Privacy Policy

There are no two things we care about more than falling in love with art and respecting the privacy of our customers. We appreciate you visiting our website; (the “Site”) owned and operated The Birmingham Contemporary Art Gallery Ltd. (“we,” “us,” or “our”). We are committed to protecting your privacy and we’ve created this Privacy Policy to let you know what to expect when you interact with us on our website, and use our services (collectively, “Services”). This Privacy Policy may be updated from time to time and we will notify you of any material changes by posting the new Privacy Policy on the Site. We recommend you consult this policy regularly for any changes.

By accessing or using our Services in any way, you agree that your information may be collected, stored, shared, and used as described in this Policy and our term of use. This Policy applies to all of our Services, regardless of how you use them. This Policy only applies to how we collect, store, share, and use information. This Policy does not apply to any entity that we do not own or control, or to any person that we do not employ or manage.

For the purpose of the Data Protection Act 2018 (the Act), the data controller is The Birmingham Contemporary Art Gallery, a company registered in England and Wales. Our company number is11970444 and our registered office is Unit 5 Arena Birmingham, Birmingham, England, B1 2AA. Our Data Protection Officer (DPO) is Sarah Wallace. If you have any requests concerning your personal data or any queries with regard to how we handle your data you can contact the DPO by phone on +44 (0)7703754646, email or by post using the address above.


We collect information to improve, protect and customise our Site, Services, features and content, develop new Services and to enable you and other Users to enjoy and easily navigate the Site.

We collect personal data when you:

1. Fill in forms on our Site, including account creation, mailing list sign-up and
2. Search for products and website content
3. Correspond with us by phone, e-mail, and social media
4. Enter into a competition
5. Complete a survey
6. Agree to the use of Cookies and other web tracking tools,
7. Report problems or make a complaint
The information you give us may include:
1. Name, home address, e-mail address, telephone number, credit/debit card or other payment details;
2. Details of your preferences, opinions and lifestyle;
3. Information about your use of our website, events and services;
4. The communications you exchange with us or direct to us via letters, emails, chat service, calls, and social media.
5. Location, including real-time geographic location of your computer or device through GPS, Bluetooth, and your IP Address, along with crowd-sourced Wi-Fi hotspot and cell tower locations, if you use location-based features and turn on the Location Services settings on your device and computer.


Activity Purpose of processing Lawful basis
Dealing with an order/ reservation/booking you place Contract
Internal accounting processes Legal requirement
Placing an order Provide you with further information about our similar products and services Legitimate interest
Adding you to our mailing list Consent
Dealing with your request to attend an event Contract
Internal accounting processes Legal requirement
Registering for an event Providing you with information about our products and services Legitimate interest
Adding you to our mailing list Consent
Making an enquiry Dealing with your enquiries or requests Legitimate interest
Providing you with information about our products and services Legitimate interest
Browsing and searching our website Personalising your visit by using cookies to recall your preferences and previous interactions with us Consent
Completing a survey Providing you with more relevant offers and information about our products and services Legitimate interest
Adding you to our mailing list Consent
Entering a competition Dealing with your entry and administering the competition Contract
Adding you to our mailing list Consent
Website maintenance and security Protecting your personal data and responding to threats and incidents Legitimate interest



We rely on legitimate interests as a basis for processing including intra-group transfers and some of our marketing.

For example, if you are a previous customer, we may process your personal data to personalise your emails, or to update you about significant changes to our Servicesas defined in section 1159 of the UK Companies Act 2006.

We carefully weigh up our legitimate interests against your rights, taking into consideration your reasonable expectations, based on your relationship us. We will inform you of the processing activity and give you the option to opt out when you give us your data, or in our first communication with you.


We rely on consent as a basis for sharing your information for other organisations to use and for some of our marketing. For example, if we have no prior direct relationship with you as a customer, we will ask your consent before we send you emails.

Consent is based on genuine choice and will always be freely given, specific and fully informed.


Where processing is necessary for us to carry out the pre-contract and contractual relationship between us, our customers and the suppliers we use to deliver our contracts.


If there is an emergency at one of our events, we may share limited personal data with the emergency services to protect the lives and vital interests of our guests and the general public. For example, if the only ID a guest carries is their event ticket, we may provide their personal data to the ambulance service to facilitate and contact with their GP and next of kin.


We would like to use your personal data to send you details of products or services that we offer that we have identified as likely to be of interest to you. We will only send you information in line with the preferences you communicate to us.

We use profiling to personalise the marketing communications you receive. For example, we might like to use your name, email address, location and website history to send you invitation to openings, or other interesting programme that you might be interested in or content that would help you to get the most from your visit.

If at any point you would like to opt-out of receiving communications from us, please use the Update Preferences in your emails from us, or


In carrying out our business including our obligations to you, we may use sub-contractors. These include couriers, mailing houses, email broadcasters, and marketing agencies. We will ensure that they respect your privacy and abide by all data protection laws.


We will disclose your personal information to third parties:

  • in the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets;
  • if The Birmingham Contemporary Gallery Limited or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets;
  • if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of and other agreements; or to protect our rights, property, or safety or that of our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction