Privacy Policy (UK GDPR Compliant)

Effective Date: 07.12.2025

1. Who I Am

This website (artelabochenek.com) is operated by Ela Bochenek (“I”, “me”, or “my”). Your privacy matters, and this policy explains how your personal information is collected, used, and protected when you visit my site or place an order.

2. What Data I Collect

2.1 Information You Provide Directly

When you interact with my website, you may provide:

  • Name and email address (when using the contact form)

  • Shipping address and billing address (when placing an order)

  • Payment details (processed securely by Stripe or PayPal — I never see your full card details)

  • Order information (products purchased, order notes, etc.)

I use this information only to:

  • respond to enquiries

  • process and fulfil your order

  • communicate about your purchase

  • comply with UK legal obligations (e.g., basic record keeping)

I do not sell or share your personal data for marketing.

2.2 Automatically Collected Information

When you visit my website, Squarespace automatically collects:

  • IP address (anonymised)

  • browser type and device information

  • pages viewed and time spent on the site

  • referring website links

  • general location (city-level only)

This helps me understand how my website is being used and improve its performance.

3. Cookies

This site uses cookies for:

  • Squarespace Analytics

  • basic site functionality (essential cookies)

  • optional third-party integrations (e.g., embedded Instagram content)

You can disable cookies in your browser settings. Some features may not work without them.

4. Third-Party Services

I rely on trusted third-party services to operate my website and shop:

  • Squarespace (website hosting and store platform)

  • Stripe (payment processing)

  • PayPal (payment processing, if enabled)

  • Couriers (order fulfilment and delivery)

  • Substack (linked external writing platform)

These services process data under their own privacy policies. I only share the minimum information required for them to provide their service (e.g., your name and address for shipping).

I never share your data with outside companies for advertising.

5. How Your Data Is Used

Your data is used only to:

  • process and deliver your order

  • communicate with you about your purchase

  • respond to messages sent through the contact form

  • maintain accurate business records as required by UK law

  • improve the functionality and usability of my website

I do not use your data for email marketing unless you explicitly sign up for a mailing list (I currently do not run one).

6. Lawful Basis for Processing

Under UK GDPR, the lawful bases I rely on include:

  • Contract — to process and fulfil your order

  • Legitimate interest — to maintain website security, prevent fraud, and improve site performance

  • Consent — when you submit your information through the contact form

  • Legal obligation — basic business record-keeping for HMRC

7. Data Retention

I keep:

  • order information for up to 6 years (required for tax and accounting)

  • contact form messages for up to 12 months

  • analytics data for standard Squarespace/Google retention periods (anonymised)

You can request deletion of your data at any time unless I’m legally required to keep it.

8. Your Rights

You have rights under the UK GDPR, including:

  • the right to access your data

  • the right to correct inaccurate information

  • the right to request deletion

  • the right to object to processing

  • the right to restrict processing

  • the right to withdraw consent (where applicable)

To make a request, contact me at: art.elabochenek@gmail.com

9. Changes to This Privacy Policy

I may update this policy from time to time. Any changes will be posted on this page with an updated effective date.

10. Contact

If you have questions about this privacy policy, contact:

📧 art.elabochenek@gmail.com