Privacy policy

This Privacy Policy explains how artistryrackb.shop collects, uses, stores, shares and otherwise processes personal information when customers and visitors:

  • Visit our website;
  • Browse products;
  • Submit an order;
  • Make a payment;
  • Create or use an account;
  • Contact customer support;
  • Subscribe to communications; or
  • Otherwise interact with our online services.

Privacy enquiries may be sent to:

info@artistryrackb.shop

This policy is intended to reflect the principles of applicable United Kingdom data-protection and electronic-communications law.

The UK GDPR gives individuals a range of rights concerning personal data, including rights of access, rectification, erasure, restriction, portability and objection, subject to their respective legal conditions and exemptions.

Information We May Collect

Depending on your interaction with artistryrackb.shop, we may collect the following categories of information.

Identification and Contact Information

This may include:

  • Name;
  • Email address;
  • Telephone number;
  • Billing address;
  • Shipping address; and
  • Other contact information supplied by you.

Order Information

We may process:

  • Order number;
  • Products ordered;
  • Product variations;
  • Quantity;
  • Transaction value;
  • Order date;
  • Delivery information;
  • Cancellation information;
  • Return information;
  • Refund information; and
  • Customer-service history.

Payment and Transaction Information

Payments may be handled through Shopify Payments and/or other third-party payment providers.

Payment providers may collect and process full payment-card or banking information directly.

We may receive transaction-related information necessary to:

  • Confirm payment;
  • Manage an order;
  • Detect fraud;
  • Process refunds; and
  • Maintain accounting records.

Account Information

If customer-account functionality is available, we may process:

  • Account identifiers;
  • Login information;
  • Saved preferences;
  • Order history; and
  • Account settings.

Technical Information

When visitors interact with the website, certain technical information may be collected automatically.

This can include:

  • IP address;
  • Device type;
  • Browser type;
  • Operating system;
  • Approximate location derived from technical information;
  • Referring pages;
  • Pages viewed;
  • Session data;
  • Website interactions;
  • Cookie identifiers; and
  • Similar technical identifiers.

Communications

When you contact artistryrackb.shop, we may process:

  • Your email address;
  • Your message;
  • Order details;
  • Correspondence history; and
  • Information voluntarily provided in the communication.

How We Collect Personal Information

Information may be collected:

  • Directly from you;
  • Through checkout;
  • Through customer accounts;
  • Through contact forms;
  • Through emails;
  • Through cookies and similar technologies;
  • Through Shopify;
  • Through payment providers;
  • Through fulfilment providers;
  • Through delivery companies;
  • Through security or fraud-prevention providers; and
  • Through analytics and marketing services.

Purposes of Processing

We may use personal information to:

  • Process purchases;
  • Accept payments;
  • Confirm orders;
  • Fulfil orders;
  • Arrange shipping;
  • Provide tracking information;
  • Process cancellations;
  • Process returns;
  • Issue refunds;
  • Communicate with customers;
  • Provide customer support;
  • Prevent fraudulent transactions;
  • Maintain website security;
  • Administer customer accounts;
  • Maintain legal and accounting records;
  • Comply with applicable laws;
  • Improve our services;
  • Understand website usage;
  • Measure website performance;
  • Manage consent preferences;
  • Send marketing where legally permitted; and
  • Establish, exercise or defend legal claims.

Lawful Bases for Processing

Where a lawful basis is required under UK data-protection law, our processing may rely on one or more legally recognised grounds, depending on the circumstances.

These may include:

Contract

Processing may be necessary to perform a purchase contract or take steps requested before entering into one.

Examples include:

  • Processing an order;
  • Taking payment;
  • Arranging delivery;
  • Processing a return; and
  • Issuing a refund.

Legal Obligation

Processing may be necessary to comply with legal obligations such as:

  • Tax requirements;
  • Accounting requirements;
  • Regulatory obligations;
  • Consumer-protection requirements; and
  • Lawful requests from authorities.

Legitimate Interests

We may rely on legitimate interests where appropriate, including interests in:

  • Preventing fraud;
  • Protecting website security;
  • Maintaining appropriate business records;
  • Improving our services;
  • Protecting our legal rights; and
  • Understanding service performance.

Where required, those interests will be balanced against the rights and interests of the relevant individuals.

Consent

Where consent is the appropriate lawful basis, we may ask for consent before processing.

Where processing is based on consent, applicable law may allow you to withdraw that consent.

Cookies and Similar Technologies

artistryrackb.shop may use:

  • Cookies;
  • Pixels;
  • Tags;
  • Local-storage technologies;
  • Scripts; and
  • Similar storage or access technologies.

These technologies may be used for:

  • Essential website operation;
  • Shopping-cart functionality;
  • Checkout;
  • Fraud prevention;
  • Website security;
  • Preferences;
  • Analytics;
  • Performance measurement;
  • Advertising; and
  • Marketing.

The UK's Privacy and Electronic Communications framework regulates cookies and similar technologies, and ICO guidance explains that PECR applies to relevant technologies used to store information or access information on users' devices.

Where applicable law requires consent for a technology, we will seek appropriate consent before using it.

Shopify

Our ecommerce store may use Shopify technology.

Shopify may process information in connection with:

  • Store hosting;
  • Checkout;
  • Transactions;
  • Security;
  • Fraud prevention;
  • Customer accounts;
  • Analytics; and
  • Other ecommerce functionality.

Shopify provides merchants with customer-privacy tools and settings, including privacy-policy and cookie-related functionality, but merchants remain responsible for configuring their store appropriately for applicable requirements.

Payment Providers

Payment information may be processed by independent payment providers.

These providers may process information under their own legal obligations and privacy notices.

We do not necessarily receive or store complete payment-card details processed directly by those providers.

Fulfilment and Delivery Providers

We may share information with fulfilment, warehousing, postal, courier and logistics providers where reasonably necessary to fulfil customer orders.

This can include:

  • Name;
  • Delivery address;
  • Telephone number;
  • Email address;
  • Order reference; and
  • Delivery instructions.

Other Service Providers

We may use service providers for purposes including:

  • Hosting;
  • Ecommerce technology;
  • Payments;
  • Security;
  • Fraud prevention;
  • Shipping;
  • Analytics;
  • Marketing;
  • Customer support;
  • Accounting; and
  • Professional advice.

Personal information will be disclosed only where reasonably necessary for legitimate business or legal purposes.

Marketing Communications

Where legally permitted, we may send marketing communications about products, promotions or store news.

UK PECR rules restrict unsolicited electronic marketing and can require consent for marketing emails or texts to individuals, subject to applicable exceptions such as the statutory conditions for an existing-customer soft opt-in.

Recipients may unsubscribe through an unsubscribe option provided in the communication or by contacting:

info@artistryrackb.shop

Operational communications relating to orders, payments, security, shipping or refunds are not necessarily marketing communications.

Disclosure Required by Law

We may disclose personal information where reasonably necessary to:

  • Comply with legal obligations;
  • Respond to lawful government or court requests;
  • Prevent fraud;
  • Protect users;
  • Protect our systems;
  • Enforce legal rights; or
  • Establish, exercise or defend legal claims.

Business Transactions

If the business or relevant assets are reorganised, transferred, sold or combined with another organisation, personal information may be transferred as part of that transaction where legally permitted.

International Transfers

Some ecommerce, cloud, payment, analytics or fulfilment providers may process information outside the United Kingdom.

Where applicable data-protection law requires safeguards for an international transfer, we will use an appropriate lawful transfer mechanism.

Data Retention

Personal information will not intentionally be kept longer than reasonably necessary for the purposes for which it is processed.

Retention periods can depend on:

  • Contractual requirements;
  • Order administration;
  • Tax requirements;
  • Accounting obligations;
  • Fraud-prevention requirements;
  • Legal claims;
  • Statutory limitation periods; and
  • Applicable regulatory obligations.

Information Security

We take reasonable organisational and technical measures designed to protect personal information against:

  • Unauthorised access;
  • Accidental loss;
  • Improper alteration;
  • Unauthorised disclosure; and
  • Misuse.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Your Data-Protection Rights

Subject to applicable conditions, limitations and exemptions, UK data-protection law provides individuals with rights including:

  • The right to be informed;
  • The right of access;
  • The right to rectification;
  • The right to erasure;
  • The right to restriction of processing;
  • The right to data portability;
  • The right to object; and
  • Rights concerning certain automated decision-making.

The ICO identifies these as core individual rights under the UK GDPR framework.

Exercising Your Rights

To submit a privacy request, contact:

info@artistryrackb.shop

We may request reasonable information to verify your identity before disclosing or altering protected personal information.

Complaints

If you have a concern about the handling of your personal information, please contact:

info@artistryrackb.shop

Individuals may also have the right to make a complaint to the Information Commissioner's Office (ICO).

Children's Information

Our ecommerce services are intended to be used by individuals capable of entering into the relevant transactions.

We do not knowingly seek unnecessary personal information from children.

If you believe information relating to a child has been improperly provided, contact us.

Third-Party Links

artistryrackb.shop may contain links to websites operated independently by third parties.

We do not control the independent privacy practices of those websites.

Changes to This Privacy Policy

We may update this Privacy Policy when reasonably necessary because of changes to:

  • Our operations;
  • Ecommerce technology;
  • Service providers;
  • Privacy practices; or
  • Applicable laws.

The latest version will be published through artistryrackb.shop.

Contact

For privacy questions:

Email: info@artistryrackb.shop