Privacy Policy
1. Who We Are
This website, www.sandragraham.co.uk (the “Service”), is operated by Sandra Graham Artist (“us”, “we”, or “our”).
We are committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard any personal data you provide when using our website.
2. Information We Collect
We collect several different types of information for various purposes to provide and improve our Service to you.
Personal Data
While using our Service, you may voluntarily provide us with certain personally identifiable information (“Personal Data”). This may include:
Email address
First name and last name
Phone number
Billing and shipping address
Payment information (processed securely by our third-party payment processors, not stored on our site)
Communications you send to us (e.g., via contact forms or email)
Usage Data
We may also automatically collect information on how the Service is accessed and used (“Usage Data”). This may include your computer’s Internet Protocol address (IP address), browser type, browser version, the pages you visit, the time and date of your visit, time spent on those pages, and other diagnostic data.
Tracking & Cookies Data
We use cookies and similar tracking technologies to track activity on our Service.
Cookies are small files stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
We use cookies for:
Essential Operation: To enable core website functionality.
Preferences: To remember your settings and preferences.
Analytics: To understand how visitors interact with our website so we can improve it.
Marketing: To help us make our marketing communications more relevant.
3. How We Use Your Data
Sandra Graham Artist uses the collected data for various purposes:
To provide and maintain the Service, including processing any purchases of artwork.
To manage your account and orders.
To notify you about changes to our Service or policies.
To provide customer care and support.
To send you information you have requested, such as newsletters (only with your explicit consent).
To analyse how our Service is used so we can improve its content and functionality.
To detect, prevent and address technical issues.
To comply with legal and tax obligations.
4. Legal Basis for Processing Your Data
Our legal basis for collecting and using your personal information depends on the context in which we collect it:
Performance of a Contract: We need your data to fulfil an order you have placed with us.
Consent: When you explicitly opt-in to receive our newsletter or marketing emails. You can withdraw this consent at any time.
Legitimate Interests: For using analytics data to improve our website and service, and for administrative purposes.
Legal Obligation: To comply with UK laws, such as retaining financial records for HMRC.
5. Data Retention
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
6. Transfer of Your Data
Your information, including Personal Data, may be processed on computers located outside of your country, where data protection laws may differ. As Sandra Graham Artist is based in the United Kingdom, your data will be processed in the UK, which is subject to the UK General Data Protection Regulation (UK GDPR).
If we use service providers outside the UK, we will ensure they provide an adequate level of data protection.
7. Disclosure of Data
We will not sell or rent your Personal Data to any third party. We may disclose your Personal Data in the following situations:
Service Providers: We employ third-party companies to facilitate our Service (e.g., payment processors, web hosting, analytics, shipping companies). These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Legal Requirements: We may disclose your Personal Data where required to do so by law or in response to valid requests by public authorities.
8. Security of Your Data
The security of your data is important to us. We strive to use commercially acceptable means to protect your Personal Data, including SSL (Secure Sockets Layer) encryption on our website.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we work to protect your data, we cannot guarantee its absolute security.
9. Your Data Protection Rights
Under UK data protection laws, you have rights including:
The right of access – You have the right to request copies of your personal data.
The right to rectification – You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
The right to data portability – You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
If you wish to exercise any of these rights, please contact us using the details at the end of this policy.
10. Payments
We use third-party services for payment processing (e.g., PayPal, Stripe). We do not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their own Privacy Policy.
11. Links to Other Sites
Our Service may contain links to other sites that are not operated by us, such as social media platforms (Instagram, Facebook) or other art-related websites.
If you click a third-party link, you will be directed to that site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content or practices of any third-party sites.
12. Children’s Privacy
Our Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18.
If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of 18 without verification of parental consent, we take steps to remove that information from our servers.
13. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top.
We will let you know via email and/or a prominent notice on our Service prior to the change becoming effective, where appropriate. You are advised to review this Privacy Policy periodically for any changes.
14. Contact Us
If you have any questions about this Privacy Policy, your data, or wish to exercise any of your data protection rights, please contact us at:
Email: info@sandragraham.co.uk