ArTividual Privacy Policy
Last Updated: April 23, 2025
1. Introduction
Welcome to ArTividual ("we", "us", "our"). We are committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you visit our website ([Your Website Address]), purchase products, or interact with us.
This policy applies under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are (Data Controller)
The data controller responsible for your personal data is: ArTividual :andygravett@gmail.com
3. What Personal Data We Collect
We may collect and process the following types of personal data about you:
Identity Data: Your first name and last name.
Contact Data: Your billing address, delivery address, email address, and telephone number.
Transaction Data: Details about products you have purchased from us, payment details (note: full payment card details are typically processed securely by our third-party payment providers, e.g., Stripe, PayPal, and are not stored by us).
Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
Usage Data: Information about how you use our website and services (e.g., pages visited, products viewed).
Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
4. How We Collect Your Data
We collect data in the following ways:
Direct Interactions: You give us your data when you:
Purchase products from our website.
Create an account on our website.
Subscribe to our newsletter or marketing communications.
Contact us with enquiries (e.g., via email or contact form).
Enter a competition or promotion.
Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment, Browse actions, and patterns using cookies and similar technologies.
5. How We Use Your Personal Data
We use your personal data for the following purposes:
To process and deliver your orders: Including managing payments, fees, and charges, and arranging delivery.
To manage our relationship with you: Including notifying you about changes to our terms or privacy policy, responding to your queries, and providing customer support.
To administer and protect our business and this website: Including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data.
To improve our website, products, and services: Using data analytics to understand customer behaviour and preferences.
To send you marketing communications: Where you have opted-in to receive them, informing you about new products, offers, and events we think you might like. You can opt-out at any time.
To comply with legal obligations: Such as maintaining records for tax purposes.
6. Legal Basis for Processing Your Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
Performance of Contract: Where we need to process your data to fulfil an order you have placed with us.
Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., for website security, analytics, fraud prevention).
Consent: Where you have given us explicit consent to use your data for a specific purpose (e.g., sending marketing emails).
Legal Obligation: Where we need to comply with a legal or regulatory obligation (e.g., tax reporting).
7. Who We Share Your Data With
We may share your personal data with trusted third parties to help us operate our business and provide services to you, including:
Payment Processors: To securely handle payments, PayPal.
Delivery Companies: To deliver your orders Royal Mail.
IT Service Providers: Wix, Gelato who provide website hosting and fulfilment.
Marketing Platforms: If you consent to marketing, we may use platforms like Instagram to manage communications.
Professional Advisors: Including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
8. International Transfers
Some of our external third parties may be based outside the UK, so their processing of your personal data will involve a transfer of data outside the UK.
Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring appropriate safeguards are in place, such as using specific contracts approved for use in the UK which give personal data the same protection it has in the UK, or transferring to countries deemed to provide an adequate level of protection for personal data.
9. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.
Our website uses SSL technology (Secure Sockets Layer) to encrypt data transmitted between your browser and our server.
10. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.
Order information is typically kept for 6 years after the tax year it relates to, for tax purposes.
Account information is kept while your account is active.
Marketing consent is kept until you withdraw it.
After this period, we will securely delete or anonymise your data.
11. Your Data Protection Rights
Under UK data protection law, you have rights including:
Right of access: To ask for copies of your personal data.
Right to rectification: To ask us to rectify inaccurate or incomplete information.
Right to erasure: To ask us to erase your personal data in certain circumstances.
Right to restriction of processing: To ask us to restrict the processing of your data in certain circumstances.
Right to object to processing: To object to processing if we are relying on legitimate interests or for direct marketing.
Right to data portability: To ask that we transfer the data you gave us to another organisation, or to you, in certain circumstances.
Right to withdraw consent: Where we rely on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at [Your Contact Email Address]. We usually respond within one month.
12. Cookies
Our website uses cookies to distinguish you from other users. This helps us provide you with a good experience and allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, please see our. We will ask for your consent before placing non-essential cookies on your device.
13. Changes to This Privacy Policy
We may update this privacy policy from time to time. Any changes will be posted on this page, and where appropriate, notified to you by email. Please check back frequently to see any updates or changes. The "Last Updated" date at the top indicates when it was last revised.
14. How to Contact Us & Complaints
If you have any questions about this privacy policy or our privacy practices, please contact us at: Email: andygravett@gmail.com
You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
ICO Contact Details: Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Helpline number: 0303 123 1113 ICO website: https://www.ico.org.uk