Privacy Policy

Last updated: 24/09/2026

1. Who We Are

This website is operated by S999 Art, United Kingdom.

For the purposes of UK data protection law, S999 Art is the data controller responsible for your personal data.

If you have any questions about this policy or how we handle your data, you can contact us at:
studios999art@gmail.com

2. What Information We Collect

When you visit our website or place an order, we may collect:

Contact Details

Name, email address, billing and shipping address, and phone number.

Order Information

Purchased products, payment method, transaction details.

Technical Information

IP address, browser type, device information, and usage data collected through cookies and analytics tools.

Communication Data

Any information you provide when contacting us via email or forms.

3. Legal Basis for Processing

Under UK GDPR, we process your data on the following legal grounds:

Contractual necessity – to process and deliver your orders.
Legal obligation – to comply with tax, accounting, and legal requirements.
Legitimate interest – to improve our website, prevent fraud, and maintain security.
Consent – for non-essential cookies and analytics, where required.

4. How We Use Your Information

We use your data to:

Process and deliver orders.
Communicate about purchases, deliveries, or returns.
Provide customer support.
Prevent fraud and maintain website security.
Improve our services through analytics.

We do not sell or rent your personal data to third parties.

5. Sharing Your Information

We may share your data with trusted third parties only where necessary, including:

Payment providers (such as Stripe or PayPal).
Shipping and courier services.
IT and website service providers.
Legal or regulatory authorities where required by law.

All third-party providers are required to protect your data and process it lawfully.

6. International Data Transfers

Some of our service providers (such as Google, Stripe, PayPal, or social media platforms) may process data outside the United Kingdom.

Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

UK-approved Standard Contractual Clauses
Adequacy regulations
Other lawful transfer mechanisms under UK GDPR

7. Cookies and Analytics

Our website uses cookies to:

Ensure essential website functionality (e.g., shopping cart).
Analyse website traffic and performance.

We use Google Analytics (GA4) to collect anonymised usage statistics. Google may process data outside the UK.

You can manage or withdraw your cookie consent at any time via our cookie banner.

8. Data Retention

We retain personal data only as long as necessary:

Order and transaction records are kept for up to 6 years to comply with UK tax and accounting laws.
Communication data is kept as long as necessary to resolve enquiries.
Technical logs are retained only as needed for security and analytics purposes.
Cookie data is stored according to your consent preferences.

9. Your Rights

If you are based in the UK, EU, or another region with data protection laws, you have the right to:

Request access to your personal data.
Request correction of inaccurate information.
Request deletion of your data (where legally permitted).
Object to certain processing activities.
Withdraw consent at any time (where processing is based on consent).

To exercise these rights, contact:
studios999art@gmail.com

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the United Kingdom if you believe your data has been handled unlawfully.

10. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the updated revision date.