Privacy Policy

Last Updated: 10 July 2026

At The Art List, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, how we keep it safe, and your rights under UK data protection law.

By using our website, you agree to the practices described in this Privacy Policy.

1. Who We Are

The Art List is an online art store specialising in original artwork, fine art prints, canvases, ACEO artist cards, digital artwork and related products.

For the purposes of UK data protection law, The Art List is the Data Controller responsible for your personal information.

2. Information We Collect

Depending on how you use our website, we may collect the following information.

Information You Provide
  • Name
  • Billing address
  • Delivery address
  • Email address
  • Telephone number
  • Account details (if you create an account)
  • Order history
  • Messages submitted through our contact forms
  • Reviews or comments you choose to leave

Payment Information

We do not store your payment card details.

Payments are securely processed by our trusted payment providers. We only receive confirmation that payment has been authorised.

Website Information

When you visit our website we may automatically collect:

  • IP address
  • Browser type
  • Device information
  • Operating system
  • Pages viewed
  • Time spent on the website
  • Referring website
  • Cookies and similar technologies

This helps us improve the website and provide a better experience.

3. How We Use Your Information

We use your information to:

  • Process and deliver orders
  • Provide customer support
  • Respond to enquiries
  • Manage your account
  • Send order confirmations
  • Send delivery updates
  • Improve our website
  • Prevent fraud
  • Comply with legal obligations

Where you have given permission, we may also send:

  • News
  • New artwork releases
  • Special offers
  • Artist updates
  • The Art List newsletter

You may unsubscribe at any time.

4. Legal Basis for Processing

We process your personal information under one or more of the following lawful bases:

  • Contract (to fulfil your order)
  • Legal obligation
  • Legitimate interests
  • Consent (for marketing communications)

5. Marketing

We will only send marketing emails if:

  • You have subscribed; or
  • You have specifically requested to receive them.

Every marketing email contains an unsubscribe link.

You can also contact us at any time to be removed from our mailing list.

6. Cookies

Our website uses cookies to:

  • Remember your preferences
  • Keep your shopping basket active
  • Improve website performance
  • Measure website traffic
  • Understand how visitors use our website

Some cookies are essential for the website to function correctly.

Where required, we ask for your consent before placing non-essential cookies.

You can change your browser settings to disable cookies, although this may affect website functionality.

7. Analytics

We may use website analytics tools to understand how visitors use our website.

These tools collect anonymous statistical information including:

  • Popular pages
  • Time spent on pages
  • Device types
  • Geographic regions
  • Referral sources

This information cannot normally identify you personally.

8. Sharing Your Information

We never sell your personal information.

We only share your information where necessary with trusted service providers, such as:

  • Payment providers
  • Delivery companies
  • Website hosting providers
  • Email marketing providers
  • IT support services
  • Professional advisers where legally required

Each provider is required to keep your information secure.

9. International Transfers

Where any of our service providers process information outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with UK data protection legislation.

10. Data Retention

We only keep personal information for as long as necessary.

For example:

  • Customer order records are retained for accounting and tax purposes.
  • Enquiry records are retained where appropriate for customer support.
  • Marketing preferences are retained until you unsubscribe.

Information is securely deleted when no longer required.

11. Keeping Your Information Secure

We take reasonable technical and organisational measures to protect your information, including:

  • Secure website hosting
  • SSL encryption
  • Password protection
  • Restricted access
  • Regular software updates
  • Secure payment processing

Although no online system is completely secure, we continually work to protect your information.

12. Your Rights

Under UK data protection law, you have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Request deletion of your information
  • Restrict processing
  • Object to processing
  • Withdraw consent
  • Request transfer of your data where applicable
  • Complain to the Information Commissioner’s Office (ICO)

We aim to respond to requests within one month.

13. Children’s Privacy

Our website is not intended for children under the age of 13.

We do not knowingly collect personal information from children.

If we become aware that such information has been collected, we will delete it as soon as reasonably possible.

14. Third-Party Links

Our website may contain links to third-party websites.

We are not responsible for the privacy practices of those websites and encourage you to read their own privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be published on this page together with the revised date.

16. Contact Us

If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the details on our Contact page.

17. Information Commissioner’s Office (ICO)

If you are unhappy with how we have handled your personal information, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent authority for data protection.

We encourage you to contact us first so that we have the opportunity to resolve your concerns.

.