Welcome to www.vickypaul.com ("the Website"). Your privacy is important to us. This Privacy Policy explains what personal information we collect, how we use it, how we protect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.By using this Website, you agree to the practices described in this Privacy Policy.

1. Who We Are

This Website is owned and operated by Vicky Paul, a visual artist based in Edinburgh, Scotland. Website: www.vickypaul.com Email: hallo (at) vickypaul (dot) com. If you have any questions about this Privacy Policy or how your information is handled, please contact us using the details above.

2. Information We Collect

We may collect the following types of personal information:

Information you provide

When you: complete a contact form, enquire about artwork, commission a Soul Portrait, purchase artwork, register for workshops, subscribe to our newsletter

we may collect: your name, email address, telephone number (if provided), postal address (where required), payment information (processed securely by third-party payment providers), any information you include in your enquiry.

Information collected automatically

When you visit the Website we may automatically collect: IP address, browser type, device information, pages visited, time spent on pages, referring website, cookies and similar technologies. This information helps us understand how visitors use the Website and improve the user experience.

3. How We Use Your Information

We use your information to: respond to enquiries, process artwork purchases, fulfil commissions, arrange delivery of artwork, administer workshops and events, send newsletters where you have consented, improve the Website, comply with legal obligations, prevent fraud or misuse. We only process personal information where we have a lawful basis to do so.

4. Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases: your consent, performance of a contract, compliance with legal obligations, our legitimate interests in operating and improving the Website.

5. Newsletter

If you subscribe to our mailing list, your information will be stored securely by our email marketing provider. We currently use Flodesk to manage email communications. You may unsubscribe at any time by clicking the unsubscribe link in any email.

6. Payments

If you purchase artwork or services online, payment details are processed by secure third-party payment providers. We do not store or have access to your full payment card information.

7. Cookies

This Website uses cookies to improve your browsing experience. Cookies may be used to: remember your preferences, analyse website traffic, improve Website performance, understand visitor behaviour. You can control cookies through your browser settings. Where required by law, you will be asked for consent before non-essential cookies are placed on your device.

8. Analytics

We may use website analytics services such as Google Analytics or Squarespace Analytics to understand how visitors use the Website. Analytics data is aggregated and does not normally identify individual users.

9. Sharing Your Information

We do not sell your personal information. We may share your information with trusted service providers where necessary, including: website hosting providers, email marketing providers, payment processors, delivery and courier services, professional advisers where legally required. These providers only receive the information necessary to perform their services.

10. Data Security

We take appropriate technical and organisational measures to protect your personal information against: unauthorised access, accidental loss, misuse, alteration, disclosure. However, no method of internet transmission is completely secure.

11. How Long We Keep Your Data

We retain personal information only for as long as necessary to: fulfil the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, enforce agreements.

12. Your Rights

Under UK GDPR you have the right to: access your personal information, request correction of inaccurate information, request deletion of your data, restrict processing, object to processing, request transfer of your data, withdraw consent where processing relies on consent. To exercise any of these rights, please contact us using the email address above.

13. Third-Party Websites

This Website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.

14. Children's Privacy

This Website is not intended for children under the age of 13. We do not knowingly collect personal information from children.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page together with the updated effective date.

16. Contact

If you have any questions about this Privacy Policy or how your personal information is handled, please contact: Vicky Paul Email: hello (at) vickypaul (dot) com. Website: www.vickypaul.com

Your Right to Complain

If you are unhappy with how your personal information has been handled, you have the right to lodge a complaint with the UK's independent supervisory authority:

Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113