Privacy policy

Privacy Policy for Shaded art

Last Updated: April 23, 2025

1. Introduction

Shaded art ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, and disclose your personal data when you visit our website [www.shadedart.com] (the "Website") or interact with us in other ways, such as when you place an order.  

2. Who We Are

Shaded art is a business located in Devon, England, specialising in DIY pointillism art kits.

3. What Personal Data We Collect

We may collect and process the following types of personal data about you:

  • Identity Data: Includes your name, username or similar identifier, title.  

  • Contact Data: Includes your billing address, delivery address, email address, and telephone number.

  • Financial Data: Includes your payment card details (processed securely by our payment processors; we do not directly store your full card details).

  • Transaction Data: Includes details about payments to and from you and other details of products and services you have purchased from us.  

  • Technical Data: Includes your internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our Website.  

  • Usage Data: Includes information about how you use our Website, products, and services.

  • Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences.  

4. How We Collect Your Personal Data

We collect your personal data in various ways, including:

  • Direct Interactions: You may provide us with your Identity, Contact, and Financial Data when you place an order, create an account on our Website, subscribe to our newsletter, contact us via email or phone, or provide feedback.

  • Automated Technologies or Interactions: As you interact with our Website, we may automatically collect Technical and Usage Data through cookies, server logs, and other similar technologies. Please see our Cookie Policy [Link to your Cookie Policy if you have one] for more details.  

  • Third Parties: We may receive personal data about you from third parties, such as payment processors.

5. How We Use Your Personal Data

We may use your personal data for the following purposes:

  • To process and fulfil your orders, including managing payments, delivering your purchases, and communicating with you about your order.

  • To manage your account on our Website.

  • To provide you with customer support and respond to your enquiries.

  • To send you marketing communications (where you have opted in or where we have a legitimate interest to do so), such as newsletters about new products and promotions.

  • To improve our Website, products, and services.

  • To administer and protect our business and Website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data).

  • To comply with legal and regulatory obligations.  

6. Legal Basis for Processing Your Personal Data

We will only process your personal data when we have a lawful basis for doing so. These bases may include:

  • Performance of a contract: This applies when we need to process your data to fulfil our contractual obligations to you, such as processing your order and delivering your art kits.

  • Legitimate interests: This applies when we have a legitimate business interest in processing your data, provided that your interests and fundamental rights do not override those interests. For example, we have a legitimate interest in improving our products and services and in sending you relevant marketing communications.

  • Consent: We will rely on your consent to send you direct marketing communications via email. You have the right to withdraw your consent at any time.

  • Compliance with a legal obligation: This applies when we need to process your data to comply with a legal or regulatory obligation.

7. How We Share Your Personal Data

We may share your personal data with the following categories of recipients:

  • Service providers: Third-party service providers who provide services on our behalf, such as payment processing, website hosting, delivery services, email marketing providers, and analytics providers. These providers are contractually obligated to protect your data.

  • Professional advisors: Such as lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.  

  • Legal and regulatory authorities: If required by law or legal process, we may disclose your personal data to government agencies or other authorities.

8. International Transfers

We may transfer your personal data to service providers located outside the UK or the European Economic Area (EEA). Where we do so, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws. These safeguards may include using standard contractual clauses approved by the relevant authorities.  

9. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, use, alteration, or disclosure. These measures include encryption, secure servers, and access controls. However, please note that no method of transmission over the internet or method of electronic storage is completely secure.  

10. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.  

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.  

11. Your Legal Rights

Under data protection laws, you have certain rights regarding your personal data, including:

  • The right to access: You have the right to request access to the personal data we hold about you.

  • The right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.  

  • The right to erasure: You have the right to request that we delete your personal data in certain circumstances.  

  • The right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.  

  • The right to data portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to transmit that data to another controller.  

  • The right to object: You have the right to object to the processing of your personal data in certain circumstances, including for direct marketing purposes.  

  • The right to withdraw consent: If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time.  

  • The right to lodge a complaint: You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).  

To exercise any of these rights, please contact us using the contact details provided below.

12. Third-Party Links

Our Website may contain links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy policy of every website you visit.  

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will post any changes on this page and, where appropriate, notify you by email. Please check this page regularly to stay informed of any updates.  

14. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us on our contact page.