Privacy Policy

We only collect what we need to run the shop and reply to you:

• When you order:your name, email, phone number, and shipping & billing address.
• When you contact us: your name, email, subject, and the message you send.
• Automatically: basic, privacy-friendly usage data (pages visited, approximate country, device/browser type) via our analytics, plus limited technical data such as IP address where needed for site security and spam prevention.

We never see or store your card details. All payments are handled directly by Stripe.

• To process and deliver your order (our contract with you).
• To reply to enquiries you send us.
• To send order confirmations and updates about your purchase.
• To keep the site secure and understand how it's used so we can improve it (our legitimate interests).
• To meet our legal and tax obligations.

We do not sell your data, and we do not send marketing spam.

We use a small number of trusted service providers who process data on our behalf, only as needed to run the shop:

• Stripe — payment processing (privacy notice)
• Vercel— website hosting & analytics
• Supabase— secure database for artwork & order records
• Cloudinary — image hosting
• Resend— sending order & enquiry emails

We may also disclose information if required by law. Some providers may process data outside the UK; where they do, appropriate safeguards are in place.

Order and transaction records are kept for 6 years to meet UK tax and accounting requirements. Contact enquiries are kept for up to 2 years. Card details are never stored by us.

The site runs over encrypted HTTPS, secrets are stored securely, the admin area is password-protected, and card data never touches our servers. No system is ever 100% secure, but we take reasonable steps to protect your information.

Under UK GDPR you can ask us to access, correct, or delete your personal data, or to restrict or object to how we use it. To make a request, just get in touch. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We only use essential cookies needed to keep the site working (such as keeping the admin signed in and enabling secure checkout). We don't use advertising cookies. Our analytics is cookieless.

Questions about this policy or your data? Email art.mahipatel@gmail.com or use our contact form.