Privacy Policy

Last Updated: 1 August 2026

1. Introduction

Welcome to Artboxfromelena ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, purchase physical artwork, or subscribe to our newsletter, in accordance with the UK GDPR and the UK Data Protection Act 2018.

Our website is hosted on the Squarespace platform.

2. Data Controller

For data protection laws, the data controller responsible for your personal data is:

3. The Data We Collect

We collect and process various types of personal data depending on how you interact with our website:

  • Identity Data: First name and last name when making a purchase or filling out forms.

  • Contact Data: Billing address, delivery address, email address, and phone number.

  • Transaction Data: Details about products you have purchased from us, order history, and fulfilment updates.

  • Technical Data: IP address, browser type, operating system, and device details collected automatically by Squarespace.

  • Usage Data: Information about how you navigate and interact with our website.

  • Marketing Data: Your preferences in receiving our newsletter updates and communications.

Note: We do not collect or store your financial card details. All payments are handled directly by secure third-party processors.

4. How and Why, We Use Your Data (Legal Basis)

Under data protection laws, we must have a lawful basis to process your personal data. We use your data for the following reasons:

1. Performance of a Contract

  • To process, pack, ship, and deliver your physical artwork purchases.

  • To manage your order updates, confirmations, and customer support queries.

2. Legal Obligations

  • To maintain accurate financial, accounting, and tax records for UK authorities (HMRC).

3. For Our Legitimate Interests

  • To maintain the technical security, stability, and operational efficiency of our website.

  • To analyse general user traffic trends to improve our products and store layout.

4. Based on Your Explicit Consent

  • To send you email updates, newsletters, and marketing materials if you use our mailing list sign-up box. You can withdraw your consent and unsubscribe at any time using the link at the bottom of any email.

  • To place non-essential analytics or tracking cookies on your device.

5. Data Retention

We only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including any legal, accounting, or tax reporting requirements.

  • Order & Transaction Records: Typically retained for up to 6 years following a purchase to comply with UK tax laws.

  • Mailing List Data: Retained until you opt out or request deletion of your email address.

6. Sharing Your Personal Data

We do not sell your personal data. To run our online shop and deliver your artwork, we share relevant details with trusted third-party service providers:

  • Squarespace: Our website and e-commerce platform provider.

  • Payment Gateways: Stripe and PayPal. They process your financial data securely. They act as independent data controllers for your payment security.

  • Shipping & Courier Services: Third-party postal services (e.g., Royal Mail, DHL) to deliver physical items to your address.

  • Email Marketing Services: Our integrated mailing list tool (e.g., Squarespace Email Campaigns, Mailchimp) to manage newsletter deliveries.

7. International Data Transfers

Because our website is hosted by Squarespace, Inc. (based in the United States), your data is transferred outside the UK. Squarespace safeguards this transfer using Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO) to ensure your data receives an equivalent level of protection.

Our payment processors (Stripe and PayPal) also utilize similar legally binding mechanisms for cross-border transactions.

8. Data Security

We and our hosting platform use appropriate technical, administrative, and physical security measures (including SSL encryption) to protect your personal data from unauthorized access, accidental loss, alteration, or disclosure.

9. Your GDPR Rights

As a UK resident, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.

  • Right to Rectification: Ask us to correct inaccurate or incomplete data.

  • Right to Erasure: Request that we delete your personal data (subject to legal retention requirements, such as tax records).

  • Right to Object or Restrict: Object to or restrict how we process your data.

  • Right to Data Portability: Request a structured transfer of your personal data.

  • Right to Withdraw Consent: Cancel your email newsletter subscription instantly by clicking "Unsubscribe".

To exercise any of these rights, please contact us at info@artboxfromelena.co.uk.

10. Cookies

Our website uses cookies to function reliably and securely, track shopping cart contents during checkout, and monitor site performance. Squarespace places essential operational cookies automatically. Non-essential tracking, marketing, or analytics cookies will only load if you explicitly accept them on our cookie banner.

11. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK supervisory authority: