Privacy policy

Privacy Policy

Art by Joanne Spencer
Last updated: 18 August 2026

This Privacy Policy explains how Joanne Spencer, trading as Art by Joanne Spencer (“I”, “me”, “my” or “Art by Joanne Spencer”) collects, uses and protects your personal information when you visit www.artbyjoannespencer.com, make a purchase, join my mailing list, contact me, or otherwise interact with my website and services.

For the purposes of UK data protection law, Joanne Spencer trading as Art by Joanne Spencer is the Data Controller.

Business address:
23 Macie Drive
Corsham
Wiltshire
SN13 9EJ
United Kingdom

Email: Joanne@artbyjoannespencer.com

1. Information I May Collect

Depending on how you use my website, I may collect personal information including:

Your name
Email address
Telephone number
Billing and delivery address
Details relating to an order or enquiry
Information you provide when contacting me
Marketing preferences
Website usage and technical information, such as your IP address, browser type, device type and pages visited

When you make a payment, your payment information is processed securely by the relevant payment provider. I do not directly store your full payment card details.

2. How I Use Your Personal Information

I may use your personal information to:

Process and fulfil purchases of artwork
Arrange delivery of your order
Communicate with you about an order or enquiry
Provide customer service
Maintain appropriate business and financial records
Send newsletters or marketing communications where you have consented to receive them
Improve my website and understand how visitors use it
Protect my website and business against fraud or misuse
Meet my legal, accounting and tax obligations

I will only use your personal information where I have a lawful basis for doing so.

3. Legal Basis for Processing

Under UK GDPR, I may process your personal information on one or more of the following grounds:

Contract — where processing is necessary to fulfil an order or provide a service you have requested.

Consent — for example, where you have chosen to subscribe to marketing communications.

Legal obligation — where I need to retain or process information to comply with legal, tax or accounting requirements.

Legitimate interests — where processing is reasonably necessary for the operation, security or improvement of my business and those interests do not override your rights.

You may withdraw your consent to marketing at any time.

4. Payments

Payments made through my website may be processed by:

Stripe
PayPal
Shopify Payments

These providers process your payment information in accordance with their own privacy policies and security procedures.

Art by Joanne Spencer does not store or have direct access to your complete payment card details.

5. Orders and Shopify

My website and/or online shop may use Shopify to provide ecommerce functionality, including processing orders and facilitating payments.

When you place an order, information necessary to complete that transaction may therefore be processed by Shopify and relevant payment, delivery and technology providers.

These third parties process information in accordance with their own privacy policies and applicable data protection legislation.

6. Email Marketing

If you choose to join my mailing list, I use MailerLite to manage and send my email newsletters and marketing communications.

When you subscribe, information such as your name, email address, subscription preferences and information relating to your interaction with my emails may be processed by MailerLite on my behalf.

I may use these communications to share news about my artwork, new collections, exhibitions, available work, studio news and occasional offers.

I will only send marketing communications where I have an appropriate lawful basis to do so, including where you have given your consent.

You can unsubscribe at any time by clicking the unsubscribe link included in any marketing email or by contacting me at Joanne@artbyjoannespencer.com.

Unsubscribing from marketing will not prevent me from contacting you where necessary about an order you have placed or an enquiry you have made.

7. Cookies and Website Analytics

My website may use cookies and similar technologies to help it function correctly, remember preferences, understand how visitors use the website and improve the browsing experience.

Some cookies are necessary for the operation of the website. Other cookies, such as analytics or marketing cookies, may require your consent.

Where required, you will be given the opportunity to manage your cookie preferences through the website.

You can also control or delete cookies through your browser settings, although disabling necessary cookies may affect how some parts of the website function.

8. Sharing Your Information

I do not sell your personal information.

I may share information with trusted third parties where this is necessary to operate my business, such as:

Website and ecommerce providers
Payment processors
Email marketing providers
Delivery and postal services
IT, hosting and website service providers
Professional advisers such as accountants
Government, regulatory or law-enforcement authorities where legally required

Only information reasonably necessary for the relevant service will be shared.

9. International Data Transfers

Some of the service providers used by Art by Joanne Spencer may process or store information outside the United Kingdom.

Where personal information is transferred internationally, I will rely on appropriate safeguards or other lawful mechanisms required under UK data protection legislation.

10. How Long I Keep Your Information

I will retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet any legal, tax, accounting or reporting requirements.

Different types of information may therefore be retained for different periods.

11. Security

I take reasonable steps to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

12. Your Data Protection Rights

Depending on the circumstances, UK data protection law gives you rights including the right to:

Request access to the personal information I hold about you
Ask me to correct inaccurate or incomplete information
Request deletion of your personal information in certain circumstances
Ask me to restrict the processing of your information
Object to certain types of processing
Request transfer of your information where applicable
Withdraw consent where processing is based on consent

To exercise any of these rights, please contact:

Joanne Spencer
Art by Joanne Spencer
Joanne@artbyjoannespencer.com

I may need to verify your identity before responding to a request.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO) if you are concerned about how your personal information has been handled.

13. Third-Party Websites

My website may contain links to other websites, galleries, social media platforms or services that I do not operate.

I am not responsible for the privacy practices of those third-party websites. I recommend reviewing their privacy policies when visiting them.

14. Children's Privacy

My website and services are not specifically directed at children, and I do not knowingly collect personal information from children where parental or guardian consent would be legally required.