# Privacy Policy **Last updated: 10th August 2026 ## Who we are This website is operated by David Murray, trading as "Davide Fazzani" ("we", "us", "our"). We are the data controller responsible for your personal data under UK GDPR and the Data Protection Act 2018. Contact: iclapham2@gmail.com Address: W4 1TF ## What we collect - **Order information**: name, delivery address, billing address, email, order history — collected when you buy a print. - **Payment information**: handled directly by our payment processor (Squarespace Payments / Stripe / PayPal — delete as applicable). We do not see or store full card details. - **Contact form / enquiries**: name, email, and message content if you contact us. - **Newsletter sign-up** (if applicable): email address, only if you opt in. - **Website usage data**: via cookies — see our [Cookie Policy] for full detail. ## Why we use it (legal basis) - To fulfil and deliver your order — **necessary for the contract**. - To respond to enquiries — **necessary for the contract / legitimate interest**. - To send marketing emails — **only with your consent**, and you can withdraw it any time. - To understand site usage and prevent fraud — **legitimate interest**. ## Who we share it with - **Squarespace** (website host and commerce platform). - **Payment processor** (Squarespace Payments / Stripe / PayPal). - **Delivery/courier providers**, to fulfil your order. - **[Email marketing tool, if used — e.g. Squarespace Email Campaigns / Mailchimp]**. - **[Analytics tool, if used — e.g. Google Analytics]**. We do not sell your personal data. ## International transfers Squarespace is a US-based company, so some data processing takes place outside the UK/EEA. This is covered by Standard Contractual Clauses as part of Squarespace's own data processing agreement. ## How long we keep it - Order and transaction records: [e.g. 6 years, for UK tax/accounting purposes]. - Marketing list data: until you unsubscribe. - Enquiry messages: [e.g. 12 months], unless a longer period is needed. ## Your rights Under UK GDPR you have the right to: - Access the personal data we hold about you - Correct inaccurate data - Request deletion of your data - Restrict or object to processing - Data portability - Withdraw consent at any time (for marketing, cookies) - Complain to the [Information Commissioner's Office (ICO)](https://ico.org.uk) if you think we've mishandled your data To exercise any of these, contact us at [YOUR EMAIL ADDRESS]. ## Cookies See our separate [Cookie Policy] for details on what cookies we use and how to manage your preferences. ## Children This site is not directed at children and we do not knowingly collect data from anyone under 18. ## Changes to this policy We may update this policy from time to time. The "last updated" date at the top will always reflect the most recent version. ## Contact Questions about this policy: iclapham2@gmail.com