Last updated: 2nd October, 2025

1. Who We Are

This website is operated by Amber Leach , trading as Amber Leach Artist . For privacy law purposes, we are the “data controller” of your personal data.

Contact: amber@amberleachartist.com.

2. What Data We Collect

• Identity & contact: name, email, postal address, phone number

• Order & payment: transaction details (handled securely by Stripe )

• Communications: emails, contact form messages, newsletter preferences (using Brevo and Zapier)

• Technical: cookies, IP address, browser/device type (via Squarespace)

• Optional for commissions: reference images, measurements, or details you supply

3. How We Collect Data

We collect data when you place an order, sign up for emails, contact us directly, or browse the site (cookies/analytics).

4. Why We Use Your Data

• To process and deliver orders (prints, originals, commissions)

• To send order confirmations, shipping updates, and respond to enquiries

• To send newsletters/promotions if you’ve opted in

• To improve the site using analytics

• To meet legal/tax obligations

5. Legal Bases

We rely on one or more lawful bases to process your data:

• Contract: to fulfil orders

• Consent: for newsletters and optional cookies

• Legitimate interests: for site performance, fraud prevention

• Legal obligation: for tax/accounting requirements

6. Sharing Data

We only share personal data with trusted service providers needed to run this business, such as:

• Stripe (process secure transactions)

• Brevo and Zapier(send newsletters)

• Shipping and delivery companies such as Royal Mail.

These providers are only allowed to use your data to perform their services for us.

We use Squarespace's built-in analytics to understand how visitors use this website (e.g., page views, traffic sources). This information is anonymous and does not personally identify you. We do not set any additional tracking cookies or use third-party analytics tools.

7. International Transfers

Some providers may store or process data overseas (e.g., in the USA). Where required, safeguards such as standard contractual clauses are in place.

8. Cookies

We use necessary cookies to run the shop, plus optional cookies (analytics/advertising) if you consent. You can manage cookies via the banner or your browser settings.

9. Data Retention

• Order records: 10 years

• Newsletter subscription data: until you unsubscribe

• Enquiries: 5 years

10. Your Rights

You may have rights under data protection laws (e.g., GDPR, CCPA, NZ Privacy Act), including:

• Access to your data

• Correction of inaccurate data

• Deletion (“right to be forgotten”)

• Restriction or objection to processing

• Data portability

• Withdraw consent at any time

To exercise rights, contact amber@amberleachartist.com.

11. Data Breaches

If a personal data breach occurs, we will notify you and relevant authorities where legally required.

12. Children

This site is not aimed at children under the age of 13. We do not knowingly collect data from anyone under the age of 13. If you believe a child has provided us with personal information, please contact us at amber@amberleachartist.com and we will delete it.

13. Changes

We may update this policy from time to time. The latest version will always be posted here.

14. Complaints

If you have concerns, contact us at amber@amberleachartist.com. You also have the right to lodge a complaint with your local data protection authority (e.g., ICO in the UK, Privacy Commissioner in NZ, or equivalent in your region).