Last updated: 25 August 2026
1. Who we are
This website, www.jamesearleyartist.com (“we”, “us”, “our”), sells original paintings and signed limited edition prints by the artist James Earley.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller responsible for your personal data is:
- James Earley
- +44 (0)7 55 16 16 352
- Email: info@jamesearleyartist.com
If you have any questions about this policy or how we handle your personal data, please contact us using the details above.
2. What this policy covers
This policy explains what personal data we collect when you visit our website, place an order, or contact us; how we use it; who we share it with; how long we keep it; and the rights you have over it.
3. The personal data we collect
Depending on how you use our site, we may collect:
Information you give us when you place an order
- Name
- Billing and delivery address
- Email address
- Telephone number
- Order details (the artwork or prints you buy)
Payment information
- We do not store your full card details on our servers. Card payments are processed securely by Stripe, our payment provider. We receive confirmation of payment and limited details (such as the last four digits of your card and the payment status) needed to fulfil and account for your order. Stripe processes your payment data in accordance with its own privacy policy.
Information you give us when you contact us or sign up
- Name and email address when you use our contact form or subscribe to the newsletter
- Any information you choose to include in a message to us
Information collected automatically when you visit
- IP address, browser type and device information
- Pages visited, time spent, and how you arrived at the site
- Cookie and analytics data (see the Cookies section below)
4. How and why we use your personal data
We only use your personal data where the law allows us to. The table below sets out our purposes and the legal basis for each.
| Purpose | Legal basis (UK GDPR) |
|---|---|
| To process and deliver your order, including taking payment and arranging shipping | Performance of a contract |
| To contact you about your order or respond to your enquiries | Performance of a contract / Legitimate interests |
| To keep records for accounting and tax purposes | Legal obligation |
| To send marketing emails and our newsletter | Consent |
| To understand how visitors use our site and improve it (analytics) | Consent |
| To prevent fraud and keep our site secure | Legitimate interests |
You can withdraw your consent at any time (for example, by unsubscribing from marketing emails or changing your cookie preferences) without affecting the lawfulness of processing carried out before you withdrew it.
5. Marketing
If you have consented to receive our newsletter or marketing emails, we will use your name and email address to send you updates about new work, exhibitions and offers.
Our contact forms and newsletter are managed using HubSpot. Every marketing email includes an unsubscribe link, and you can opt out at any time. You can also contact us directly to be removed from our mailing list.
6. Cookies and analytics
Our website uses cookies and similar technologies to make the site work, to remember your preferences, and to measure how it is used.
We use Google Analytics (GA4) to collect statistics about visitors, and HubSpot to support our forms and understand engagement. Analytics and marketing cookies are only set where you have given consent through our cookie banner, managed by Complianz.
You can change or withdraw your cookie consent at any time via the cookie settings link on our site, or by adjusting your browser settings.
For full details of the specific cookies we use, please see our Cookie Policy
7. Who we share your personal data with
We share personal data only where necessary to run our business and provide our services. This may include:
- Stripe — to process payments securely
- Shipping and delivery partners — [e.g. Royal Mail, courier companies] to deliver your order
- HubSpot — to manage our contact forms and newsletter
- Our website hosting provider — to operate and maintain the site
- Google — for website analytics, where you have consented
- Professional advisers and authorities — such as our accountant, or regulators and law enforcement where we are legally required to disclose information
We do not sell your personal data to third parties.
8. International transfers
Some of our service providers — including Stripe, HubSpot and Google — are based outside the UK, including in the United States. Where your personal data is transferred outside the UK, we make sure it is protected by appropriate safeguards, such as the UK’s International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or transfers to countries the UK government has deemed adequate.
9. How long we keep your personal data
We keep your personal data only for as long as necessary:
- Order and transaction records: retained for 6 years to meet HMRC / tax and accounting requirements
- Marketing data: retained until you unsubscribe or withdraw consent
- Enquiries and contact form messages: retained for 2 years unless they relate to an order
- Analytics data: retained in line with our analytics provider’s settings
When we no longer need your data, we securely delete or anonymise it.
10. How we keep your personal data safe
We use appropriate technical and organisational measures to protect your personal data, including secure hosting, encrypted (SSL) connections, and restricting access to those who need it. While we take security seriously, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
11. Your rights
Under UK data protection law, you have the right to:
- Be informed about how your data is used (this policy)
- Access the personal data we hold about you
- Rectification of inaccurate or incomplete data
- Erasure of your data in certain circumstances
- Restrict our processing of your data in certain circumstances
- Object to processing based on legitimate interests or direct marketing
- Data portability — to receive your data in a portable format
- Withdraw consent at any time where we rely on consent
To exercise any of these rights, contact us at info@jamesearleyartist.com. We will respond within one week. There is no charge.
12. Complaints
If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it.
You also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office (ICO) Website: ico.org.uk Helpline: 0303 123 1113
13. Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with an updated “last updated” date.
This policy was last reviewed on [DATE].