Privacy Policy

Last updated: 29 October 2026

This Privacy Policy explains how I collect, use and protect your personal information when you visit my website or purchase original paintings, art prints or monthly print subscriptions.

1. Who I Am

Business/artist name: Keris McNaught
Contact email: Kerismcnaught@icloud.com
Website: Kerismcnaught.art

I am responsible for how your personal information is handled in accordance with applicable UK data protection law, including the UK GDPR and Data Protection Act 2018.

2. Information I Collect

When you use my website or place an order, I may collect:

  • Contact information: your name, email address, billing address and delivery address.

  • Order information: the artwork purchased, order history and subscription details.

  • Payment information: payment status and transaction details processed through the payment providers available at checkout. I do not receive your full card details where these are processed directly by the payment provider.

  • Technical information: IP address, device and browser information, and cookie data where applicable.

  • Communications: information you provide when contacting me with questions or requests.

3. How I Use Your Information

I use your information to:

  • Process payments and fulfil orders.

  • Deliver original paintings and prints.

  • Manage monthly print subscriptions and recurring payments.

  • Respond to enquiries and resolve order issues.

  • Maintain business, accounting and tax records.

  • Protect my website and prevent fraudulent transactions.

  • Send marketing emails where you have consented or where another lawful basis and applicable marketing rules permit it.

  • Understand website usage through analytics, where enabled and legally permitted.

4. Legal Basis for Processing

I process personal information under the following lawful bases, where applicable:

  • Contract: to process and deliver your orders and manage subscriptions.

  • Legal obligation: to comply with tax, accounting and other legal requirements.

  • Legitimate interests: to manage and protect my business, prevent fraud and handle customer enquiries, where these interests do not override your rights.

  • Consent: for marketing or non-essential cookies and similar technologies where consent is required.

You can withdraw consent at any time where processing relies on it.

5. Sharing Your Information

I only share personal information where necessary to operate my business, including with:

  • Squarespace, which hosts my website and supports my online shop.

  • Payment providers used at checkout, such as Stripe or PayPal, if enabled.

  • Postal and delivery services that fulfil orders.

  • Email, analytics or other service providers I use to operate my website, where applicable.

  • Authorities where disclosure is required by law.

These providers may process information in other countries. Where required, appropriate safeguards will be used for international data transfers.

I do not sell your personal information to third parties.

6. Data Retention and Security

I keep personal information only for as long as necessary for the purposes described in this policy, including fulfilling orders, managing subscriptions, resolving disputes and meeting legal record-keeping obligations.

Financial and tax records may need to be retained for the periods required by law. Other information will be deleted or securely disposed of when it is no longer needed.

I take reasonable steps to protect personal information against unauthorised access, loss, misuse or disclosure.

7. Cookies

My website may use essential cookies to operate correctly, process orders and maintain security.

Analytics, advertising and other non-essential cookies may also be used if enabled. Where required, your consent will be requested before these cookies are placed.

You can manage available cookie preferences through the website's cookie settings. Blocking certain cookies may affect website functionality.

8. Your Data Protection Rights

Under applicable data protection law, you may have the right to:

  • Access the personal information I hold about you.

  • Request corrections to inaccurate information.

  • Request deletion of your information where legally applicable.

  • Request restrictions on how your information is processed.

  • Object to certain types of processing.

  • Request a copy of certain information in a portable format.

  • Withdraw consent where processing is based on consent.

To exercise your rights, contact me using the email address above. I will respond within the applicable legal timeframe, usually one month.

You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your personal information has been handled unlawfully.

9. Children's Privacy

My website is not specifically directed at children. I do not knowingly collect personal information from children where doing so would be unlawful.

10. Changes to This Policy

I may update this Privacy Policy when my business practices or legal obligations change. The latest version will be available on this page, with the updated date shown above.

11. Contact

For questions about this Privacy Policy or how your personal information is used, please contact:

Email: Kerismcnaught@icloud.com