Privacy Policy for Janet Gray Art

Last Updated: 21st October 2023
Website: www.janetgray20@icloud.com
Business Name: Janet Gray Art
Contact Email: jane

Janet Gray Art ("we," "us," "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or make a purchase.

By using our site, you agree to the terms of this policy.

1. Who We Are
Janet Gray Art is a sole proprietorship owned and operated by Janet Gray, creating and selling original oil paintings. For the purposes of data protection law, Janet Gray is the "data controller."

2. Information We Collect
We collect and process the following information:

• Personal Identifiers: When you place an order, we collect your name, email address, shipping/billing address, and telephone number (if provided for delivery purposes).

• Financial Information: We do not store your full payment card details. All payments are processed securely by our third-party payment processors (such as Stripe or PayPal), who have their own privacy policies.

• Technical Data: When you visit our site, we automatically collect your IP address, browser type, and information about your visit (e.g., pages viewed) through cookies.

• Communication Data: If you contact us via email or our contact form, we collect your name, email address, and the content of your message.

3. How We Use Your Information
We use your personal data for the following purposes:

PurposeLegal BasisTo process and fulfil your order, including shipping and customer service.Performance of a contract.To manage our legal obligations (e.g., keeping records for HMRC).Legal obligation.To send you important administrative messages about your order.Legitimate interests (to provide efficient service).To respond to your enquiries and provide customer support.Legitimate interests (to respond and maintain customer relationships).With your explicit consent, to send you marketing communications about new artwork, exhibitions, or offers.Consent. (You can withdraw this at any time).To improve our website and services through analytics.Legitimate interests (to develop our business).

4. How We Share Your Information
We will never sell your personal data. We only share it with trusted third-party service providers who assist us in operating our website and conducting our business, under strict data protection agreements:

• Shipping Partners: (e.g., Royal Mail, UPS) to deliver your order.

• Payment Processors: (e.g., Stripe, PayPal) to securely process your payment.

• Website Hosting & Analytics Providers: (e.g., Google Analytics) to help us analyse website traffic. Data is anonymised where possible.

5. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Order Information: We are required to keep order information (personal data, transaction details) for 6 years from the end of the financial year the transaction was made, for UK tax (HMRC) purposes.

• Marketing Contacts: If you have opted into our mailing list, we will retain your email address until you unsubscribe or ask us to delete it.

6. Your Data Protection Rights
Under UK data protection law, you have rights including:

• Your right of access – You have the right to ask us for copies of your personal information.

• Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate.

• Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

• Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

• Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.

• Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

• Your right to withdraw consent – Where we rely on consent, you can withdraw it at any time.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at janet@janetgrayart.com to make a request.

7. Cookies
Our website uses cookies to distinguish you from other users. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. You can set your browser not to accept cookies, but this may limit your user experience.

8. How We Store and Protect Your Data
We are committed to ensuring that your information is secure. We have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online. All payment information is encrypted and processed via PCI-DSS compliant payment gateways.

9. How to Complain
If you have any concerns about our use of your personal information, you can make a complaint to us at janet@janetgrayart.com.
You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk

10. Changes to this Privacy Policy
We may update this policy from time to time. The latest version will always be available on this page, and we will change the "Last Updated" date accordingly.