Privacy Policy

Last updated: January 2026

This Privacy Policy explains how your personal data is collected, used, and protected when you visit or make a purchase from this website.

1. Who We Are

This website is operated by Nick Cronin Art, a sole trader based in the United Kingdom.

Contact email: nick@nickcronion.art

For the purposes of data protection law, we are the data controller responsible for your personal data.

2. What Personal Data We Collect

We may collect and process the following information:

a) Information You Provide

• Name
• Billing and delivery address
• Email address
• Phone number (if provided)
• Payment details (processed securely by third-party payment providers, not stored by us)

b) Automatically Collected Information

• IP address
• Browser type and version
• Pages visited and time spent on the site
• Cookies and similar technologies

3. How We Use Your Data

We use your personal data to:

• Process and fulfil orders
• Communicate with you about your order
• Provide customer support
• Comply with legal and accounting obligations
• Improve our website and services
• Send marketing emails only if you have opted in

We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following lawful bases:

• Contract: to fulfil your order and deliver products
• Legal obligation: for tax, accounting, and consumer law compliance
• Legitimate interests: to operate and improve our business and website
• Consent: for marketing communications and optional cookies

You may withdraw consent at any time.

5. Sharing Your Data

We only share your data where necessary, including with:

• Payment processors (e.g. Stripe, PayPal, Square)
• Delivery and courier services
• Website hosting and e-commerce platforms
• Professional advisers (accountants or legal advisers, if required)

All third parties are required to handle your data lawfully and securely.

We do not sell your personal data.

6. International Transfers

If you are based outside the UK, or if our service providers are located outside the UK, your data may be transferred internationally.

Where this occurs, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations
• Standard contractual clauses where required

7. Data Retention

We keep your personal data only for as long as necessary:

• Order and accounting records are retained for 6 years to meet legal requirements
• Customer communications are retained for as long as needed to resolve enquiries
• Marketing data is retained until you unsubscribe

8. Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure of your data (where applicable)
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO website: https://ico.org.uk

To exercise your rights, contact us at the email address above.

9. Cookies

This website uses cookies to:

• Enable core website functionality
• Analyse website traffic
• Improve user experience

You can control cookies through your browser settings. Where required, consent will be requested before non-essential cookies are used.

A separate Cookie Policy may apply.

10. Data Security

We take reasonable technical and organisational measures to protect your personal data, including:

• Secure hosting
• Encrypted payment processing
• Limited access to personal information

No system is perfectly secure, but we take protection seriously.

11. Children’s Data

This website is not intended for children under 18, and we do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.