Privacy and cookies

Who we are

Kieran Bennett is responsible (the “controller”) for the personal information described on this page. As a small business we do not have, and are not required to have, a data protection officer. For any privacy question, ring Kieran, email us or write to the address above.

The short version

• This website has no forms, no visitor accounts and no newsletter.
• No payments are taken on this website. Sales are agreed with Kieran directly; once a price is agreed he may send you a secure link to pay online.
• Nothing is stored on your device when you look at the public pages.
• The map only loads from Google if you press “Show map”.
• If you ring, email or message us, we use your details only to deal with your enquiry.

What we use and why

Information	Why we use it	Legal basis (GDPR)	How long we keep it
Your name, contact details and what you tell us when you ring, email or message us	To answer you and arrange a viewing, a sale or a commission you ask about.	Taking steps you asked for before a contract, and carrying out that contract (Article 6(1)(b)). For general questions, our legitimate interest in replying to people who contact us (Article 6(1)(f)).	Only as long as needed to deal with the enquiry and any sale or commission that follows, then deleted within 12 months.
Records of a sale or commission (name, what was supplied, price)	Our accounts and tax returns.	Legal obligation (Article 6(1)(c)), under section 886 of the Taxes Consolidation Act 1997.	6 years after the transaction, as that law requires.
Technical data when you visit: IP address, browser type, page requested, date and time	To send you the web pages and keep the website working and secure. We do not use it to identify or track you.	Our legitimate interest in running a working, secure website (Article 6(1)(f)).	Kept by our host, Vercel. On our plan its server logs are kept for about one day.
The map (only if you press “Show map”)	To show you where the studio is.	Your consent, given by pressing the button (Article 6(1)(a)). Google then uses the data under its own privacy policy.	We keep nothing. Google keeps data as its own policy says.

You do not have to give us any information. There is no law or contract that requires it. The only effect of not giving us your details is that we cannot reply to you.

We do not make decisions about you by automated means, and we do not profile you.

Who else sees it

• Haverline Digital (Seán Fitzgerald and Cuan Ryan) built this website and looks after the hosting account for us. They can see the same technical data as our host and act only on our instructions.
• Vercel Inc. hosts the website. It processes technical data on our behalf under its data processing agreement. The website’s server code and stored files, including the photographs of the work, are in Vercel’s Dublin region.
• WhatsApp Ireland Limited (part of Meta), only if you choose to WhatsApp us. WhatsApp runs that service under its own privacy policy and is responsible for what it does with your data.
• Google Ireland Limited, only if you press “Show map” or open a Google Maps link. Your browser then connects to Google, which receives your IP address and browser details and may set cookies. Google is responsible for what it does with that data under its own privacy policy.
• The payment provider behind the secure payment link Kieran sends, only if you choose to pay that way. It processes your payment details under its own privacy policy. Provider: to confirm
• Our email provider and phone network carry emails, calls and texts, as with any message.
• Revenue, or anyone else the law requires us to give information to.

We never sell your information or share it for marketing.

Information sent outside the EU

Vercel Inc. is a US company, and its worldwide network may handle requests outside the EU. Vercel Inc. is certified under the EU-U.S. Data Privacy Framework (an EU adequacy decision), and its data processing agreement also includes the EU Standard Contractual Clauses. You can read both at those links.

If you use WhatsApp or Google services, those companies may transfer data outside the EU under their own safeguards, described in their privacy policies.

Cookies and similar technology

The law on cookies also covers similar technology such as the browser’s local storage. Here is everything this website stores, and when.

Name or type	Purpose	Set by	How long
Public pages	Nothing is stored on your device.	Nobody	Not applicable
Google Maps cookies	Only after you press “Show map”. Google uses them to show the map and for its own purposes.	Google	As set by Google. See Google’s privacy policy.
Admin key (local storage, named s43AdminKey)	Keeps Kieran signed in to his private page for putting work up and taking it down. It is only used on that page. Visitors to the public website never get it.	This website	Until it is cleared from the browser

Why there is no cookie banner: the law allows storage that is strictly necessary for a service the user has asked for (Regulation 5(5) of S.I. No. 336 of 2011). Kieran’s admin key is that kind of storage. Nothing else is stored unless you choose to load the map, and the note beside the “Show map” button tells you about Google before you press it. If you would rather not connect to Google, use the address above instead.

You can change your mind at any time: reload the page and the map will not load again unless you press the button. You can also clear cookies in your browser settings.

Your rights

Under the GDPR you have the right to:

• get a copy of the information we hold about you
• have it corrected if it is wrong
• have it deleted
• ask us to limit how we use it
• object to us using it, including where we rely on legitimate interests
• get information you gave us in a portable form, where we use it under a contract or your consent
• withdraw your consent at any time, where we rely on consent (this does not affect what was done before)

To use any of these rights, ring Kieran on 087 830 5625, email bennettkieran62@gmail.com or write to the address above. It is free. We may need to check who you are first. We will reply within one month. If a request is complicated we may need up to two more months, and we will tell you within the first month if so.

Complaints

We would like the chance to sort out any concern first, so please contact us. You also have the right to complain to the Data Protection Commission:

Children

This website is for adults interested in buying or commissioning art. It is not aimed at children, and we do not knowingly collect information from children.

Changes to this page

If we change how we use information, we will update this page and the date below.

Last updated: 4 November 2026