Privacy Policy

We are committed to protecting your privacy. This policy explains what personal data we collect when you use this website and buy digital prints from us, how we use it, and the rights you have under the UK GDPR and the Data Protection Act 2018. We are the “data controller” for this information — our details are shown at the top of this page.

The data we collect

• Order & payment data. When you buy a print, our payment processor (Stripe) collects your email address, billing details, and card information. We never see or store your full card number — Stripe handles payment securely on our behalf. We receive a confirmation, your email address, and the last four digits of your card.
• Download data. After a successful purchase we generate a temporary, secure download link for your file. We record the purchase reference and which artwork it relates to so the link can be honoured.
• Technical & usage data. We use privacy-first, cookieless analytics (Cloudflare Web Analytics) that measure aggregate page views without identifying you or tracking you across sites.

We do not operate user accounts and we do not collect data we do not need.

How and why we use it (lawful bases)

• To fulfil your order and deliver your download — performance of a contract.
• To send transactional messages such as your receipt and download link — performance of a contract.
• To keep records required for tax and accounting — legal obligation.
• To secure and improve the website using aggregate analytics — legitimate interests.

We do not use your data for marketing without your consent, and we never sell your personal data.

Who we share it with

We share data only with the processors that make the service work: Stripe (payments), Cloudflare (hosting, secure file storage, and analytics). Each acts under contract and only on our instructions. We may disclose data where required by law.

International transfers

Some processors may store data outside the UK. Where they do, transfers are protected by appropriate safeguards such as the UK International Data Transfer Agreement or an adequacy decision.

How long we keep it

We keep order and transaction records for as long as required by law (generally six years for tax purposes). Download links expire automatically and are deleted shortly after purchase.

Your rights

You have the right to access, correct, erase, restrict, or object to our use of your personal data, and to data portability. To exercise any of these, contact us using the details at the top of this page. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Changes

We may update this policy from time to time. The “last updated” date above shows when it was last revised.