Privacy Policy - Leighton Fine Art

Last updated: 12 October 2026

Who we are

This website is run by Leighton Fine Art Ltd, a company registered in England and Wales (company number 08072141, VAT number GB881563500). Our gallery is at 79–81 High Street (Rear), Marlow, SL7 1AB. We are the controller of the personal information described in this policy.

If you have a question about this policy or your information, email nick@leightonfineart.com or call +44 1628 523 552.

The information we collect

Enquiries. When you ask about a painting, request a viewing or contact us, we collect your name, email address, telephone number, your message, the artwork you asked about, and how you found our website.
Purchases. When you buy from us, we collect your name, billing and delivery addresses, email address, telephone number and the details of your order. Card and PayPal payments are handled by Stripe and PayPal. We do not see or store your full card number.
Your account and the Collector Circle. If you create an account or join the Collector Circle, we keep your name, email address, password (stored in encrypted form), your wishlist and your preferences.
Newsletter. If you subscribe, we keep your email address and any name you give us.
Selling a painting to us. If you offer us a painting, we collect your contact details and the information and photographs you send about the work.
Using the website. We collect information about how the website is used, such as pages visited, the device and browser used and an approximate location. This comes from cookies, described in our Cookie Policy. Our security systems also record IP addresses to protect the site from attack.

How we use it, and our lawful basis

To answer enquiries and arrange viewings. This is in our legitimate interests as a gallery, or is a step you have asked us to take before buying.
To sell, ship and insure the works you buy, and to provide after-sales service. This is necessary to perform our contract with you, as set out in our Terms and Conditions.
To meet our legal obligations. This includes keeping accounting and tax records. As an art market participant, we may also need to verify your identity for higher-value purchases under the UK Money Laundering Regulations.
To send our newsletter and Collector Circle letters. We do this with your consent, and you can unsubscribe at any time using the link in every email.
To keep in touch with existing clients about works similar to ones they have bought or asked about. This is in our legitimate interests, and you can ask us to stop at any time.
To understand how the website is used and improve it, using analytics cookies if you agree to them. See our Cookie Policy.
To keep the website and our records secure and to prevent spam and fraud. This is in our legitimate interests.

Who we share it with

We never sell your personal information. We share it only with people who help us run the gallery, and only as far as they need it:

our office in the United States, when it is helping with your enquiry or purchase;
WP Engine, which hosts this website;
Stripe and PayPal, which process payments;
Mailchimp, which sends our newsletter, and Mailgun, which delivers the website’s emails;
Google, which provides website analytics and maps;
Automattic (Akismet) and Patchstack, which protect our forms and website from spam and attack;
specialist fine art couriers, shippers and insurers, to deliver the works you buy;
our professional advisers, such as accountants and lawyers;
the police, HMRC or other authorities, where the law requires it.

Transfers outside the UK

Some of these providers, and our US office, are in the United States. Where your information leaves the UK, we make sure it is protected by safeguards recognised under UK data protection law, such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Agreement.

How long we keep it

We keep enquiries, account details and our client records, including records of purchases, indefinitely. For a dealer in fine art, the history of who has owned, bought or asked about a work forms part of its provenance, and of our long-standing relationships with collectors. Identity checks are kept for five years after the end of our business relationship, as the Money Laundering Regulations require. You can ask us to delete your details at any time (see Your rights below), and we will, unless the law requires us to keep them. You can unsubscribe from emails at any time.

Your rights

You have the right to ask for a copy of the information we hold about you. You can ask us to correct it, delete it or restrict how we use it, to object to our use of it, and to have it transferred to you or another organisation. Where we rely on your consent, you can withdraw it at any time. To use any of these rights, email nick@leightonfineart.com. We will reply within one month.

If you are unhappy with how we have handled your information, please tell us first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.