Privacy Policy

Last updated: October 6, 2026

This policy explains how Brooke Carroll Reese ("I", "me", "my") collects, uses and protects your personal information when you visit www.brookecarrollreese.com, subscribe to my newsletter, book a consultation or become a client. I am the data controller for your information. Contact: info@brookecarrollreese.com.

Information I collect

• Contact and inquiry details: your name, email address, phone number and anything you include in a message or form.

• Client information: details about your collection, inherited works, acquisition or sale goals, budget, and financial, estate or family circumstances relevant to the advice you ask for.

• Booking and payment details: appointment details, billing address and transaction records. Card payments are processed by my payment providers; I do not receive your full card number.

• Newsletter data: your email address, subscription preferences and whether you open or click my emails.

• Technical and usage data: IP address, device and browser type, approximate location, pages visited and how you arrived on the site, collected through cookies and similar technologies (see the Cookies Policy below).

How I use your information and my legal bases

For visitors in the UK and EU, I rely on the following lawful bases under the UK GDPR and EU GDPR:

• To reply to inquiries and arrange consultations (steps taken at your request before a contract, or my legitimate interest in responding to you).

• To provide advisory services, manage bookings and take payment (performance of a contract).

• To send my newsletter (your consent, which you can withdraw at any time).

• To understand how the website is used and to measure and show relevant advertising (your consent, given through the cookie banner).

• To keep business, accounting and tax records and meet other legal obligations (legal obligation).

• To run, secure and improve my business and protect my legal rights (legitimate interests).

I do not ask for special category data such as health information. Please share only what is needed for the advice you want.

Who I share information with

I do not sell your personal information for money. I share it only with:

• Service providers who help me run the website and business, including Squarespace (hosting, forms, analytics, email campaigns and scheduling), my newsletter provider, payment processors such as Stripe or PayPal, Google (Google Analytics) and Meta (Meta Pixel).

• Professional advisors such as my accountant, lawyer and insurer.

• Third parties you ask me to introduce you to, such as auction houses, appraisers, lenders or galleries, and only with your agreement.

• Regulators, courts or law enforcement where the law requires it.

International transfers

Some of my service providers are based in or store data in the United States and other countries. Where personal information from the UK or EU is transferred abroad, I rely on appropriate safeguards such as the EU-U.S. Data Privacy Framework and its UK Extension, Standard Contractual Clauses or the UK International Data Transfer Addendum.

How long I keep information

Inquiries that do not lead to an engagement are kept for up to two years. Client records are kept for six years after our engagement ends, to meet tax, accounting and legal requirements. Newsletter data is kept until you unsubscribe. Analytics and advertising data are kept for the periods set by the relevant cookie.

Security

I use reasonable technical and organizational measures to protect your information, including secure, access-controlled systems. No method of transmission over the internet is completely secure, so please avoid sending highly sensitive documents by unencrypted email.

Your rights in the UK and EU

You have the right to access your personal information, correct it, ask me to delete it, restrict or object to its use, receive a copy in a portable format, and withdraw consent at any time. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority in your EU country, though I would appreciate the chance to resolve any concern first.

Your rights in the United States

Depending on your state of residence (for example California, Colorado, Connecticut, Virginia and other states with consumer privacy laws), you may have the right to know what personal information I hold about you, to correct or delete it, and to opt out of the sale or sharing of personal information for targeted advertising. Using the Meta Pixel and similar advertising cookies may count as "sharing" under some state laws. You can opt out by declining advertising cookies in the cookie banner, or by turning on Global Privacy Control in your browser, which I treat as a valid opt-out request. I will not treat you differently for exercising your rights.

Making a request

Email info@brookecarrollreese.com. I may need to verify your identity, and I will respond within the time required by applicable law (usually one month in the UK and EU, and 45 days in the US).

Children

This website is not directed at children, and I do not knowingly collect personal information from anyone under 16.

Changes to this policy

I may update this policy, including when my business moves to a limited liability company. The current version will always be published on this page.