Privacy Policy
Cailleach — cailleach-artist.com
Last updated: May 2025
1. Who we are
This website is operated by Cailleach, a sole trader selling original artwork, art prints, and digital downloads at cailleach-artist.com. In this policy, “we”, “us”, and “our” refer to Cailleach.
For any questions about this privacy policy or how we handle your data, please contact us at hello@cailleach-artist.com.
2. What data we collect and why
We only collect information that is necessary to process your order and provide our service.
When you place an order
- Your name and email address — to send your order confirmation and, for digital downloads, your download link
- Your delivery address — for physical print orders only, passed to our print fulfilment partner to dispatch your order
- Payment information — we do not store your card details; payments are processed securely by Stripe or PayPal, who have their own privacy policies
- Your order history — retained in our system for legal and accounting purposes
When you sign up for commission notifications
- Your email address only — used solely to notify you when commission slots open; you can unsubscribe at any time
When you visit our website
- Basic analytics data such as pages visited and time on site, collected via cookies to help us understand how the site is used
- Your cookie preferences, stored locally in your browser
3. Legal basis for processing (UK GDPR)
We process your data under the following legal bases:
- Contract — processing your name, email, and address is necessary to fulfil your order
- Legitimate interests — basic analytics to improve the website
- Consent — commission notification emails, which you can withdraw at any time
- Legal obligation — retaining order records for tax and accounting purposes
4. Who we share your data with
We do not sell or rent your personal data. We share limited data only with the following third parties, strictly as necessary to provide our service.
Print fulfilment partner (e.g. Printful, Printify, or Gelato) — your name and delivery address are passed to our fulfilment partner to print and dispatch physical orders. They act as a data processor on our behalf.
Stripe — payment processing for card payments. Stripe handles all card data directly and we never see or store your full card number. Stripe’s privacy policy is available at stripe.com/gb/privacy.
PayPal — payment processing for PayPal payments. PayPal’s privacy policy is available at paypal.com/uk/legalhub/privacy-full.
WooCommerce / WordPress — our store platform, which stores your order data on our server. Our server is hosted within the EU/EEA.
5. Digital downloads
For digital download purchases, your download link is delivered by email. Download files are served directly from our website. We do not use third-party file delivery services that would receive your personal data.
6. How long we keep your data
- Order records — retained for 7 years to comply with UK tax and accounting obligations
- Commission notification emails — retained until you unsubscribe
- Analytics data — anonymised and aggregated; not linked to individual users
7. Your rights under UK GDPR
You have the following rights regarding your personal data:
- The right to access the data we hold about you
- The right to correct inaccurate data
- The right to request deletion of your data (subject to our legal obligations to retain certain records)
- The right to object to processing or request we restrict it
- The right to data portability
- The right to withdraw consent at any time (for example, unsubscribing from commission notifications)
To exercise any of these rights, please contact us at hello@cailleach-artist.com. We will respond within 30 days.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.
8. Cookies
Our website uses cookies to function correctly and to help us understand how visitors use the site. When you first visit, you will be shown a cookie consent banner where you can choose which cookies to accept.
We use the following categories of cookies:
- Essential cookies — required for the store and shopping cart to work; cannot be disabled
- Analytics cookies — help us understand site usage; only set with your consent
You can change your cookie preferences at any time using the cookie settings link in our website footer, or by clearing your browser cookies.
9. Data security
We take reasonable steps to protect your personal data from unauthorised access, loss, or disclosure. Our website uses HTTPS encryption for all data transmission. Payments are processed by Stripe and PayPal using their own secure, PCI-compliant infrastructure.
In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the ICO as required by law.
10. Children’s privacy
Our website and products are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at hello@cailleach-artist.com and we will delete it promptly.
11. Changes to this policy
We may update this privacy policy from time to time. When we do, we will update the “Last updated” date at the top of this page. We encourage you to check back periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.
12. Contact us
If you have any questions about this privacy policy or how we handle your personal data, please get in touch: