Effective Date: 1st May 2023

1. Introduction

   1.1. Harper and Grace Art ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your personal data when you interact with our website (www.harpergraceart.co.uk).

   1.2. By accessing and using our Website, you consent to the collection and use of your personal data as described in this Privacy Policy.

   
   

2. Personal Data We Collect

   2.1. We may collect the following types of personal data from you:

• Name, email address, and contact information provided by you when you contact us or make a purchase.

• Information related to your purchases, including transaction details and payment information.

• Information automatically collected through cookies and similar technologies when you visit our Website (refer to our Cookie Policy for more information).

3. How We Use Your Personal Data

3.1. We use your personal data for the following purposes:

• To communicate with you, respond to your inquiries, and provide customer support.

• To process and fulfill your orders and transactions.

• To improve our products, services, and Website based on your feedback and interactions.

• To comply with legal obligations and enforce our terms and conditions.

4. Legal Basis for Processing Personal Data

4.1. We rely on the following legal bases for processing your personal data:

• Performance of a contract: We process your personal data to fulfil our contractual obligations, such as processing your orders and delivering products.

• Legitimate interests: We may process your personal data for our legitimate business interests, such as improving our products and services.

• Consent: In certain cases, we may rely on your consent to process your personal data, such as for marketing purposes. You have the right to withdraw your consent at any time.

5. Sharing Your Personal Data

5.1. We may share your personal data with trusted third parties in the following circumstances:

• Service providers: We may engage third-party service providers to assist us in providing and improving our products and services.

• Legal requirements: We may share your personal data to comply with applicable laws, regulations, or legal processes.

6. Data Retention

6.1. We will retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

7. Your Rights

7.1. You have the following rights regarding your personal data:

• Right to access: You have the right to request access to the personal data we hold about you.

• Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data.

• Right to erasure: You have the right to request the deletion of your personal data.

• Right to restrict processing: You have the right to request the restriction of processing your personal data.

• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.

• Right to object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.

• Right to withdraw consent: If we rely on your consent for processing your personal data, you have the right to withdraw your consent at any time.

8. Security Measures

8.1. We implement appropriate technical and organisational measures to protect your personal data against unauthorized access, loss, or alteration. However, please note that no data transmission over the internet or storage method is 100% secure.

9. Updates to this Privacy Policy

9.1. We reserve the right to update this at any time.