Privacy policy
PRIVACY POLICY
Last updated: September 14, 2026
Derich Gallery (“Derich Gallery,” “we,” “us,” or “our”) respects your privacy and is committed to handling personal information responsibly and transparently.
This Privacy Policy explains how we collect, use, disclose, store, and otherwise process personal information when you visit our website, purchase our products, contact us, interact with our advertisements, subscribe to marketing communications, or otherwise use our services.
By using our website or services, you acknowledge the practices described in this Privacy Policy.
1. Who We Are
Derich Gallery is an independent art business based in Charlotte, North Carolina, USA.
For privacy-related questions or requests, contact us at:
Email: info@derichgallery.com
2. Personal Information We May Collect
Depending on how you interact with us, we may collect or process information including:
- your name, email address, phone number, billing address, and shipping address;
- order information, products purchased, order value, order history, returns, refunds, shipping information, and delivery status;
- account information if you create a customer account;
- payment-related information processed through Shopify, Shop Pay, PayPal, Apple Pay, Google Pay, card processors, or other payment providers;
- customer service communications, emails, chat messages, photographs, videos, or other information you voluntarily provide when contacting us or submitting a claim;
- reviews, testimonials, photographs, or other content you choose to submit;
- IP address, browser type, operating system, device information, cookie identifiers, advertising identifiers, and approximate location derived from technical information;
- pages viewed, products viewed, searches, cart activity, checkout activity, purchases, referring websites, advertising interactions, and other website usage information;
- email and SMS subscription status, communication preferences, and engagement with marketing messages;
- information received from Shopify, advertising platforms, analytics providers, payment processors, shipping carriers, fraud-prevention providers, social platforms, and other service providers we use to operate our business.
We generally do not receive or store complete payment card numbers ourselves. Payment information is handled by the applicable payment processor.
Please do not send highly sensitive personal information to us unless it is reasonably necessary for a specific request.
3. How We Collect Information
We may collect information:
Directly from you, such as when you place an order, contact us, subscribe to marketing, submit a review, request a return, or provide photographs relating to an order.
Automatically, through cookies, pixels, tags, analytics technologies, browser information, and similar technologies when you interact with our website.
From service providers and business partners, such as Shopify, payment providers, shipping carriers, advertising platforms, analytics providers, fraud-prevention services, and marketing platforms.
4. How We Use Personal Information
We may use personal information to operate and improve our business, including to process payments and orders, manufacture and fulfill orders, provide shipping and tracking information, provide customer support, process returns or refunds, respond to damaged-item claims, and communicate with customers.
We may also use information to operate and improve our website, understand how customers use our store, measure advertising performance, personalize content or advertising, manage email or SMS marketing, develop products, maintain customer records, and improve the shopping experience.
We may use order records, device information, delivery information, communications, carrier records, payment information, fraud signals, photographs, and other relevant information to detect or prevent fraud, investigate suspicious activity, respond to payment disputes or chargebacks, verify claims, enforce our policies, and protect our legal rights and the rights of our customers.
We may also process information when reasonably necessary to comply with tax, accounting, regulatory, legal, or law-enforcement requirements or to establish, exercise, or defend legal claims.
Where laws such as the GDPR or UK GDPR apply, our legal bases for processing may include performance of a contract, compliance with legal obligations, our legitimate business interests, and your consent where consent is required.
5. Cookies, Pixels, Analytics & Advertising
Our website may use cookies, pixels, tags, APIs, and similar technologies.
Depending on the services currently enabled on our store, these technologies may be provided by platforms such as Shopify, Meta, Google, Klaviyo, advertising partners, analytics providers, and other technology providers.
These technologies may collect information about your browser, device, IP address, products viewed, pages visited, cart activity, checkout activity, purchases, advertising interactions, and other website activity.
We may use this information for website functionality, analytics, fraud prevention, measuring advertising effectiveness, audience measurement, personalization, remarketing, and targeted advertising.
Some advertising integrations may also use hashed or otherwise transformed identifiers, such as an email address or phone number, where the integration is enabled and permitted by applicable law.
Where legally required, non-essential tracking technologies will be subject to applicable consent or opt-out controls.
You may also be able to control cookies through your browser, device settings, or privacy controls available on our website.
Disabling certain technologies may affect some website functionality.
6. Sale, Sharing & Targeted Advertising
We do not sell personal information to third parties in exchange for money.
However, we may disclose certain information to advertising, analytics, or technology partners to measure advertising, build audiences, personalize advertisements, or provide targeted advertising.
Under certain U.S. state privacy laws, some of these activities may legally be defined as a “sale,” “sharing,” or processing for targeted advertising, even though we do not receive money in exchange for the information.
Depending on where you live, you may have the right to opt out of these activities.
Where applicable, you may use privacy or data-sharing controls made available through our website or contact us at info@derichgallery.com.
Where applicable law requires recognition of legally valid browser-based universal opt-out signals, such as Global Privacy Control (GPC), we will process those signals as required by applicable law.
7. Email & SMS Marketing
If you sign up to receive promotional email or SMS communications, we may use your contact information to send product announcements, limited releases, promotions, abandoned-cart messages, back-in-stock notifications, and other marketing communications.
Where consent is legally required, marketing communications will be sent based on your consent.
You may unsubscribe from promotional emails at any time using the unsubscribe link contained in the message.
If SMS marketing is offered, you may follow the opt-out instructions contained in the message, such as replying STOP, where applicable.
Unsubscribing from marketing does not necessarily stop transactional communications relating to an existing order, payment, return, shipment, account, security matter, or customer-service request.
8. How We Disclose Personal Information
We may disclose personal information to companies that help us operate our business, including our ecommerce platform, payment processors, shipping carriers, fulfillment providers, email and SMS providers, customer-service providers, review platforms, website hosting or technology providers, analytics services, advertising platforms, fraud-prevention providers, professional advisers, and other vendors.
For example, depending on the services enabled on our store, these providers may include Shopify, Meta, Google, Klaviyo, PayPal, Shop Pay, shipping carriers, and similar providers.
These providers may process information according to their contractual relationship with us and, where applicable, their own privacy policies.
We may also disclose information when reasonably necessary to comply with law, respond to lawful requests, protect our rights or property, investigate fraud or illegal activity, enforce agreements, protect customers, or respond to disputes.
If Derich Gallery is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, information may be transferred as part of that transaction subject to applicable law.
9. Payment Information
Payments may be processed by third-party payment providers such as Shopify Payments, Shop Pay, PayPal, Apple Pay, Google Pay, credit card networks, banks, or other enabled payment services.
These providers may collect and process payment information according to their own privacy and security practices.
Derich Gallery generally does not directly receive or store your complete credit or debit card number.
We may retain transaction-related information such as the payment method used, transaction status, payment amount, limited card details provided by the processor, refunds, disputes, or chargeback information where available.
10. Shipping & Delivery Information
We may provide necessary personal information to shipping carriers and logistics providers in order to deliver your order.
This may include your name, shipping address, phone number, email address, order information, and other information reasonably necessary for delivery.
We may receive tracking information, delivery confirmations, delivery photographs, scan information, carrier notes, claim information, or similar records from shipping providers.
We may retain and use these records to provide customer service, investigate missing or damaged shipments, prevent fraud, and respond to disputes or chargebacks.
11. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
Retention periods may vary depending on the type of information and may take into account order fulfillment, customer service, warranties, returns, accounting, taxes, fraud prevention, payment disputes, chargebacks, legal obligations, contractual requirements, and potential legal claims.
Some records may therefore be retained even after a customer requests deletion where retention is permitted or required by law.
When personal information is no longer reasonably necessary, we may delete, anonymize, or otherwise dispose of it as appropriate.
12. Security
We use reasonable administrative, technical, and organizational measures intended to protect personal information.
Our store and payment systems may use encryption and security technologies provided by Shopify, payment processors, hosting providers, and other technology partners.
However, no website, transmission method, database, or storage system can be guaranteed to be 100% secure.
Accordingly, we cannot guarantee absolute security of personal information.
You are also responsible for protecting passwords, devices, and account credentials under your control.
13. Your Privacy Rights
Depending on where you live, you may have legal rights regarding your personal information.
These may include the right to request access to personal information, request deletion, correct inaccurate information, obtain a portable copy of certain information, withdraw consent, object to certain processing, opt out of the sale or sharing of personal information or targeted advertising, or limit certain uses of sensitive personal information where applicable.
You may also have the right not to receive discriminatory treatment for exercising applicable privacy rights.
To submit a request, contact:
We may need to verify your identity before completing certain requests.
We may request information reasonably necessary to verify that the request relates to you.
Authorized agents may submit requests where applicable law permits, but we may require evidence of authorization or direct verification with the consumer.
We may deny or limit a request where permitted by applicable law, including where information must be retained for legal, security, fraud-prevention, accounting, transaction, dispute, or other permitted purposes.
If you are located in the European Economic Area or United Kingdom, you may also have the right to lodge a complaint with the applicable data protection authority.
14. International Visitors & Data Transfers
Derich Gallery is based in the United States.
If you access our website or purchase from another country, your information may be transferred to, stored in, or processed in the United States or other countries where our technology and service providers operate.
Privacy laws in those countries may differ from the laws where you live.
Where applicable law requires safeguards for international data transfers, we and/or our service providers may rely on legally recognized transfer mechanisms and other appropriate safeguards.
15. Children’s Privacy
Our website and products are not directed toward children under the age of 16, and we do not knowingly collect personal information from children under 16.
If we learn that personal information from a child has been collected in circumstances where parental consent or another legal basis was required, we may delete the information as required by applicable law.
If you believe a child has provided personal information to us improperly, please contact info@derichgallery.com.
16. Reviews, Photos & User-Submitted Content
If you voluntarily provide a review, testimonial, photograph, video, social-media mention, or similar content, that content may be displayed publicly where appropriate and consistent with the way it was submitted or any permissions provided.
Please avoid submitting information in public reviews that you do not want others to see.
Customer-service communications and photographs submitted privately for damage claims, returns, or other support requests are not treated as public reviews solely because they were submitted to customer support.
17. Third-Party Websites & Services
Our website may contain links or integrations involving third-party websites, payment providers, social-media services, shipping services, or other platforms.
We do not control the privacy practices of independent third parties.
When you leave our website or interact directly with another provider, its privacy policy and terms may apply.
We encourage you to review the privacy practices of services you choose to use.
18. Fraud Prevention, Legal Claims & Protection of Our Business
We reserve the right to use and preserve information reasonably necessary to detect, investigate, document, or prevent suspected fraud, abuse, unauthorized transactions, false delivery claims, payment disputes, chargebacks, violations of our policies, or other unlawful activity.
We may use relevant transaction records, communications, photographs, IP or device information, delivery records, carrier information, payment information, and other available evidence for these purposes.
Where reasonably necessary and legally permitted, such information may be disclosed to payment processors, financial institutions, shipping carriers, fraud-prevention providers, insurers, professional advisers, courts, regulators, law enforcement, or other parties involved in resolving a dispute or protecting legal rights.
19. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our business, technology, services, legal obligations, or privacy practices.
The updated policy will be posted on this page with a revised “Last updated” date.
Where required by applicable law, we may provide additional notice or obtain consent before making material changes affecting how personal information is processed.
20. Contact Us
For questions about this Privacy Policy, requests relating to your personal information, or other privacy concerns, please contact:
Derich Gallery
Charlotte, North Carolina, USA
Email: info@derichgallery.com
We will review legitimate privacy requests and respond in accordance with applicable law.