Legal
Privacy Policy & Cookie Notice
1. Who we are
This website is operated by Jane Doe, a sole trader and artist based in Cornwall, UK. Jane Doe is the data controller for any personal data collected through this site.
ICO Registration number: [ADD ONCE REGISTERED — check ico.org.uk/registration]
2. What data we collect and why
We collect personal data only when you actively provide it to us:
- Purchase and sales enquiries — your name, email address, postal address, and any notes you provide. We use this to process your enquiry, arrange payment, and despatch your artwork. Legal basis: contract (Article 6(1)(b) UK GDPR).
- General contact messages — your name and email address. We use this solely to respond to your message. Legal basis: legitimate interests (Article 6(1)(f) UK GDPR).
- Cookie consent preference — stored locally in your browser (localStorage) to remember your choice. This is not sent to any server.
3. How long we keep your data
- Sales records (name, address, amount paid): 6 years — required for UK tax purposes (HMRC).
- General enquiries not resulting in a sale: deleted within 12 months of last contact.
- Cookie preference: stored in your browser until you clear it (not sent to us).
4. Who we share data with
We do not sell or share your personal data with third parties for marketing purposes. Your data may be processed by the following third-party services:
- Google Maps (location page) — if you view the embedded map, Google may set cookies and collect data about your use. See Google's Privacy Policy.
- Form handling — if we use a third-party form service (such as Formspree), your submission is processed through their servers. We will update this policy when a form service is in place.
We do not use Google Analytics, Facebook Pixel, or any advertising trackers on this website.
5. Cookies
This site uses the following cookies and browser storage:
- cookie-consent (localStorage, this site only) — stores whether you accepted or declined cookies. Never sent to a server. Expires when you clear your browser storage.
- Google Maps cookies — only set if you view the embedded map on the Location page, and only if you accept cookies. These are third-party cookies set by Google. You can decline cookies using the banner at the bottom of this page to prevent the map loading.
We do not use any advertising, tracking, or analytics cookies.
6. Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data (where no legal obligation requires us to retain it)
- Object to our processing of your data
- Lodge a complaint with the ICO: ico.org.uk/make-a-complaint
To exercise any of these rights, contact us at jane@example.com.
7. Data security
This site is served over HTTPS (encrypted connection). Enquiry forms send data by email to our private email address. We do not store form data on any public server. Emails are held on a password-protected account.
8. Changes to this policy
We may update this policy when our services change. The date at the top of this page shows when it was last revised.
9. Contact
Jane Doe
[Studio Address], Penzance, Cornwall, TR18 XXX
jane@example.com