top of page

Privacy Policy

A legal disclaimer

Last updated 08/09/2025

 

Gemma Elliston Art respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website www.gemmaellistonart.com and when you purchase artwork or related services from us.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.

Information We Collect

We may collect and process the following types of personal information:

  • Identity Data: name, username, title.

  • Contact Data: billing address, delivery address, email address, phone number.

  • Transaction Data: details of purchases and payments.

  • Technical Data: IP address, browser type, operating system, and website usage through cookies.

  • Marketing & Communication Data: your preferences for receiving marketing from us.

How We Use Your Information

We use your personal data to:

  • Process and deliver your artwork orders.

  • Manage payments, fees, and charges.

  • Communicate with you about your order or account.

  • Provide customer service and respond to enquiries.

  • Send marketing communications if you have opted in.

  • Improve our website, products, and services.

  • Comply with legal and tax obligations.


We will only use your personal data when the law allows us to, such as when it is necessary for fulfilling a contract, complying with legal obligations, or when you give consent.

Sharing Your Information

We do not sell your personal information. We may share your data with trusted third parties, such as:

  • Payment providers (e.g., PayPal, Stripe) to process transactions.

  • Delivery companies (e.g., Royal Mail, couriers) to deliver your artwork.

  • Website hosting, analytics, and IT support providers who help us operate our business.

  • Authorities if required by law (e.g., HMRC).

 

All third parties are required to respect the security of your data and comply with data protection law.

Data Retention

We will keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying legal, accounting, or reporting requirements.

Your Rights

Under the UK GDPR, you have the right to:

  • Access the personal data we hold about you.

  • Request correction of inaccurate or incomplete data.

  • Request erasure of your data in certain circumstances.

  • Object to or restrict the processing of your data.

  • Request transfer of your data to another service provider.

  • Withdraw consent at any time where we rely on consent.
     

To exercise these rights, please contact us using the details below.

Security

We take appropriate technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access.

International Transfers

If we transfer your data outside the UK (for example, if a service provider is based abroad), we ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your information.

Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us at:

Gemma Elliston Art
Email: gemma.elliston24@gmail.com

Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve your concerns. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

bottom of page