Privacy Policy

Who we are

Gregory Day Fine Art Prints ("we", "us"). Contact: via the enquiries form.

What data we collect

• Order data: Name, email, billing and delivery address, order details. Required to process and fulfil your purchase.
• Email list: Email address only, if you sign up voluntarily. You can unsubscribe at any time.
• Analytics: Anonymous usage data (pages visited, device type) via Google Analytics 4 — only with your consent.
• Enquiries: Name and email from the contact form, retained only until the enquiry is resolved.

How we use it

• Fulfil and ship your order
• Send order confirmation and shipping updates
• Respond to enquiries
• Send occasional emails about new work (only if you opted in)
• Improve the website (analytics, consent required)

Payment security

Payments are processed by Stripe via Snipcart. We never see or store your card details. Stripe is PCI DSS Level 1 compliant.

Third parties

• Snipcart — cart and checkout
• Stripe — payment processing
• Netlify — website hosting and form handling
• Kit (ConvertKit) — email list (only if you subscribed)
• Google Analytics 4 — analytics (consent required)
• Royal Mail / courier — delivery (name and address shared for shipping only)

Data retention

• Order records: 7 years (UK tax law requirement)
• Email list: until you unsubscribe
• Enquiries: 90 days after resolution
• Analytics: 14 months (GA4 default)

Your rights (UK GDPR)

• Access your data
• Correct inaccurate data
• Request deletion ("right to be forgotten")
• Object to processing
• Data portability

To exercise any right, contact us. We will respond within 30 days.

Cookies

We use essential cookies (cart functionality) and optional analytics cookies (GA4). You can manage preferences via the cookie banner or your browser settings.

Complaints

If you have concerns about how we handle your data, you can contact the ICO (Information Commissioner's Office).