Privacy
Last updated: 3 May 2026
Delft Gallery is a private platform. We handle your data with care, not because the GDPR requires it, but because trust is the product.
Data controller
Tim van Delft, trading under the name Delft Gallery.
Contact: tim@delftgallery.com
Which data do we collect?
- Name and email address, only when you click "I want this" yourself and submit the form.
- The work you expressed interest in, to put you and the artist in touch.
- Access code (session), stored in an HttpOnly cookie on your device so you can keep viewing the gallery.
What do we not do?
- No tracking pixels, no analytics, no advertising networks.
- No sale or sharing of data with third parties.
- No profiling or automated decision-making.
How long do we keep data?
We keep interest requests in our mailbox for a maximum of 24 months for follow-up and administration. After that we delete them. The session cookie expires after 30 days.
Processors
- Resend (sending email), based in the EU.
- Vercel (hosting), data is processed in the EU region.
Your rights
You have the right to access, correct and delete your data. Send an email to the address above and we will arrange it within 14 days. You may also file a complaint with the Dutch Data Protection Authority.