Privacy Policy
At Gallery 1920, we are deeply committed to protecting the privacy, confidentiality, and security of our discerning collectors, represented master artists, and salon guests across all digital interactions and acquisitions.
1. Introduction & Business Identity
Welcome to Gallery 1920 (“Gallery 1920”, “we”, “us”, or “our”), operating via https://gallery1920.com and our curated physical salons in Colombo, Sri Lanka and Paris, France.
This Privacy Policy details how Gallery 1920 collects, processes, utilizes, and safeguards your personal information when you browse our catalog, submit collector inquiries, commission custom artworks, or acquire original museum-grade fine art through our platform.
2. Information We Collect
We gather only the information essential to deliver an elevated, museum-grade art acquisition experience and ensure flawless white-glove logistics. We collect the following categories of data:
a. Personal Identification Information
Provided voluntarily during checkout, private inquiry, or newsletter registration: your full name, email address, contact telephone or mobile number, and your full residential or atelier delivery address (including city, province/state, postal code, and country).
b. Acquisition & Curatorial Records
Information concerning specific artworks acquired, private viewing appointments requested, bespoke commissions, custom framing specifications, and signed Certificates of Authenticity registered under your name.
c. Technical & Browsing Data
Information collected automatically using cookies and secure protocols: your IP address, browser type and version, operating system, preferred currency selection (LKR or USD), referring URLs, and engagement interactions with our virtual exhibition rooms.
3. Payment Processing & PayHere (CBSL) Compliance
Security of financial transactions is of paramount importance to Gallery 1920. When acquiring an artwork, payment and billing details necessary to complete the transaction are processed strictly through authorized banking channels:
All online card payments (Visa, MasterCard, American Express, Sampath Vishwa, Commercial Bank, and mobile wallets) are processed exclusively by PayHere (Private) Limited. PayHere is an authorized Payment Service Provider licensed and supervised by the Central Bank of Sri Lanka (CBSL) under the Payment and Settlement Systems Act No. 28 of 2005.
4. How We Use Your Information
We use the personal and transactional data we collect for the following legitimate business purposes:
- Fulfilling & Crating Acquisitions: To process your payment, custom-crate original artworks in museum-standard archival wooden boxes, arrange white-glove transport, and issue trackable consignment notes.
- Certificates of Authenticity: To register legal provenance and generate official, signed Certificates of Authenticity issued by our curatorial director and represented artists.
- Collector Advisory & Communication: To answer your inquiries regarding artwork specifications, conservation guidelines, private salon appointments, and order progress.
- Bespoke Recommendations: With your consent, to notify you of private viewings, upcoming solo retrospectives, and newly released works matching your collecting focus.
- Fraud Prevention & Integrity: To verify payment authorizations, prevent illicit transactions, and protect both the artist and collector against fraud.
- Legal & Tax Compliance: To comply with Sri Lankan and international taxation, customs duties, and financial reporting mandates.
5. Information Sharing & Third Parties
We respect your privacy and never sell, rent, or trade your personal information to data brokers or third-party marketing companies. Personal data is disclosed only to select, trusted partners strictly necessary to execute our obligations:
6. Data Security & Storage Standards
We implement industry-standard technical, administrative, and physical safeguards to defend your personal data from unauthorized access, disclosure, alteration, or loss:
- TLS 1.3 Encryption: All communications between your browser and our servers are encrypted using modern Transport Layer Security (TLS 1.3) with 256-bit certificates.
- Firestore Security Rules: Granular database authorization protocols ensure collector profiles, order records, and transaction receipts are accessible only by authenticated users and vetted curatorial administrators.
- Restricted Administrative Access: Internal access to collector dossiers is granted on a strict least-privilege basis.
Please note that no method of transmission over the Internet or electronic storage can be guaranteed to be 100% impenetrable; however, we continually audit and update our defensive posture.
8. Your Rights & Privacy Choices
Regardless of your country of residence, Gallery 1920 extends comprehensive privacy rights to our patrons:
9. Policy Amendments & Updates
Gallery 1920 reserves the right to update or modify this Privacy Policy periodically to reflect changes in our curatorial services, operational technologies, or banking and statutory regulations (including Central Bank of Sri Lanka directives). Any revised edition will be published on this page with an updated “Last Updated” date. We advise patrons to review this page periodically.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, your personal information, or our PayHere payment processing security, please reach our curatorial compliance board: