Legal
Privacy Policy
Last updated: October 2026
We collect the minimum information needed to deliver your art — and nothing more. Here is exactly what we store, why, and how it is protected.
1. What We Collect
- Order information: name, phone number, optional email, delivery address and order notes — required to produce and deliver your order.
- Account information (optional): name, email, phone and a securely hashed password, only if you create an account.
- Custom art uploads: files you deliberately submit for a quotation.
- Technical data: anonymised IP-based rate-limiting counters and, if enabled, privacy-conscious analytics. No advertising trackers.
We do not collect or store card details — online card payments are not processed at all.
2. How Your Data Is Used
Order data is used to confirm production, deliver parcels, notify you about status changes, and provide support. Email addresses may receive order updates and, only if you opt in, our newsletter — every newsletter includes a one-click unsubscribe. We do not sell, rent or trade personal information with third parties. Delivery partners receive only the details required to hand over your parcel (name, address, phone).
3. How It Is Protected
Passwords are stored as salted scrypt hashes and are never visible to our staff. Administrative access is restricted to authorised team members behind authentication and audit logging. Order tracking pages require both the order number and the matching phone or email, so no one can look up your order by number alone. All traffic is served over HTTPS in production.
4. Data Retention
Order records are retained for accounting and warranty purposes. Custom artwork uploads are deleted after the commission concludes unless you ask us to keep them. You may request deletion of your account or data at any time via our contact page — we will comply within 30 days, except where the law requires retention (e.g. tax records).
5. Cookies
We use a small number of strictly necessary cookies: a session cookie that keeps you signed in, a cart cookie that preserves your basket between visits, and a wishlist entry in your browser's local storage. No third-party advertising cookies are set.
6. Contact
Questions about this policy or your data? Reach us at our contact page — a real person will answer.