Privacy Policy

Last updated: 24/12/2025

This Privacy Policy explains how your personal data is collected, used, and protected when you visit or make a purchase from this website.

1. Who I am

This website is operated by Annie Cartwright. I create and sell handwritten cards and artwork.

If you have any questions about this policy or how your data is handled, you can contact me via the website contact form or email.

2. What personal data is collected

When you use this website, the following personal data may be collected:

  • Name, email address, billing address, shipping address, and payment details when you place an order

  • Contact details and message content if you use the contact form

  • Email address if you sign up to the mailing list

  • Technical data such as IP address, browser type, device information, and pages visited

This information is collected through Squarespace’s built-in tools, forms, analytics, and third-party services connected to the site.

3. How your data is used

Your personal data is used for the following purposes:

  • To process and fulfil orders

  • To communicate with you about purchases or enquiries

  • To provide customer support

  • To manage mailing list subscriptions (only if you opt in)

  • To understand website usage and improve the site

  • To meet legal and accounting obligations

Your data is only used where there is a lawful basis under UK GDPR, such as contract fulfilment, consent, or legitimate interest.

4. Payments

Payments made through this website are processed securely by third-party payment providers integrated with Squarespace. I do not store or have access to your full payment card details.

These providers only receive the information necessary to complete your transaction and are required to handle your data securely and lawfully.

5. Cookies and analytics

This website uses cookies and similar technologies provided by Squarespace and trusted third parties to:

  • Enable essential site functionality

  • Analyse traffic and usage

  • Improve performance and user experience

You may be asked to consent to non-essential cookies when visiting the site. You can also control cookies through your browser settings.

6. Email marketing

If you choose to subscribe to the mailing list, your email address will only be used to send updates, new releases, or news related to my work.

You can unsubscribe at any time by using the link in any email or by contacting me directly.

7. Sharing your data

Your personal data may be shared with trusted third parties only where necessary, including:

  • Squarespace (website hosting and forms)

  • Payment processors

  • Shipping providers

  • Analytics and email services

All third parties are required to comply with UK GDPR and protect your data appropriately.

8. Data retention

Personal data is kept only for as long as necessary to:

  • Fulfil orders

  • Comply with legal and tax obligations

  • Provide customer support

Mailing list data is retained until you unsubscribe.

9. Your rights under UK GDPR

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Object to or restrict processing

  • Withdraw consent at any time

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please get in touch.

10. Data security

Reasonable technical and organisational measures are taken to protect your personal data. While every effort is made to safeguard information, no online system can be completely secure.

11. Changes to this policy

This Privacy Policy may be updated occasionally to reflect changes in the website, Squarespace services, or legal requirements. Updates will be posted on this page.