Privacy Policy

For any questions or requests regarding your data and privacy, please contact us using the details below. Joanna Espiner
43 Pooles Wharf Court, Bristol BS8 4PB, UK
Phone: 0044 (0)7817 540492
Email: joanna@joannaespiner.co.uk

What personal data we collect

Contact form

When you use the contact form on our website, we collect your name, email address and the content of your message. This information is used solely to respond to your enquiry.

Newsletter sign-up

If you subscribe to our newsletter, we collect your name (if provided) and your email address. This is managed through MailerLite, our email marketing platform. You can unsubscribe at any time using the link in any of our emails.

Purchases (artworks and workshop tickets)

When you make a purchase through our website, we collect:

  • Your name and email address
  • Billing and (where applicable) delivery address
  • Order details (items purchased, quantities and prices)
  • Payment information – processed securely by Stripe (we do not store card details ourselves)

Our e-commerce platform is WooCommerce, which stores your order data securely. Payment processing is handled by Stripe, a PCI-DSS compliant provider.

We will inform you at the time of collecting your data what it will be used for.

How we use your data

We use your personal data only for the purposes for which it was collected:

  • To respond to your enquiries
  • To process and fulfil your orders and bookings
  • To send you newsletters and updates (only if you have subscribed)
  • To comply with legal obligations, for example maintaining records for tax purposes

We will never sell your personal data or use it for purposes other than those described above.

If you are a potential client, we will only use your data in relation to a potential working relationship. If you do not become a client, any personally identifiable information we hold about you will be destroyed unless you explicitly consent to us retaining it.

The lawful basis for processing your information

Under UK GDPR we are required to identify the lawful basis on which we process your personal data. We process your information under the following bases:

Contract

When processing your purchase or workshop booking in order to fulfil our agreement with you.

Legitimate interests

When responding to a contact form enquiry.

Consent

When you subscribe to our newsletter or email list, we will ask for your consent to contact you using the details given. You have the right to withdraw this consent at any time by contacting us using the details above, or by using the unsubscribe link in any email we send you.

Third-party services

We use the following third-party services to operate our website. Each has their own privacy practices.

WooCommerce (Automattic)

WooCommerce is the e-commerce platform that powers our online shop. It stores order and customer data on our behalf. For more information, see Automattic’s Privacy Policy.

Stripe

Stripe processes all payments made on our website. We do not store your payment card details. For more information, see Stripe’s Privacy Policy.

MailerLite

MailerLite manages our newsletter subscription list and the delivery of email communications. Your email address and name (if provided) are stored on MailerLite’s servers. For more information, see MailerLite’s Privacy Policy.

Retention periods

We retain your personal data only for as long as necessary:

  • Order and billing data is retained for up to 7 years for tax and accounting purposes
  • Contact form enquiries are retained only as long as necessary to resolve your enquiry
  • Newsletter subscriber data is retained until you unsubscribe

We will check that your details are still correct if a significant period of time has passed since we last contacted you.

Your rights

Under UK GDPR you have the following rights regarding your personal data:

  • Access – you can request to see the information we hold about you.
  • Rectification – you can ask us to amend any data we hold that is inaccurate.
  • Erasure – you can request that we delete your data. In some circumstances this may not be possible if we are required to retain data to meet a legal obligation. We will notify you if this is the case.
  • Restriction – you can ask us to limit how we use your data. For example, if we are unable to delete data for tax purposes, you can ask us to retain it solely for that reason and not contact you for any other purpose.
  • Withdrawal of consent – you can change or withdraw any consent you have given about how your data is used.

To exercise any of these rights, please contact us using the details at the top of this page.

Complaints

If you have a complaint about how your data is being handled, you have the right to contact the Information Commissioner’s Office (ICO):