Privacy Policy

Data Controller

The data controller responsible for the processing of your personal data is the Kwame Brathwaite Archive. If you have questions about this policy or wish to exercise any of your rights, you can contact us at info@kwamebrathwaite.com.

Information We Collect

We collect only the information necessary to respond to your inquiries and operate this website.

Inquiries and contact form submissions: when you contact us, we collect your name, email address, phone number (if provided), subject, and the content of your message.

Newsletter subscriptions: when you subscribe to our newsletter, we collect your email address and language preference.

Exhibition reminder requests: when you sign up for reminders, we collect your name, email address, and the exhibition you are interested in.

Server logs: like most websites, our hosting provider automatically records basic technical information such as your IP address, browser type, requested URLs, and timestamps. These logs are used for security and operational purposes and are retained for a short period.

How We Use Your Information

We use your personal information solely to respond to your inquiries, deliver newsletters and event reminders you have requested, operate and secure the website, and comply with legal obligations.

We do not sell your personal information, and we do not use it for advertising or profiling.

Legal Basis for Processing

Under the GDPR, we process your personal data on the following legal bases: your consent (for newsletter subscriptions and exhibition reminders), our legitimate interest in responding to inquiries you send us, and compliance with legal obligations.

Data Retention

Inquiry records are retained for up to three years from the date of last contact, after which they are deleted unless a longer retention period is required by law.

Newsletter subscriptions are retained until you unsubscribe. Once you unsubscribe, your email address is marked inactive and is no longer used for communications.

Server logs are retained for approximately thirty days for security and diagnostic purposes.

Third-Party Processors

We use a small number of carefully selected service providers to operate this website. Each processor acts on our instructions and is bound by contractual confidentiality and data protection obligations.

Hosting and database: Vercel and Supabase host the website and store content such as artwork records, exhibitions, inquiries, and newsletter subscribers.

Email delivery: Resend is used to send transactional and newsletter emails on our behalf.

Maps: Google Maps is loaded only after you explicitly consent on pages that display a map. When loaded, Google may process technical information in accordance with its own privacy policy.

Translation: DeepL is used server-side to translate content between English, French, and Japanese. No user-identifying data is sent.

AI tools: OpenAI is used server-side by our administrators to generate draft descriptions of artworks. No visitor data is sent to OpenAI.

Cookies and Local Storage

The public pages of this website do not use any analytics, advertising, or tracking cookies.

We use a single local storage item ("kb-maps-consent") to remember your preference when you choose to load the interactive Google Maps component. This value never leaves your browser.

The administrative area of the website uses session cookies for authentication, but those cookies are set only for authorised staff members and are never set for public visitors.

You can review or reset your Google Maps preference below.

Your Rights Under the GDPR

If you are located in the European Union, the United Kingdom, or another jurisdiction that recognises these rights, you have the right to access the personal data we hold about you, to request correction of inaccurate data, to request erasure of your data, to object to or restrict processing, and to data portability.

You also have the right to withdraw consent at any time where processing is based on consent, and to lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us at info@kwamebrathwaite.com. We will respond within the timeframes required by applicable law.

Your Rights Under the CCPA

If you are a California resident, you have the right to know what personal information we collect about you, to request deletion of that information, and to opt out of any sale or sharing of your personal information.

We do not sell personal information, and we do not share personal information with third parties for advertising or profiling purposes.

To exercise your California rights, contact us at info@kwamebrathwaite.com.

Children's Privacy

This website is not directed at children under the age of sixteen. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will delete it promptly.

International Data Transfers

Our service providers may store or process data outside of your country of residence, including in the United States. Where such transfers occur, they are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify subscribers by email.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at info@kwamebrathwaite.com, or use the contact form on our website.