Privacy Policy

Who we are

This website is operated by Sven Norris, trading as Sven Norris Art (svennorrisart.com). Sven Norris is the data controller for any personal information collected through this site.

You can contact us at: svennorris.art@gmail.com

What information we collect

We only collect information that is necessary to provide our services. This may include:

• Your name, email address, and message when you contact us via the enquiry form
• Your name, email, billing and shipping address when you purchase a print
• Payment information — handled entirely by Stripe (we never see or store your card details)

We do not use tracking pixels, advertising networks, or behavioural analytics. We do not collect information about your browsing beyond what is necessary to process your order or respond to your enquiry.

How we use your information

We use the information you provide to:

• Process and fulfil your print order, including arranging shipping
• Respond to your enquiries or commission requests
• Issue a Certificate of Authenticity where applicable
• Comply with our legal obligations (e.g. financial records)

We will not use your information for marketing purposes without your explicit consent, and we will never sell your data to third parties.

Third-party services

We use a small number of trusted third-party services to operate this website:

• Stripe — processes all payments securely. Your payment details are handled directly by Stripe and are subject to their Privacy Policy.
• Supabase — our database provider, used to store order and enquiry information. Data is stored on servers within the EU.
• Vercel — hosts this website. No personal data is stored by Vercel beyond standard server logs.

Cookies

This website uses only the cookies necessary for it to function. We do not use advertising or tracking cookies. No cookie consent banner is required as we do not use non-essential cookies.

How long we keep your data

Enquiry messages are retained for as long as necessary to respond to your enquiry and for reasonable follow-up. Order information is retained for seven years in line with UK HMRC requirements. You may request deletion of your personal data at any time, subject to our legal obligations.

Your rights

Under the UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (where no legal obligation to retain it exists)
• Object to or restrict our processing of your data
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, please contact us at svennorris.art@gmail.com.

Changes to this policy

We may update this policy from time to time. The date at the top of this page will reflect the most recent revision. Continued use of the site after changes are posted constitutes acceptance of the updated policy.