Privacy Policy
Privacy Policy
Last updated: September 2026
Claire Graham Art respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains what personal information I collect when you visit or use this website, how I use it, who I may share it with, how I protect it, and the rights you have in relation to your personal information.
This Privacy Policy applies to the Claire Graham Art website and is based on the data protection requirements applicable in the United Kingdom, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as applicable.
1. Who I am
Claire Graham Art is the data controller responsible for your personal information.
If you have any questions about this Privacy Policy, how your personal information is handled, or wish to exercise any of your data protection rights, you can contact me at:
Name: Claire Graham
Business name: Claire Graham Art
Email: claire.graham.art@outlook.com
2. Information I collect
I may collect personal information in the following ways.
Information collected automatically
When you visit my website, certain information may be collected automatically through my website hosting provider, cookies and, where applicable, analytics or marketing technologies.
This may include:
IP address
Browser type and version
Device type
Operating system
Time zone
Cookies and similar technologies
Pages visited
How you arrived at the website
Approximate location
Information about how you interact with the website
The information collected will depend on the services, cookies and technologies used on my website.
Information you provide to me
If you purchase artwork, contact me, submit a contact form, contact me through WhatsApp or join my mailing list, you may provide information such as:
Your name
Email address
Billing address
Delivery address
Telephone number, where required
Details of your order
Information contained in messages or enquiries you send to me
Information provided through WhatsApp
Newsletter subscription preferences
Payment information where applicable
I only collect personal information that is reasonably necessary for the purposes described in this Privacy Policy.
3. How I use your information
I may use your personal information to:
Process and fulfil orders
Arrange delivery of artwork
Communicate with you about your order
Respond to enquiries and messages
Respond to enquiries received through WhatsApp
Provide customer service
Send newsletters and marketing communications where you have consented to receive them
Give subscribers early access to new artwork, collections and other studio updates
Maintain website security
Prevent fraud, misuse or unauthorised activity
Understand how visitors use my website and improve its performance
Maintain appropriate business, accounting and tax records
Comply with legal and regulatory requirements
Manage and improve my website and services
I will only use your personal information for purposes that are compatible with those described in this Privacy Policy.
4. Lawful bases for processing
Under UK data protection law, I need a lawful basis for processing your personal information.
Depending on how you interact with my website, I may rely on the following lawful bases:
Contract
Where processing is necessary to process and fulfil an order you have made, including arranging payment and delivery.
Consent
Where you have actively chosen to receive newsletters, marketing emails or consented to certain non-essential cookies or similar technologies.
Legitimate interests
Where processing is necessary for reasonable business purposes, such as maintaining website security, preventing fraud, responding to enquiries, managing my business and improving my website, provided these interests do not override your rights and freedoms.
Legal obligation
Where I need to process or retain information to comply with legal, accounting or tax requirements.
5. My mailing list
If you choose to Join My Art Journey & Get Early Access, I may use the email address you provide to send you updates relating to my artwork and business.
These communications may include:
New paintings and artwork
Upcoming collections
Early access to new releases
Studio news and behind-the-scenes glimpses
Special announcements
Other relevant news about Claire Graham Art
You do not need to subscribe to my mailing list to purchase artwork from me.
Marketing emails will only be sent where I have a lawful basis to do so, such as your specific consent or where another applicable legal basis permits it.
Where consent is required, I will obtain it through a clear positive opt-in. I will not treat silence, inactivity or a pre-ticked box as consent.
You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the email or by contacting me directly.
I will act on unsubscribe requests and will not continue sending marketing emails where you have withdrawn your consent or otherwise asked me not to contact you for marketing purposes.
I will not sell or rent your email address to third parties for their own marketing purposes.
Newsletter/email provider: Hostinger
6. Data retention
I will only keep your personal information for as long as it is reasonably necessary for the purposes for which it was collected.
Different types of information may be kept for different periods.
For example:
Order and financial information: generally 6 years where required for tax, accounting or legal purposes
Newsletter information: until you unsubscribe, subject to any information I may need to retain to ensure I do not contact you again
Contact form and general enquiries: up to 12 months, unless there is a reason to retain the information for longer
WhatsApp enquiries: for as long as reasonably necessary to deal with your enquiry, provide customer service or maintain appropriate business records
Analytics information: in accordance with the relevant analytics provider's retention settings
There may be circumstances where I am legally required to retain certain information for longer.
You may request deletion of your personal information, although there may be circumstances where I am legally required or otherwise entitled to retain certain information.
7. Cookies and similar technologies
My website uses cookies and similar technologies.
Some cookies are necessary for the website to function properly. Other cookies, including analytics and potentially marketing cookies, are non-essential.
Where required by law, I will ask for your consent before using non-essential cookies or similar technologies.
My website uses a cookie consent tool provided by Hostinger to manage cookie preferences.
The cookie banner allows visitors to:
Accept all cookies
Reject non-essential cookies
Manage their cookie preferences
Visitors can change their cookie preferences through the cookie settings available on the website.
Essential cookies
Essential cookies are required for certain parts of the website to function properly. These cookies do not require consent where they are strictly necessary for the service requested by the visitor.
Analytics cookies
Analytics service used: Google Analytics
With your consent, Google Analytics may be used to help me understand how visitors use my website, such as which pages are visited and how visitors interact with the site.
This information helps me understand website performance and improve my website and services.
Marketing cookies
Marketing cookies are available as a category within my cookie consent system.
I may use marketing or advertising cookies in the future to support marketing activities, measure advertising campaigns or understand the effectiveness of advertising.
Where required by law, I will obtain consent before using non-essential marketing cookies or similar tracking technologies.
If marketing or advertising tracking technologies are introduced to the website, I will update my cookie settings and this Privacy Policy as appropriate.
8. Third-party services
I may use trusted third-party service providers to help operate my website and business.
Depending on the services I use, these may include:
Hostinger – website hosting and, where applicable, email/newsletter services
Stripe – payment processing, where used
Klarna – payment processing, where available
PayPal – payment processing, where available
Royal Mail – delivery and postage
Google Analytics – website analytics
WhatsApp – communication and customer enquiries
Facebook, Instagram and TikTok – social media platforms linked from my website
These providers may process personal information where necessary to provide their services.
I will only share information that is reasonably necessary for the relevant service.
Where I use a third-party service provider to process personal information on my behalf, I will take appropriate steps to ensure that personal information is handled in accordance with applicable data protection requirements.
9. Payments
If you purchase artwork through my website, your payment may be processed by a third-party payment provider.
I do not normally have access to your full payment card details. Payment information is processed by the relevant payment provider in accordance with its own privacy and security policies.
Payment providers may include Stripe, Klarna and/or PayPal, depending on the payment options available through my website.
I will only list and use payment providers that are actually offered through my website.
10. WhatsApp
My website may provide the option to contact me through WhatsApp.
If you choose to contact me through WhatsApp, information you provide in your messages may include your name, telephone number, message content and any other information you choose to provide.
WhatsApp is operated by a third party and has its own privacy policy and terms.
I recommend reviewing WhatsApp's privacy information before using the service.
I will use information received through WhatsApp only as reasonably necessary to respond to your enquiry, provide customer service, process an order where applicable, or maintain appropriate business records.
11. Social media
My website may contain links to my social media accounts, including Facebook, Instagram and TikTok.
If you click on one of these links, you will be taken to the relevant third-party platform.
These platforms have their own privacy policies, terms and cookie practices. I am not responsible for the privacy practices, content or security of third-party social media platforms.
Simply following a link from my website to a social media platform does not mean that I automatically receive personal information about you from that platform.
12. International transfers
Some of the third-party providers I use may process or store personal information outside the United Kingdom.
Where personal information is transferred outside the UK, I will take appropriate steps to ensure that it receives an appropriate level of protection in accordance with applicable UK data protection law.
Where required, appropriate safeguards may include UK International Data Transfer Agreements, UK Addendums, adequacy regulations or other legally recognised transfer mechanisms.
13. Your rights
Under UK data protection law, you may have the right to:
Request access to the personal information I hold about you
Ask me to correct inaccurate or incomplete information
Request deletion of your personal information in certain circumstances
Ask me to restrict how your information is processed in certain circumstances
Object to certain types of processing
Request data portability where applicable
Withdraw consent where I rely on consent as the lawful basis for processing
These rights are subject to certain legal conditions and exceptions.
If you would like to exercise any of these rights, please contact me using the details provided in this Privacy Policy.
14. Withdrawing consent
Where I rely on your consent to process your personal information, you can withdraw that consent at any time.
For example, you can unsubscribe from my marketing emails by clicking the unsubscribe link included in the email or by contacting me directly.
You can also change your cookie preferences through the cookie settings available on my website.
Withdrawing consent does not affect the lawfulness of any processing that took place before you withdrew your consent.
15. Automated decision-making and profiling
Claire Graham Art does not use your personal information to make decisions about you solely through automated decision-making or profiling that produces legal or similarly significant effects.
If this changes in the future, I will update this Privacy Policy as appropriate.
16. Security
I take reasonable technical and organisational measures to protect your personal information from accidental loss, misuse, unauthorised access, alteration or disclosure.
My website is hosted using secure services, and appropriate security measures are used where reasonably possible.
However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.
17. Third-party websites and services
My website may contain links to third-party websites, services and platforms, including social media platforms and WhatsApp.
If you follow a link to another website or service, that website or service will have its own privacy policy and terms.
I am not responsible for the privacy practices, content or security of third-party websites, services or platforms.
I recommend reviewing the privacy policies of third-party services before providing them with personal information.
18. Complaints
If you have concerns about how I have handled your personal information, please contact me first using the details below so that I have the opportunity to address your concern.
You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent authority responsible for upholding information rights.
Information Commissioner's Office (ICO)
Website: https://ico.org.uk/
19. Changes to this Privacy Policy
I may update this Privacy Policy from time to time to reflect changes to my website, business practices, services, technology or legal requirements.
The latest version will always be published on this page, together with the date it was last updated.
20. Contact me
If you have any questions about this Privacy Policy, would like to exercise your data protection rights, or have a concern about how your personal information is being used, please contact me:
Claire Graham Art
Claire Graham
Email: claire.graham.art@outlook.com
Last updated: September 2026
Claire Graham Art respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains what personal information I collect when you visit or use this website, how I use it, who I may share it with, how I protect it, and the rights you have in relation to your personal information.
This Privacy Policy applies to the Claire Graham Art website and is based on the data protection requirements applicable in the United Kingdom, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as applicable.
1. Who I am
Claire Graham Art is the data controller responsible for your personal information.
If you have any questions about this Privacy Policy, how your personal information is handled, or wish to exercise any of your data protection rights, you can contact me at:
Name: Claire Graham
Business name: Claire Graham Art
Email: claire.graham.art@outlook.com
2. Information I collect
I may collect personal information in the following ways.
Information collected automatically
When you visit my website, certain information may be collected automatically through my website hosting provider, cookies and, where applicable, analytics or marketing technologies.
This may include:
IP address
Browser type and version
Device type
Operating system
Time zone
Cookies and similar technologies
Pages visited
How you arrived at the website
Approximate location
Information about how you interact with the website
The information collected will depend on the services, cookies and technologies used on my website.
Information you provide to me
If you purchase artwork, contact me, submit a contact form, contact me through WhatsApp or join my mailing list, you may provide information such as:
Your name
Email address
Billing address
Delivery address
Telephone number, where required
Details of your order
Information contained in messages or enquiries you send to me
Information provided through WhatsApp
Newsletter subscription preferences
Payment information where applicable
I only collect personal information that is reasonably necessary for the purposes described in this Privacy Policy.
3. How I use your information
I may use your personal information to:
Process and fulfil orders
Arrange delivery of artwork
Communicate with you about your order
Respond to enquiries and messages
Respond to enquiries received through WhatsApp
Provide customer service
Send newsletters and marketing communications where you have consented to receive them
Give subscribers early access to new artwork, collections and other studio updates
Maintain website security
Prevent fraud, misuse or unauthorised activity
Understand how visitors use my website and improve its performance
Maintain appropriate business, accounting and tax records
Comply with legal and regulatory requirements
Manage and improve my website and services
I will only use your personal information for purposes that are compatible with those described in this Privacy Policy.
4. Lawful bases for processing
Under UK data protection law, I need a lawful basis for processing your personal information.
Depending on how you interact with my website, I may rely on the following lawful bases:
Contract
Where processing is necessary to process and fulfil an order you have made, including arranging payment and delivery.
Consent
Where you have actively chosen to receive newsletters, marketing emails or consented to certain non-essential cookies or similar technologies.
Legitimate interests
Where processing is necessary for reasonable business purposes, such as maintaining website security, preventing fraud, responding to enquiries, managing my business and improving my website, provided these interests do not override your rights and freedoms.
Legal obligation
Where I need to process or retain information to comply with legal, accounting or tax requirements.
5. My mailing list
If you choose to Join My Art Journey & Get Early Access, I may use the email address you provide to send you updates relating to my artwork and business.
These communications may include:
New paintings and artwork
Upcoming collections
Early access to new releases
Studio news and behind-the-scenes glimpses
Special announcements
Other relevant news about Claire Graham Art
You do not need to subscribe to my mailing list to purchase artwork from me.
Marketing emails will only be sent where I have a lawful basis to do so, such as your specific consent or where another applicable legal basis permits it.
Where consent is required, I will obtain it through a clear positive opt-in. I will not treat silence, inactivity or a pre-ticked box as consent.
You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the email or by contacting me directly.
I will act on unsubscribe requests and will not continue sending marketing emails where you have withdrawn your consent or otherwise asked me not to contact you for marketing purposes.
I will not sell or rent your email address to third parties for their own marketing purposes.
Newsletter/email provider: Hostinger
6. Data retention
I will only keep your personal information for as long as it is reasonably necessary for the purposes for which it was collected.
Different types of information may be kept for different periods.
For example:
Order and financial information: generally 6 years where required for tax, accounting or legal purposes
Newsletter information: until you unsubscribe, subject to any information I may need to retain to ensure I do not contact you again
Contact form and general enquiries: up to 12 months, unless there is a reason to retain the information for longer
WhatsApp enquiries: for as long as reasonably necessary to deal with your enquiry, provide customer service or maintain appropriate business records
Analytics information: in accordance with the relevant analytics provider's retention settings
There may be circumstances where I am legally required to retain certain information for longer.
You may request deletion of your personal information, although there may be circumstances where I am legally required or otherwise entitled to retain certain information.
7. Cookies and similar technologies
My website uses cookies and similar technologies.
Some cookies are necessary for the website to function properly. Other cookies, including analytics and potentially marketing cookies, are non-essential.
Where required by law, I will ask for your consent before using non-essential cookies or similar technologies.
My website uses a cookie consent tool provided by Hostinger to manage cookie preferences.
The cookie banner allows visitors to:
Accept all cookies
Reject non-essential cookies
Manage their cookie preferences
Visitors can change their cookie preferences through the cookie settings available on the website.
Essential cookies
Essential cookies are required for certain parts of the website to function properly. These cookies do not require consent where they are strictly necessary for the service requested by the visitor.
Analytics cookies
Analytics service used: Google Analytics
With your consent, Google Analytics may be used to help me understand how visitors use my website, such as which pages are visited and how visitors interact with the site.
This information helps me understand website performance and improve my website and services.
Marketing cookies
Marketing cookies are available as a category within my cookie consent system.
I may use marketing or advertising cookies in the future to support marketing activities, measure advertising campaigns or understand the effectiveness of advertising.
Where required by law, I will obtain consent before using non-essential marketing cookies or similar tracking technologies.
If marketing or advertising tracking technologies are introduced to the website, I will update my cookie settings and this Privacy Policy as appropriate.
8. Third-party services
I may use trusted third-party service providers to help operate my website and business.
Depending on the services I use, these may include:
Hostinger – website hosting and, where applicable, email/newsletter services
Stripe – payment processing, where used
Klarna – payment processing, where available
PayPal – payment processing, where available
Royal Mail – delivery and postage
Google Analytics – website analytics
WhatsApp – communication and customer enquiries
Facebook, Instagram and TikTok – social media platforms linked from my website
These providers may process personal information where necessary to provide their services.
I will only share information that is reasonably necessary for the relevant service.
Where I use a third-party service provider to process personal information on my behalf, I will take appropriate steps to ensure that personal information is handled in accordance with applicable data protection requirements.
9. Payments
If you purchase artwork through my website, your payment may be processed by a third-party payment provider.
I do not normally have access to your full payment card details. Payment information is processed by the relevant payment provider in accordance with its own privacy and security policies.
Payment providers may include Stripe, Klarna and/or PayPal, depending on the payment options available through my website.
I will only list and use payment providers that are actually offered through my website.
10. WhatsApp
My website may provide the option to contact me through WhatsApp.
If you choose to contact me through WhatsApp, information you provide in your messages may include your name, telephone number, message content and any other information you choose to provide.
WhatsApp is operated by a third party and has its own privacy policy and terms.
I recommend reviewing WhatsApp's privacy information before using the service.
I will use information received through WhatsApp only as reasonably necessary to respond to your enquiry, provide customer service, process an order where applicable, or maintain appropriate business records.
11. Social media
My website may contain links to my social media accounts, including Facebook, Instagram and TikTok.
If you click on one of these links, you will be taken to the relevant third-party platform.
These platforms have their own privacy policies, terms and cookie practices. I am not responsible for the privacy practices, content or security of third-party social media platforms.
Simply following a link from my website to a social media platform does not mean that I automatically receive personal information about you from that platform.
12. International transfers
Some of the third-party providers I use may process or store personal information outside the United Kingdom.
Where personal information is transferred outside the UK, I will take appropriate steps to ensure that it receives an appropriate level of protection in accordance with applicable UK data protection law.
Where required, appropriate safeguards may include UK International Data Transfer Agreements, UK Addendums, adequacy regulations or other legally recognised transfer mechanisms.
13. Your rights
Under UK data protection law, you may have the right to:
Request access to the personal information I hold about you
Ask me to correct inaccurate or incomplete information
Request deletion of your personal information in certain circumstances
Ask me to restrict how your information is processed in certain circumstances
Object to certain types of processing
Request data portability where applicable
Withdraw consent where I rely on consent as the lawful basis for processing
These rights are subject to certain legal conditions and exceptions.
If you would like to exercise any of these rights, please contact me using the details provided in this Privacy Policy.
14. Withdrawing consent
Where I rely on your consent to process your personal information, you can withdraw that consent at any time.
For example, you can unsubscribe from my marketing emails by clicking the unsubscribe link included in the email or by contacting me directly.
You can also change your cookie preferences through the cookie settings available on my website.
Withdrawing consent does not affect the lawfulness of any processing that took place before you withdrew your consent.
15. Automated decision-making and profiling
Claire Graham Art does not use your personal information to make decisions about you solely through automated decision-making or profiling that produces legal or similarly significant effects.
If this changes in the future, I will update this Privacy Policy as appropriate.
16. Security
I take reasonable technical and organisational measures to protect your personal information from accidental loss, misuse, unauthorised access, alteration or disclosure.
My website is hosted using secure services, and appropriate security measures are used where reasonably possible.
However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.
17. Third-party websites and services
My website may contain links to third-party websites, services and platforms, including social media platforms and WhatsApp.
If you follow a link to another website or service, that website or service will have its own privacy policy and terms.
I am not responsible for the privacy practices, content or security of third-party websites, services or platforms.
I recommend reviewing the privacy policies of third-party services before providing them with personal information.
18. Complaints
If you have concerns about how I have handled your personal information, please contact me first using the details below so that I have the opportunity to address your concern.
You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent authority responsible for upholding information rights.
Information Commissioner's Office (ICO)
Website: https://ico.org.uk/
19. Changes to this Privacy Policy
I may update this Privacy Policy from time to time to reflect changes to my website, business practices, services, technology or legal requirements.
The latest version will always be published on this page, together with the date it was last updated.
20. Contact me
If you have any questions about this Privacy Policy, would like to exercise your data protection rights, or have a concern about how your personal information is being used, please contact me:
Claire Graham Art
Claire Graham
Email: claire.graham.art@outlook.com
© 2026 Claire Graham Art - All rights reserved
Join my journey and get early access
Be the first to discover new artwork, upcoming exhibitions and members-only offers.