this privacy policy or how we handle your data, please contact our Data Controller at privacy@tilegallery.com.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.