Corrales Bosque Gallery Member Portal — Privacy Policy
Last updated: May 30, 2026
This Privacy Policy describes how Corrales Bosque Gallery ("CBG," "we," "us") collects, uses, and protects information processed through the CBG Member Portal ("the Portal").
1. What information we process
Through the Portal, we process the following kinds of information about authorized users: (a) Identity and contact: full name, email address, mailing address, phone number. (b) Membership records: role within CBG, start date, commission rate, attendance, and shift assignments. (c) Financial records: sales transactions, consignment payouts, monthly dues paid, deposit reconciliations. (d) Tax and banking identifiers, used solely to populate vendor records and bill payments through QuickBooks Online (e.g., QuickBooks vendor display name, payout amounts). (e) Operational records: meeting attendance, inventory entries, documents uploaded by members.
2. Sources
Information is provided by the user, by CBG administrators on the user's behalf, or imported from Square sales records.
3. Why we process this information
We use the information solely to operate the gallery: producing sales statements for member-artists, computing consignment payouts, paying artists via QuickBooks Bill Pay, scheduling shifts, holding meetings, and meeting CBG's tax and bookkeeping obligations.
4. How information is stored
Member and financial records are stored in Supabase (a US-based managed Postgres database service) with row-level access controls limiting visibility by member role. Connections to all services use TLS encryption in transit.
5. Who has access
Each member can view their own records. Administrators, finance committee members, and IT personnel can view records as required to perform their roles. Authorized integrations (QuickBooks Online, Square, Resend, Google Workspace) receive the minimum information required for the specific operation being performed.
6. Third-party services
The Portal sends data to the following service providers under their respective privacy terms: QuickBooks Online (Intuit) for vendor and bill creation; Square for sales transaction synchronization; Supabase for data storage and authentication; Vercel for application hosting; Resend for transactional email delivery; Google Workspace for email and shared document storage.
7. Retention
We retain financial and tax records for at least seven (7) years to meet US federal and New Mexico state recordkeeping obligations. Other records are retained for the duration of your membership and a reasonable archival period afterward.
8. Your rights
You may request access to your personal information, correction of inaccurate information, or deletion of records that CBG is not required to retain by law. Send requests to art@corralesbosquegallery.com.
9. Security
While we take reasonable measures to protect Portal data, no system is fully immune from compromise. Report suspected incidents to art@corralesbosquegallery.com.
10. Children
The Portal is not intended for children under 13.
11. Changes to this policy
CBG may update this policy. Material changes will be communicated to active Portal users by email and reflected in the "Last updated" date above.
12. Contact
Corrales Bosque Gallery, Corrales, New Mexico, USA