
Privacy Policy and Cookie Policy — www.artbyjoanne.co.uk
Last updated: 18 January 2026
This Privacy and Cookie Policy explains how we collect and use personal data when you use www.artbyjoanne.co.uk, and how cookies are used.
1) Who controls your data
Data Controller: Art by Joanne.
Contact: via the Website contact page.
2) What personal data we collect
Depending on how you use the Website, we may collect:
-
Contact and enquiry data: your name, email address, and message content when you contact us.
-
Order data (if you purchase): name, billing/shipping address, email, phone (if provided), order contents, and payment status (card details are handled by the payment provider, not stored by us).
-
Technical/usage data: IP address, device/browser information, pages visited, and approximate location derived from IP, where collected via analytics and logs.
3) How we use your data and our legal bases
We process personal data for the following purposes:
-
To respond to enquiries (e.g., commissions, availability) — legitimate interests and/or steps prior to entering a contract.
-
To process and deliver orders — contract.
-
To run, secure, and improve the Website (including preventing fraud/abuse, measuring performance) — legitimate interests.
-
Marketing (if offered and you opt in) — consent. (If you do not opt in, we will not send marketing emails.)
4) Who we share your data with
We may share personal data with trusted service providers only where needed to operate the Website and fulfil orders, such as:
-
Website platform/hosting provider
-
Payment provider(s) (to take payment)
-
Delivery/courier services (to deliver orders)
-
Analytics provider(s) (only where enabled and in line with your cookie choices)
These providers act as processors/service providers and must protect your data.
5) International transfers
Some service providers may process data outside the UK. Where this occurs, we will rely on appropriate safeguards required by UK GDPR (for example, adequacy regulations or standard contractual clauses).
6) How long we keep your data
We keep personal data only as long as necessary for the purposes above, including:
-
enquiries: typically for a reasonable period to handle and follow up on your request;
-
orders: as required for order fulfilment and tax/accounting record-keeping.
7) Your rights (UK GDPR)
You have rights including: access, rectification, erasure, restriction, objection, portability, and to withdraw consent (where processing relies on consent). You also have the right to complain to the UK supervisory authority (ICO).
8) Security
We take reasonable technical and organisational measures to protect personal data. No online system is completely secure.
Cookie Policy (UK)
9) What cookies are
Cookies are small text files stored on your device when you visit a website. They help the site function and can provide information to the site owner and third parties.
10) Cookies we use
The Website may use some or all of the following categories:
-
Strictly necessary cookies
Needed for core functions such as page navigation, security, shopping basket, and checkout. These cannot be switched off in systems that require them. -
Preferences (functional) cookies
Remember choices you make (e.g., region or display preferences) to improve your experience. -
Analytics (performance) cookies
Help us understand how visitors use the Website (e.g., which pages are visited), so we can improve it. These should be set only if you consent where required. -
Marketing cookies (if used)
Used to deliver relevant advertising and measure effectiveness. These should be set only if you consent.
11) Consent and managing cookies
-
Where required by UK PECR and UK GDPR, non-essential cookies (analytics/marketing) are used only with your consent.
-
You can manage cookies in two ways:
-
Cookie banner/settings (if implemented on the Website), and/or
-
Your browser settings (block or delete cookies).
-
Blocking cookies may affect Website functionality (including checkout).
12) Third-party cookies
If the Website uses third-party tools (for example, analytics, embedded content, social media), those third parties may set cookies. Their cookies are controlled by their own policies.
13) Changes to this policy
We may update this policy from time to time by posting the updated version on the Website.