Privacy & Cookie Policy
This Privacy Policy applies to Paula Davey Art and its website paula-davey-art.co.uk
In this document, “we”, “our”, or “us” refer to Paula Davey Art.
Introduction
This privacy notice explains how we collect, use, store, and protect information obtained from you when you visit our Website or purchase products from us. It applies to information that identifies you personally (“personal data”) as well as information that does not.
In accordance with UK data protection law, the term “processing” refers to any action performed on personal data, including collection, storage, use, disclosure, or deletion.
We are committed to safeguarding your privacy and handling your personal data responsibly, transparently, and securely. This policy reflects both our legal obligations and our respect for your personal information.
This Privacy Policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
You can find further information about your data protection rights on the Information Commissioner’s Office (ICO) website:
https://ico.org.uk/your-data-matters/
Information We Collect
We may collect, use, store, and transfer the following categories of personal data:
Identity Data
This may include your name, title, date of birth (where required for age verification), and other identifying information you provide.
Contact Data
Includes billing address, shipping address, email address, telephone number, and other contact details supplied during checkout or account creation.
Transaction Data
Includes order details, purchase history, payment confirmations, and delivery information.
Please note: we do not store full payment card details.
Technical Data
Includes IP address, browser type and version, device identifiers, operating system, time zone settings, and other technical information collected when you access the Website.
Marketing and Communications Data
Includes your preferences regarding marketing communications and your interactions with emails or other communications from us.
Aggregated Data
We may also collect anonymised statistical or demographic data for analytical purposes. This data does not identify you and is not considered personal data unless combined with identifying information.
How We Collect Your Data
We collect personal data through:
-
Orders placed on our Website
-
Account registration
-
Contact forms and email enquiries
-
Newsletter subscriptions
-
Cookies and similar tracking technologies
-
Automated website analytics tools
Lawful Bases for Processing
We only process your personal data where we have a lawful basis to do so, including:
-
Consent – where you have explicitly agreed
-
Contractual necessity – to fulfil an order or provide a service
-
Legal obligation – to comply with tax, accounting, or regulatory requirements
-
Legitimate interests – where necessary for business operations and not overridden by your rights
Data Processed to Fulfil Orders
When you place an order, we process your data to:
-
Verify your identity and age eligibility
-
Process payments securely
-
Dispatch products and manage delivery
-
Communicate order confirmations and updates
-
Maintain legally required transaction records
Failure to provide required information may prevent us from fulfilling your order.
Marketing Communications
Where permitted by law, we may send you information about new products, updates, or promotions.
You may opt out of marketing communications at any time by:
-
Using the unsubscribe link in our emails, or
-
Contacting us directly
We will not sell or rent your personal data to third parties for marketing purposes.
Information Shared with Third Parties
We may share your data only where necessary with trusted third parties, including:
-
Payment processors
-
Courier and logistics providers
-
Website hosting and IT service providers
-
Legal or regulatory authorities where required by law
All third parties are required to handle your data securely and in accordance with applicable data protection laws.
Cookies and Tracking Technologies
Our Website uses cookies and similar technologies to enhance functionality and improve user experience.
Cookies may be used to:
-
Enable shopping cart and checkout functionality
-
Remember user preferences
-
Analyse website traffic and performance
-
Improve security and prevent fraud
When you first visit the Website, you will be asked to manage your cookie preferences. Non-essential cookies will only be used with your consent.
You can control or delete cookies through your browser settings at any time.
Data Security
We take appropriate technical and organisational measures to protect your personal data, including:
-
SSL encryption for data transmission
-
Secure payment gateways
-
Restricted access to personal information
-
Regular system and security reviews
Despite these measures, no system is completely secure, and data transmission over the internet is at your own risk.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or regulatory obligations.
When data is no longer required, it is securely deleted or anonymised.
Your Rights
Under UK GDPR, you have the right to:
-
Access your personal data
-
Request correction of inaccurate or incomplete data
-
Request deletion of your personal data
-
Object to processing
-
Request restriction of processing
-
Request data portability
-
Withdraw consent at any time
To exercise any of these rights, please contact us.
Third-Party Links
Our Website may contain links to external websites. We are not responsible for the privacy practices or content of third-party sites and encourage you to review their privacy policies separately.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or business operations. The latest version will always be published on our Website.
Contact Us
If you have any questions about this Privacy & Cookie Policy or how we handle your data, please contact:
📧 Email: paulaxdavey@aol.com
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
https://ico.org.uk/make-a-complaint/