Privacy Policy

Who we are

This website, banksy-captured.com, is operated by AART SPACE LTD (company number 16726493), registered at 3rd Floor 86-90 Paul Street, London, United Kingdom, EC2A 4NE. We are the data controller for the personal information we collect through this website.

Contact us at sales@aartspace.com for any privacy-related queries.

What personal data we collect

We collect the following types of personal data:

• Order information: name, email address, shipping address, and phone number (optional) when you place an order
• Payment information: processed securely by Shopify Payments — we do not store your card details on our servers
• Email address: when you sign up to our mailing list or submit a contact form
• Browsing data: IP address, device type, browser, and pages visited — collected automatically through server logs

How we use your data

We use your personal data for the following purposes:

• Order fulfilment: processing your order, arranging delivery, and sending order confirmation and shipping updates
• Customer service: responding to queries, handling returns, and resolving issues
• Marketing: sending emails about new releases, restocks, and stories from the archive — only if you have opted in
• Fraud prevention: protecting against fraudulent transactions
• Website improvement: understanding how visitors use our site to improve the experience

Lawful basis for processing

Under UK GDPR, we process your personal data on the following legal bases:

• Contract performance: processing your order and delivering your purchase
• Legitimate interest: fraud prevention, website analytics, and improving our services
• Consent: sending marketing emails — you can withdraw consent at any time

Who we share your data with

We share your data with the following third-party service providers, each of whom processes data on our behalf:

• Shopify: checkout, payment processing, and order management
• Supabase: customer database and email capture
• Resend: transactional and marketing email delivery
• Vercel: website hosting and server logs
• Klaviyo: email marketing automation and audience segmentation
• Royal Mail / courier partners: shipping and delivery

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

International data transfers

Some of our service providers are based outside the UK. Where your data is transferred internationally, we ensure appropriate safeguards are in place:

• Supabase: US-hosted, operating under EU Standard Contractual Clauses
• Shopify: US/Canada, with adequate safeguards in place
• Vercel: US-based edge network with data processing agreements
• Klaviyo: US-based, with data processing agreement and Standard Contractual Clauses

How long we keep your data

• Order data: retained for 6 years as required by HMRC for tax and accounting purposes
• Marketing consent records: retained until you unsubscribe
• Browsing logs: retained for 90 days

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Eraseyour personal data (the “right to be forgotten”)
• Restrict how we process your data
• Port your data to another service
• Object to processing based on legitimate interest
• Withdraw consent for marketing at any time

To exercise any of these rights, email sales@aartspace.com. We will respond within 30 days.

If you are not satisfied with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

This site uses essential cookies only — specifically, a Shopify cart session cookie that allows your shopping cart to function. This cookie is strictly necessary for the site to work and does not track you.

We do not use tracking cookies, third-party analytics cookies, or advertising cookies. Because we only use essential cookies, no cookie consent banner is required — but we want to be transparent about what we use.

Marketing emails

We only send marketing emails if you have explicitly opted in — for example, by signing up through our newsletter form. Every marketing email includes an unsubscribe link. We never sell or share your email address with third parties.

Children

We do not knowingly collect personal data from anyone under the age of 16. If you believe we have collected data from a child, please contact us at sales@aartspace.com and we will delete it promptly.

Changes to this policy

We may update this privacy policy from time to time. The “last updated” date at the top of this page will always reflect the most recent version. If we make material changes, we will notify existing customers by email.

Contact

For any privacy-related queries, contact us at sales@aartspace.com.

AART SPACE LTD
Company number: 16726493
Registered address: 3rd Floor 86-90 Paul Street, London, United Kingdom, EC2A 4NE