

privacy policy
Last updated: May 2026
This privacy policy explains how Paul Spiers Art ("I", "me", "my") collects, uses, and protects your personal data when you visit or make a purchase through this website. I am committed to handling your information responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who is responsible for your data?
The data controller is Paul Spiers, trading as Paul Spiers Art, based in the United Kingdom. You can contact me at: paulspiersart@hotmail.com.
2. What personal data I collect
When you place an order, I collect the following information:
-
Your name
-
Your email address
-
Your delivery address
-
Your telephone number (if provided)
-
Details of your order (items purchased, quantities, and value)
I do not store your payment card details. All payment transactions are processed securely by Wix Payments, the payment system integrated into this website. For information on how Wix handles payment data, please refer to the Wix Privacy Policy at www.wix.com/about/privacy
3. How I use your data
I use your personal information only to:
-
Process and fulfil your order
-
Arrange delivery of your purchase
-
Communicate with you about your order (including dispatch notifications and any queries)
-
Meet my legal obligations
I do not use your data for marketing purposes and will never sell or share your information with third parties for their own marketing use.
4. Legal basis for processing
I process your personal data on the legal basis of contract performance — that is, your data is necessary for me to fulfil the order you have placed with me. In some limited cases, I may also process data to comply with a legal obligation.
5. Who I share your data with
To fulfil your order, I will share relevant details (such as your name and delivery address) with the following:
-
Postal and courier services (e.g. Royal Mail, DPD, or an international carrier), solely to arrange delivery of your order
-
Wix, as the platform hosting this website and processing your payment
All third parties are required to handle your data securely and only for the purpose of fulfilling your order.
6. International data transfers
As I ship worldwide, your delivery address may be shared with international postal or courier services in order to complete your order. Where data is transferred outside the UK, I ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Wix, as my website and payment provider, may process data on servers located outside the UK. Wix is certified under relevant data transfer frameworks; details are available in their Privacy Policy.
7. How long I keep your data
I retain your order information for up to seven years to comply with HMRC record-keeping requirements. After this period, your data will be securely deleted. Communication records (such as emails) will be kept for as long as reasonably necessary and then deleted.
8. Your rights
Under UK GDPR, you have the right to:
-
Access the personal data I hold about you
-
Request correction of inaccurate data
-
Request deletion of your data (where it is no longer necessary for me to retain it)
-
Object to or restrict processing of your data
-
Request a copy of your data in a portable format
To exercise any of these rights, please contact me at paulspiersart@hotmail.com. I will respond within one month. If you are not satisfied with my response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.
9. Cookies
This website is built on Wix. Wix may use cookies and similar technologies to support the operation of the site. For full information on cookies used, please find more information here. You can manage your cookie preferences using the cookie banner displayed when you first visit the site.
10. Changes to this policy
I may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. I encourage you to review this policy periodically.