The data controller for personal data collected through www.isabelleweirart.com (the "Site") is Isabelle Weir, an artist trading as a sole trader, based in Somerset, United Kingdom (the "Controller", "we", "us"). To exercise the rights described in this notice, or for any question about how we process your personal data, please contact us via the contact form at www.isabelleweirart.com/contact-1, marking your message "Privacy"

This notice explains how we collect, use and protect the personal data of Site visitors, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and, for visitors accessing the Site from the European Union, Regulation (EU) 2016/679 (GDPR).

3.1 Data you provide to us
When you use the contact form or sign up to the newsletter, we collect the data you voluntarily provide, including:
• first and last name;
• email address;
• the content of any message sent via the contact form (e.g. enquiries about purchasing artwork, commissions, workshops or exhibitions).

3.2 Data collected automatically
Like most websites, the Site (hosted on the Squarespace platform) automatically collects certain technical data when you visit it, such as IP address, browser and device type, pages viewed, date and time of access, and browsing statistics, including via cookies and similar technologies.

For further details, please see our Cookie Policy.

We process your personal data for the following purposes:

• To respond to enquiries about information, artwork purchases or commissions submitted via the contact form ; legal basis: taking steps at your request prior to entering into a contract and/or our legitimate interest in managing communications with visitors (Article 6(1)(b) and (f) UK GDPR);

• To manage newsletter sign-up and delivery via Mailchimp (updates on exhibitions, studio sales, news from the studio); legal basis: your explicit consent (Article 6(1)(a) UK GDPR), which you may withdraw at any time;

• To manage any contractual relationship relating to the sale of artwork or commissions agreed outside the Site ; legal basis: performance of a contract;

• To keep the Site secure, functioning properly and to improve it using aggregated statistical data; legal basis: legitimate interest;

• To comply with legal obligations (e.g. tax or accounting obligations relating to completed sales) ;legal basis: legal obligation.

Our newsletter is provided using the Mailchimp platform, operated by The Rocket Science Group LLC (Intuit Mailchimp), based in the United States.
When you sign up to the newsletter by providing your first name, last name and email address, this data is transferred to and stored on Mailchimp's servers.
Mailchimp acts as a data processor on our behalf, under a Data Processing Addendum and appropriate safeguards for transfers of data outside the UK/EEA, such as the UK International Data Transfer Addendum and/or Standard Contractual Clauses.
Mailchimp may also process additional technical data (such as IP address and email open/click statistics) in accordance with its own privacy policy, available on the Mailchimp/Intuit website.
You may withdraw your consent and unsubscribe from the newsletter at any time by clicking the "unsubscribe" link at the bottom of any email you receive, without affecting the lawfulness of processing carried out before you withdraw your consent.

Specific durations vary by cookie and provider; for details on third-party cookies please refer to the relevant policies of Squarespace, Mailchimp and Instagram/Meta.

you submit through the Site's contact form is sent to us by email so that we can respond to your enquiry.
This data is kept for as long as necessary to handle your enquiry and any subsequent business relationship, and in any event no longer than is necessary or required by law.

Your personal data may be shared, to the extent necessary, with the following recipients, who act as processors or as independent controllers:
• Squarespace, Inc. the hosting platform provider for the Site, based in the United States;
• The Rocket Science Group LLC (Mailchimp/Intuit), our email marketing service provider, based in the United States;
• any additional service providers we engage (e.g. couriers for shipping purchased artwork, accountants), limited to what is necessary to provide those services;
• public authorities, where required by law. We do not sell or share your personal data with third parties for their own marketing purposes.

Some of the providers listed above (Squarespace, Mailchimp) are based in the United States.
Where your data is transferred outside the UK or the European Economic Area, we ensure this takes place on the basis of appropriate safeguards, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or other transfer mechanisms recognised as adequate under applicable law.

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected:

• contact form data: for the duration of handling your enquiry and, where a business relationship follows, for the period required by applicable contractual and tax obligations;
• newsletter sign-up data: until you withdraw consent/unsubscribe;
• data collected via cookies: for the periods set out in our Cookie Policy.

As a data subject, under the UK GDPR (and the EU GDPR, where applicable) you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data ("right to be forgotten"), in the circumstances provided by law;
• request restriction of processing;
• object to processing based on legitimate interest, including direct marketing;
• request portability of data provided on the basis of consent or a contract;
• withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• lodge a complaint with the relevant supervisory authority. For the United Kingdom, the supervisory authority is the Information Commissioner's Office (ICO) — www.ico.org.uk.

To exercise your rights, please contact us via the contact form on the Site.

We use appropriate technical and organisational measures, including through the service providers we use (Squarespace, Mailchimp), to protect personal data against unauthorised access, loss, destruction or improper disclosure. However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

The Site is not specifically directed at children under 16, and we do not knowingly collect personal data from children without the consent of a parent or guardian. If we become aware that we have collected data from a child without the necessary consent, we will delete it promptly.

The Site uses cookies and similar technologies. For more information, please see our separate Cookie Policy

We may update this notice from time to time to reflect changes in the law or in our data processing practices.
The updated version will be posted on this page with a revised "last updated" date.
We encourage you to review this page periodically.

If you have any questions, requests concerning your personal data, or complaints, please contact us via the contact form at www.isabelleweirart.com/contact-1.