PRIVACY POLICY

Last updated: May 2026

 

1. Introduction

ARTARIA is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and share your personal data when you visit our website at www.iamartaria.co.uk, create an account, place an order, or otherwise interact with us.

This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we process personal data of individuals located in the European Economic Area (EEA), we also comply with the EU General Data Protection Regulation (EU GDPR).

Please read this policy carefully. By using our website, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

ARTARIA

71 Shelton Street, London WC2H 9JQ

Email: cs@iamartaria.co.uk

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

3. What Personal Data We Collect

3.1 Information You Provide Directly

When you interact with us, you may provide the following personal data:

• Account information: your name, email address and account password when you create an account

• Order information: your name, email address, delivery address and phone number when you place an order

• Payment information: your payment card details, which are processed securely by our payment processor and are not stored by ARTARIA directly

• Communications: your name, email address and the content of any messages you send us via email or our website contact form

• Newsletter subscription: your email address if you subscribe to our mailing list

• ​

3.2 Information Collected Automatically

When you visit our website, certain information is collected automatically by our website platform:

• Technical data: your IP address, browser type and version, operating system, and device type

• Usage data: pages you visit, time spent on pages, links you click, and how you navigate through the website

• Location data: your approximate location based on your IP address

This data is collected by our website platform (Wix) as part of its standard functionality. We do not currently use any additional third-party analytics or advertising tracking tools.

3.3 Cookies

Our website uses cookies — small text files placed on your device — to enable essential website functionality, remember your preferences, and understand how the website is used. Our website platform sets certain cookies automatically as part of its operation.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website. For detailed information on the cookies we use, please refer to the cookie consent banner displayed when you first visit our website.

4. How We Use Your Personal Data

We use your personal data for the following purposes:

Purpose

Lawful Basis

To process and fulfil your orders, including production, shipping and delivery

Performance of a contract with you

To create and manage your account

Performance of a contract with you

To communicate with you about your orders, including dispatch notifications and delivery updates

Performance of a contract with you

To handle returns, refunds and defect claims

Performance of a contract with you

To respond to your enquiries and provide customer support

Legitimate interest in providing good customer service

To send you marketing communications about ARTARIA products, where you have consented to receive them

Your consent

To improve our website, products and services

Legitimate interest in improving our business

To detect, prevent and address fraud or security issues

Legitimate interest in protecting our business and customers

To comply with legal obligations, including tax and accounting requirements

Legal obligation

Where we rely on legitimate interest as a lawful basis, we have assessed that our interests are not overridden by your rights and freedoms. You have the right to object to processing based on legitimate interest at any time — see Section 8 for details.

5. Who We Share Your Personal Data With

We do not sell your personal data to any third party. We share your personal data only where necessary and only with the following categories of recipients:

Recipient

Purpose

Website platform (Wix)

Hosting, website operation, payment processing, order management and built-in analytics

Fulfilment provider (print-on-demand)

Production and shipping of your order. Your name, delivery address and order details are shared with our fulfilment provider so they can produce and dispatch your products.

Payment processor

Secure processing of your payment. Payment card details are handled directly by the payment processor and are not stored by ARTARIA.

Legal and regulatory authorities

Where required by law, regulation, legal process or enforceable governmental request

If we activate additional marketing tools in the future — such as email marketing platforms, social media advertising, or analytics services — this policy will be updated to reflect those changes before any data is shared with new third parties.

6. International Transfers of Personal Data

Your personal data may be transferred to, and processed in, countries outside the United Kingdom and the European Economic Area. This occurs because:

• Our website platform (Wix) operates infrastructure in multiple countries

• Our fulfilment provider produces and ships orders from locations that may include the United States and other countries

Where personal data is transferred outside the UK or EEA, we ensure that appropriate safeguards are in place in accordance with UK GDPR and EU GDPR requirements. These safeguards may include the use of standard contractual clauses approved by the UK Information Commissioner’s Office or the European Commission, or transfers to countries that have been assessed as providing an adequate level of data protection.

7. How Long We Keep Your Personal Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply:

• Order and transaction records: 6 years from the date of the transaction, as required for tax and accounting purposes under UK law

• Account information: retained for as long as your account is active. If you request deletion of your account, we will delete your personal data within 30 days, except where retention is required by law

• Customer service communications: 2 years from the date of the last communication, unless a longer period is required for the resolution of a complaint or dispute

• Marketing preferences: retained until you withdraw your consent or unsubscribe

After the applicable retention period, personal data is securely deleted or anonymised.

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you

• Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data

• Right to erasure: You have the right to request that we delete your personal data, subject to certain legal exceptions

• Right to restrict processing: You have the right to request that we restrict the processing of your personal data in certain circumstances

• Right to data portability: You have the right to receive your personal data in a structured, commonly used and machine-readable format

• Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interest as our lawful basis

• Right to withdraw consent: Where we process your data based on your consent, you have the right to withdraw that consent at any time

To exercise any of these rights, please contact us at cs@iamartaria.co.uk. We will respond to your request within one month. In certain circumstances, we may extend this period by a further two months, in which case we will inform you of the extension and the reasons for it.

We may ask you to verify your identity before processing your request.

9. Right to Complain

If you are not satisfied with how we handle your personal data or respond to your request, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection:

Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Website: www.ico.org.uk

Telephone: 0303 123 1113

If you are located in the European Economic Area, you may also lodge a complaint with the supervisory authority in your country of residence.

10. Children’s Privacy

Our website is not directed at children under the age of 18. We do not knowingly collect personal data from children under 18. If you become aware that a child has provided us with personal data, please contact us at cs@iamartaria.co.uk and we will take steps to delete such information.

11. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include the use of secure hosting, encrypted connections (SSL/TLS), and access controls.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

12. Third-Party Links

Our website may contain links to third-party websites, including social media platforms. We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policies of any third-party website you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. The date of the most recent update is shown at the top of this policy. We encourage you to review this policy periodically.

Where we make material changes to how we use your personal data, we will notify you by posting a prominent notice on our website or, where appropriate, by contacting you directly.

14. US Customers — Future Provisions

ARTARIA does not currently ship to the United States. When US shipping is activated, this section will be expanded to include provisions relating to applicable US state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). Until that time, the UK GDPR framework set out in this policy governs all data processing activities.

15. Contact

If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us:

Customer service enquiries: cs@iamartaria.co.uk

Technical enquiries: support@iamartaria.co.uk

Registered address: 71 Shelton Street, London WC2H 9JQ

I AM ARTARIA.