Privacy Policy

Last updated: [09/06/2026]

1. Introduction

Welcome to H.OReilly.Art (“we”, “our”, “us”).

We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy explains how we collect, use, and protect your data when you visit our website hosted on Squarespace, purchase artwork, or interact with us.

2. Information We Collect

We may collect the following types of personal data:

Personal Information

  • Name

  • Email address

  • Billing and shipping address

  • Phone number (if provided)

Payment Information

Payments are processed securely by third-party providers. We do not store your full payment details.

Payment providers we use:

  • PayPal

  • Stripe (including card payments and Google Pay)

Technical & Usage Data

  • IP address

  • Browser type and device information

  • Pages visited and time spent on site

  • Referral sources

This data may be collected via Squarespace analytics and Google Analytics.

Communication Data

  • Messages sent via contact forms

  • Emails or commission enquiries

Marketing Data

  • Email address and preferences (if you opt into our mailing list)

3. How We Use Your Information

We use your data to:

  • Process and deliver orders

  • Manage commissions and enquiries

  • Communicate with you about your order

  • Send marketing emails (only if you opt in)

  • Improve website performance and user experience

  • Meet legal and financial obligations

4. Legal Basis for Processing

We process your data under the following lawful bases:

  • Contract – to fulfil purchases and commissions

  • Consent – for email marketing and non-essential cookies

  • Legitimate Interests – to improve services and prevent fraud

  • Legal Obligation – for accounting and tax records

5. Sharing Your Data

We do not sell your personal data.

We may share your data with trusted third parties, including:

  • Squarespace (website hosting and analytics)

  • Stripe (card payments and Google Pay processing)

  • PayPal (payment processing)

  • Shipping providers (e.g. Royal Mail or couriers)

  • Email marketing provider (if you use one, e.g. Mailchimp)

These providers only process your data as necessary and are required to keep it secure.

6. International Data Transfers

Some of our third-party providers (such as Squarespace, Stripe, PayPal, and Google Analytics) may transfer data outside the UK.

Where this occurs, appropriate safeguards (such as Standard Contractual Clauses) are used to protect your data.

7. Cookies and Analytics

Our website uses cookies to:

  • Enable core site functionality

  • Analyse site traffic and performance (via Squarespace and Google Analytics)

  • Improve user experience

You will be presented with a cookie banner where required, and you can manage your preferences at any time via your browser settings.

8. Email Marketing

If you opt into our mailing list:

  • You will receive occasional updates, offers, and news

  • You can unsubscribe at any time via the link in any email

  • Your data will not be shared or sold

9. Data Retention

We retain your data only as long as necessary:

  • Order and transaction data: up to 6 years (for tax purposes)

  • Enquiries: up to 12 months

  • Marketing data: until you unsubscribe or withdraw consent

10. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Withdraw consent at any time

  • Lodge a complaint with the UK Information Commissioner’s Office (ICO)

11. Data Security

We take reasonable steps to protect your data, including:

  • Secure hosting via Squarespace

  • SSL encryption on our website

  • Secure third-party payment processing

  • Limited access to personal data

12. Third-Party Links

Our website may include links to external platforms (such as social media).
We are not responsible for their privacy policies or practices.

13. Contact

If you have any questions about this policy or your data, please contact:

H.OReilly.Art
Email: h.oreilly.art@outlook.com
Location: United Kingdom

14. Updates to This Policy

We may update this policy from time to time.
Any changes will be posted on this page with an updated date.