Last updated: 27 August 2026
1. About this Privacy Policy
This Privacy Policy explains how personal data is collected, used and protected when you visit chanbhas.com, contact me, subscribe to the Chanbhas newsletter, enquire about or purchase artwork, or discuss a commissioned painting.
Sean Byrne, operating Chanbhas, is the data controller responsible for personal data processed through this website and in connection with Chanbhas.
For data protection enquiries, you can contact me at:
Sean Byrne / Chanbhas
Email: info@chanbhas.com
Postal address: [INSERT POSTAL CONTACT ADDRESS]
I take the privacy and security of personal data seriously and process personal data in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 and other applicable Irish data protection and electronic communications legislation.
2. Personal Data I May Collect
The personal data collected depends upon how you interact with Chanbhas.
Information you provide directly
This may include:
- your name;
- email address;
- telephone number;
- postal or delivery address;
- information contained in an enquiry or message;
- information relating to a painting you are interested in purchasing;
- details relating to a commission;
- delivery and order information;
- payment status and transaction information;
- reference photographs, images or other material you choose to provide in connection with a commission; and
- your newsletter subscription preferences.
I ask that you provide only information that is reasonably necessary for the purpose of your enquiry, purchase or commission.
Information collected when you use the website
Certain technical information may be collected automatically when you visit the website. Depending upon your cookie choices, this may include:
- your IP address;
- browser and device type;
- operating system;
- referring website or URL;
- pages visited;
- date and time of visits; and
- information collected through cookies and similar technologies.
Further information about cookies is provided below.
3. How and Why I Use Personal Data
Personal data is only used where there is an appropriate legal basis for doing so.
Enquiries and correspondence
If you contact Chanbhas with a question about artwork, commissions or another matter, I use the information you provide to respond to your enquiry and manage our correspondence.
The legal basis will normally be:
- taking steps at your request before entering into a contract, where your enquiry relates to a potential purchase or commission; or
- my legitimate interests in responding to and managing general enquiries.
Purchases of artwork
Where you purchase an artwork, personal data may be used to:
- process and administer the purchase;
- communicate with you about the order;
- arrange delivery or collection;
- issue confirmations or receipts;
- deal with queries, returns or other issues; and
- maintain appropriate financial and business records.
The principal legal bases are performance of a contract and compliance with legal obligations.
Commissioned artwork
Where you enquire about or agree a commissioned artwork, personal data may be used to:
- discuss and agree the commission;
- develop the artistic brief;
- communicate regarding progress;
- use photographs or reference material you have supplied for the agreed commission;
- arrange payment, completion and delivery; and
- retain appropriate records of the transaction.
The principal legal basis is taking steps before entering into a contract and subsequently performing that contract.
Accounting and legal records
Certain information about purchases and payments may need to be retained to comply with tax, accounting and other legal requirements.
The legal basis is compliance with a legal obligation.
Website operation and security
Technical information may be processed where reasonably necessary to operate, maintain and secure the website, identify technical problems and protect against misuse or malicious activity.
The legal basis is my legitimate interest in operating and protecting the Chanbhas website.
Cookies and analytics
Non-essential cookies, analytics or similar tracking technologies will only be used where the required consent has been obtained.
The legal basis for associated personal-data processing is consent.
4. Newsletter and Marketing Communications
If you choose to subscribe to the Chanbhas newsletter, your email address and any other information requested on the subscription form will be used to send you occasional news and updates about my artwork, exhibitions, new paintings and related Chanbhas activities.
The newsletter is currently managed using Brevo.
Brevo processes subscriber information on behalf of Chanbhas for the purpose of managing the mailing list and sending emails.
The legal basis for sending newsletter communications is your consent.
You can withdraw your consent at any time by:
- using the unsubscribe link contained in a newsletter; or
- contacting info@chanbhas.com.
Withdrawing consent will not affect the lawfulness of processing carried out before consent was withdrawn.
I will not sell or provide the Chanbhas mailing list to third parties for their own marketing purposes.
A limited suppression record may be retained after you unsubscribe so that your preference not to receive further marketing communications can be respected.
5. Cookies and Similar Technologies
Chanbhas.com uses cookies and similar technologies.
Some cookies are necessary for the website to function correctly and may be used without consent where permitted by law.
Other cookies, including analytics or similar non-essential technologies, will only be activated where the appropriate consent has been provided.
The website currently uses Real Cookie Banner to manage cookie choices and record consent preferences.
When you first visit the website, you can choose whether to accept or reject non-essential cookies. You can subsequently change or withdraw your choices through the cookie settings available on the website.
The cookie consent facility provides further information about the individual cookies and services used, including their purpose and duration.
6. Who Personal Data May Be Shared With
I do not sell personal data.
Personal data may, however, be shared with trusted service providers where reasonably necessary to operate Chanbhas or provide a service you have requested.
These may include:
Website hosting
Chanbhas.com is hosted using IONOS Managed WordPress services. Technical information required to operate and secure the website may therefore be processed through the hosting environment.
Newsletter provider
Brevo is used to manage newsletter subscriptions and distribute newsletter emails.
Delivery and courier companies
Where artwork is being delivered, the information necessary to complete the delivery, such as your name, delivery address and contact details, may be provided to the relevant courier or delivery provider.
Payment providers and financial institutions
Where a payment is made electronically, relevant information will be processed by the bank, payment provider or other financial service involved in the transaction.
Chanbhas does not need to retain your full payment-card details where these are processed directly by a payment service provider.
Professional advisers
Personal data may be shared with accountants, legal advisers or other professional advisers where reasonably necessary for accounting, taxation, legal or regulatory purposes.
Public authorities
Information may be disclosed where required by law, court order, regulatory requirement or another lawful request from a competent authority.
Service providers are only given the information reasonably necessary for the relevant purpose.
7. International Transfers
Some technology or service providers may process or store personal data outside Ireland or the European Economic Area.
Where personal data is transferred outside the European Economic Area, I will rely upon an appropriate lawful mechanism where required, such as:
- a European Commission adequacy decision;
- Standard Contractual Clauses approved by the European Commission; or
- another transfer mechanism permitted under applicable data protection law.
8. How Long Personal Data Is Retained
Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected and to meet any legal, accounting or regulatory requirements.
As a general guide:
General enquiries
Correspondence that does not result in a purchase or commission will normally be retained for up to two years after the last substantive communication, unless there is a reason to retain it for longer.
Newsletter subscribers
Newsletter information will normally be retained for as long as you remain subscribed.
After unsubscribing, a limited suppression record may be retained to ensure that your request not to receive marketing is respected.
Purchases and financial records
Information forming part of accounting, tax or transaction records will normally be retained for six years, or longer where required by law or where a relevant matter remains unresolved.
Commissions
Information and reference material relating to commissioned artwork will be retained for as long as reasonably necessary to complete and administer the commission.
Some transaction information may subsequently form part of accounting or legal records and be retained for the periods applicable to those records.
Website and cookie data
Retention periods for cookies and related technologies vary according to the particular service. Details are available through the website’s cookie consent/settings facility.
Information may be retained for longer where reasonably necessary to establish, exercise or defend a legal claim.
9. Security of Personal Data
I take reasonable technical and organisational measures to protect personal data against:
- unauthorised access;
- loss;
- misuse;
- alteration;
- disclosure; and
- destruction.
The website uses appropriate technical security measures and reputable hosting and service providers.
However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.
If a personal-data breach occurs which is likely to present a risk to individuals, it will be managed in accordance with applicable data-protection requirements.
10. Your Data Protection Rights
Depending upon the circumstances, GDPR gives you a number of rights concerning your personal data.
These can include the right to:
Access
Ask whether I process personal data relating to you and request a copy of that information.
Rectification
Ask for inaccurate or incomplete personal data to be corrected.
Erasure
Ask for personal data to be deleted where there is no lawful reason for it to continue to be retained.
This right is not absolute and certain information may need to be retained, for example to comply with a legal obligation.
Restriction
Ask for processing of your personal data to be restricted in certain circumstances.
Object
Object to certain processing based on legitimate interests.
You have the right to object at any time to the use of your personal data for direct marketing.
Data portability
In certain circumstances, request personal data you have provided in a structured, commonly used and machine-readable format.
Withdraw consent
Where processing is based upon consent, you may withdraw that consent at any time.
To exercise any of these rights, please contact:
I will normally respond without undue delay and within one month, as required by GDPR. In certain circumstances additional time may be permitted under GDPR.
I may need to request sufficient information to confirm your identity before responding to a request.
There will normally be no charge for exercising your data-protection rights, although GDPR permits a reasonable fee or refusal in certain limited circumstances involving manifestly unfounded or excessive requests.
11. Automated Decision-Making
Chanbhas does not currently use personal data to make decisions based solely on automated processing which produce legal or similarly significant effects concerning individuals.
12. Links to Other Websites
The Chanbhas website may contain links to third-party websites.
Those websites operate independently and may have their own privacy and cookie policies.
Chanbhas is not responsible for the privacy practices of third-party websites, and you should review the relevant privacy information when visiting them.
13. Children’s Personal Data
The Chanbhas website and services are not specifically directed at children.
I do not knowingly seek to collect personal data from children through the website.
If you believe that a child has provided personal data inappropriately, please contact info@chanbhas.com.
14. Your Right to Complain
If you have a concern about how your personal data has been handled, I would welcome the opportunity to address it first.
Please contact:
You also have the right to raise a concern or lodge a complaint with the Irish supervisory authority:
Data Protection Commission
Website: www.dataprotection.ie
The Data Protection Commission provides an online facility for submitting data-protection concerns and complaints.
15. Changes to this Privacy Policy
This Privacy Policy may be updated periodically to reflect changes in:
- the Chanbhas website;
- services or technologies used;
- how personal data is processed; or
- applicable legal or regulatory requirements.
The date of the most recent revision will be shown at the top of this page.
Material changes will be highlighted or communicated where appropriate.
16. Contact
For any question concerning this Privacy Policy or how personal data is handled by Chanbhas, please contact:
Sean Byrne / Chanbhas
Email: info@chanbhas.com
Website: chanbhas.com
Postal address: 14 Céide Mhainéar Shoird, Sord, Co. Bhaile Átha Cliath.