Privacy Policy

This Privacy Policy explains how The Art Shop Skipton collects, uses and protects personal data.

1. Who We Are

The Art Shop Skipton is the trading name of AMT Trading Limited, a company registered in England and Wales.

Registered address: 22 Newmarket Street, Skipton, North Yorkshire, BD23 2JB, United Kingdom.

Company number: 9439925. VAT number: GB886 7458 53.

For the purposes of UK data protection law, we are the data controller.

Contact: info@theartshopskipton.co.uk | 01756 701177.

2. What Personal Data We Collect

We may collect your name, billing and delivery address, email address, telephone number, order history, account login details, IP address and device data, marketing preferences, and transaction information.

We do not store full payment card details.

3. How We Collect Data

We collect personal data when you place an order, create an account, subscribe to marketing emails, abandon a shopping basket, contact us, leave a review, or browse our website through cookies and similar technologies.

4. Lawful Bases for Processing

We rely on contract where processing is necessary to process orders, deliver goods and manage your account.

We rely on legitimate interests for fraud prevention, customer service, improving website performance, sending review invitations, and limited abandoned basket reminders.

We rely on consent for marketing emails where required and for analytics and advertising cookies.

We rely on legal obligation for tax, accounting and related compliance requirements.

5. How We Use Your Data

We use personal data to process payments and deliver orders, provide customer support, prevent fraud, send order confirmations and service emails, send abandoned basket reminders, send marketing communications where permitted, request reviews, improve website functionality, and measure advertising performance.

6. Marketing Communications

If you purchase from us, we may send marketing emails about similar products under the soft opt-in rule, where applicable.

You may opt out at checkout, via the unsubscribe link in any email, or by contacting us directly.

We use Mailchimp to manage marketing communications.

Abandoned basket reminders may be sent where you have entered your email during checkout and have not opted out.

7. Payment Processing (Mollie & Klarna)

Payments are processed securely via Mollie.

Where you select Klarna or similar buy now, pay later options, your personal data will be shared with Klarna, which may carry out creditworthiness and fraud checks.

Klarna acts as an independent data controller for its own services and Klarna’s own privacy policy applies.

8. Reviews (Feefo)

After purchase, we may share limited order information such as name, email address and order reference with Feefo for the purpose of collecting service and product reviews.

You may opt out of review invitations.

9. Analytics & Advertising

We use Google Analytics (GA4), Google Ads and Meta Pixel.

These tools may track website behaviour, create remarketing audiences, measure advertising performance, and use hashed customer data for enhanced conversions where enabled.

These cookies and similar technologies are only activated with your consent.

10. Who We Share Data With

We may share data with payment processors including Mollie and Klarna, delivery providers such as Royal Mail and courier services, email marketing providers including Mailchimp, review platform providers including Feefo, analytics and advertising partners, and IT and hosting providers.

We do not sell personal data.

11. International Transfers

Some service providers may process data outside the UK. Appropriate safeguards, such as Standard Contractual Clauses, are used where required.

12. Data Retention

We retain order records for 6 years for legal and accounting reasons.

We retain marketing data until you unsubscribe.

We retain account data until account closure or prolonged inactivity review.

We securely delete or anonymise data when no longer required.

13. Automated Decision-Making

Fraud prevention tools and payment providers may use automated decision-making processes to detect suspicious transactions.

14. Children’s Data

Our website is not intended for children under 16. We do not knowingly collect data from children.

15. Your Rights

You have the right to access your personal data, correct inaccuracies, request erasure, restrict processing, object to processing, request data portability, and withdraw consent.

To exercise your rights, contact info@theartshopskipton.co.uk.

16. Security

We implement appropriate technical and organisational measures to safeguard personal data.