Privacy Policy

Last updated: 18 April 2026

This Privacy Policy explains how Stephen Darling of stephendarlingart.com collects and uses your personal data. It complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions, please get in touch at info@stephendarlingart.com.

1. Information I Collect

When you buy artwork from this site, I collect your name, email address, billing and delivery address, and order details. Payments are handled securely by Squarespace's built-in payment system via Stripe or PayPal — I never see or store your card details.

If you sign up to my newsletter, I collect your name and email address. You can unsubscribe at any time using the link in any email I send you.

If you contact me via the website, I collect your name, email address, and the content of your message.

When you browse this site, anonymous data such as pages visited and time on site is collected via cookies. More detail on this is in the Cookies section below.

2. How I Use Your Information

I use your information only to process and fulfil your order, send you order updates, respond to any enquiries you send me, send you my newsletter if you've opted in, improve this website using anonymous analytics data, and maintain financial records as required by HMRC. I do not sell, rent, or share your personal data with any third parties for their own marketing purposes.

3. Legal Basis for Processing

Under UK GDPR, I process your data on the following grounds: fulfilment of contract (to process and deliver your order), legal obligation (HMRC requires me to retain financial records for 7 years), legitimate interests (responding to enquiries and improving this website), and consent (newsletter emails, which you can withdraw at any time).

4. Cookies

Squarespace places essential cookies on your device to keep the site functioning — including the shopping basket, checkout, and security features. These are strictly necessary and cannot be turned off.

Google Analytics cookies are also used to collect anonymous data about how visitors use this site. These are only placed with your consent via the cookie banner when you first visit. You can change your preferences at any time through your browser settings, or opt out of Google Analytics entirely at tools.google.com/dlpage/gaoptout.

This site complies with the Privacy and Electronic Communications Regulations 2003 (PECR).

5. How Long I Keep Your Data

Order records are kept for 7 years as required by HMRC. Newsletter subscriber data is kept until you unsubscribe. Correspondence is kept for up to 3 years from last contact. Website analytics data is retained for up to 26 months in anonymised form.

6. Third Parties

This site is hosted on Squarespace, who process data on my behalf under a data processing agreement. Payments are handled by Stripe and PayPal. Anonymous analytics are provided by Google Analytics. Each of these services operates under its own privacy policy — Squarespace at squarespace.com/privacy, Stripe at stripe.com/gb/privacy, PayPal at paypal.com/uk/webapps/mpp/ua/privacy-full, and Google at policies.google.com/privacy.

Some of these providers are based in the United States. Where data is transferred outside the UK, appropriate safeguards including Standard Contractual Clauses approved by the ICO are in place.

7. Your Rights

You have the right to access the personal data I hold about you, have inaccurate data corrected, request that your data be deleted, restrict or object to how it is processed, receive a copy of your data in a portable format, and withdraw consent at any time where processing is based on consent. To exercise any of these rights, email info@stephendarlingart.com and I will respond within one calendar month, free of charge.

8. Complaints

If you have a concern about how I've handled your data, please email info@stephendarlingart.com in the first instance. If you're not satisfied with my response, you can raise a complaint with the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

9. Changes to This Policy

I may update this policy from time to time. The date at the top of the page will always reflect the most recent version.