Privacy Policy

Sustainable Artist – Privacy Policy

Last updated: 29 March 2025

We value your trust and are committed to protecting your personal information. This Privacy Policy explains how Sustainable Artist collects, uses, and protects your data when you visit our website www.sustainableartist.co.uk, contact us, or engage with our services.

1. Who We Are

Sustainable Artist is the data controller responsible for your personal data.
Address: 148 The Rose Bowl, Portland Crescent, Leeds, England, LS1 3HB
Email:ola.david@sustainableartist.co.uk

If you have questions about this policy or your data, please contact us using the email above.

2. Scope of this Policy

This Privacy Policy applies to:

Your use of our website, social media pages, and online services.
Information you share with us directly (e.g., via email, forms, or events).
Information we receive from third parties (such as payment providers or social media platforms).

By using our website or providing your information, you agree to this policy.

3. Information We Collect

We collect information in three main ways:

A. Information You Provide to Us

Examples include:

Personal details: name, email address, postal address, phone number, date of birth, and gender.
Payment details: card information, billing address, and transaction history.
Account details: username, password, and preferences.
Communications: correspondence, survey responses, feedback, or social media messages.
User content: reviews, artwork submissions, or participation in events and promotions.

B. Information Collected Automatically

When you visit our website, we automatically collect:

Technical data: IP address, browser type, device information, access times, and referring URLs.
Usage data: pages viewed, clicks, time spent on site, and preferences.
Cookies and similar technologies: see Section 6 below.

C. Information from Third Parties

We may receive information from:

Social media platforms (e.g., Facebook, Instagram, Google) if you connect or log in through them.
Payment processors (e.g., Stripe, PayPal).
Marketing or analytics partners who help us understand usage patterns.

4. How We Use Your Information

We use your personal information for several key purposes, each of which has a lawful basis under the UK General Data Protection Regulation (UK GDPR). The specific reasons and examples are outlined below.

Account Registration and Management

We use your personal details, such as your name, email address, and contact information, to create and manage your account and to provide you with our services. This processing is necessary for the performance of a contract between you and Sustainable Artist.

Processing Orders and Payments

When you make a purchase or engage with our paid services, we process your payment details and order information to complete the transaction, deliver products or services, and handle any refunds or support requests. This processing is carried out to fulfil our contractual obligations and to comply with legal requirements related to payments and financial records.

Communication and Updates

We may use your contact information to send important communications, such as order confirmations, updates about your account, or responses to your enquiries. This processing is based on our legitimate interest in maintaining good customer relations and, where applicable, our contractual obligations to you.

Marketing and Promotions

If you have subscribed to our mailing list or otherwise shown interest in our offerings, we may send you promotional materials, newsletters, or updates about events, exhibitions, and new products. We will only do so with your consent or where we have a legitimate interest in promoting our services, and you can opt out at any time.

Personalization and Analytics

We analyse how users interact with our website and services to understand preferences and improve the overall user experience. This includes tailoring content and recommendations to better suit your interests. Such processing is based on our legitimate interest in enhancing and optimizing our website and services.

Security and Fraud Prevention

We process information to detect and prevent fraudulent activity, unauthorized access, and other security issues. This helps protect both our business and our users. The lawful basis for this processing is our legitimate interest in safeguarding our systems and compliance with legal obligations relating to security.

Compliance and Record Keeping

We retain and use personal information as necessary to comply with legal, tax, and regulatory obligations. This includes maintaining accurate records for auditing and accountability purposes. This processing is required by law.

Research and Statistical Analysis

We may anonymize or aggregate personal data so that it no longer identifies any individual. Such anonymized information may be used for statistical analysis, business planning, or research purposes in compliance with applicable laws.

5. Sharing Your Information

We only share your personal data with trusted third parties where necessary to provide our services or comply with the law. These include:

Service providers (payment processors, hosting companies, email providers).
Professional advisors (accountants, auditors, legal representatives).
Government bodies or regulators, if required by law.
Social media or advertising platforms, where you have consented to marketing.

All third parties are required to process your data securely and only for the purposes instructed by us.

We do not sell your personal information.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

Enable essential website functionality.
Understand visitor behaviour and preferences.
Improve content and advertising relevance.

You can control or delete cookies through your browser settings. For more information, please see our Cookie Policy.

7. Data Retention

We keep your data only for as long as necessary to fulfil the purposes described in this policy, including legal, accounting, or reporting requirements.

When your data is no longer needed, we securely delete or anonymize it.

8. International Data Transfers

If your data is transferred outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent protections.

9. Your Data Protection Rights

Under the UK GDPR, you have the following rights:

Access – Request a copy of your personal data.
Rectification – Request correction of inaccurate data.
Erasure – Request deletion of your data (“right to be forgotten”).
Restriction – Request limitation on processing.
Objection – Object to processing, including direct marketing.
Data portability – Request transfer of your data to another service.
Withdraw consent – Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at ola.david@sustainableartist.co.uk.

We will respond within one month as required by law.

10. Data Security

We use appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. These include encryption, firewalls, and secure storage systems.

11. Children’s Privacy

Our services are not directed to individuals under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us to delete it.

12. Updates to This Policy

We may update this Privacy Policy occasionally. Updates will be posted on this page with a revised “Last Updated” date. We encourage you to review it periodically.

13. Complaints

If you have concerns about our data handling, please contact us first at ola.david@sustainableartist.co.uk.
If you are not satisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.