Privacy Policy — www.joannagoodwin.art
Last updated: April 16, 2026
1. Introduction Joanna Goodwin (“we”, “us”, “our”) is committed to protecting your privacy and complying with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, share, and protect personal data on www.joannagoodwin.art and your rights in relation to that data.
2. Data controller The data controller for personal data collected via this website is Joanna Goodwin. Contact: info@joannagoodwin.art and postal address: 58 Belgrave Road, Seaford, East Sussex, UK
3. Personal data we collect
We may collect the following categories of personal data:
Identity and contact: name, email address, postal address, telephone number when you provide them (e.g., contact form, commission inquiries, newsletter sign-up).
Transaction and service information: details of purchases or commissions, billing and delivery information, payment confirmations (we do not store full payment card details).
Communications: messages you send via contact forms or email, and our replies.
Technical and usage data: IP address, browser type and version, device information, pages visited, referral source, and other analytics data collected via cookies and similar technologies.
Marketing preferences: opt-in/opt-out preferences for newsletters or other marketing communications.
a. How we collect personal data
b. Directly from you when you contact us, sign up for newsletters, purchase artwork or commissions, or interact with the site.
c. Automatically via cookies and analytics when you browse the site.
d. From third parties only where necessary (e.g., payment processors, mailing list providers).
e. Legal bases for processing We process personal data only where we have a lawful basis, which may include:
i. Contract performance: to fulfill orders, commissions, or other services you request.
ii. compliance: to meet legal obligations.
a. Legitimate interests: for site security, fraud prevention, improving the website, and protecting our business (balanced against your rights).
9. Consent: where we rely on consent (for marketing communications or non-essential cookies). You may withdraw consent at any time.
a. How we use personal data We use personal data to:
b. Respond to enquiries and manage commissions or sales.
c. Process payments and fulfil orders.
d. Send transactional emails (order confirmations, shipping notices) and, where consented, newsletters and promotional communications.
e. Provide customer service and support.
f. Improve and personalize the website and user experience.
g. Monitor and protect the site for security and fraud prevention.
h. Comply with legal obligations.
10. Sharing personal data
a. We may share personal data with:
i. Service providers that perform functions on our behalf (payment processors, web hosting, analytics, email marketing providers).
ii. Professional advisors where necessary (accountants, lawyers).
iii. Law enforcement or regulators when required by law or to protect our rights. We require third-party processors to protect your data and process it only as instructed.
iv. International transfers Where personal data is processed or stored outside the UK (for example, by third-party service providers), we will ensure appropriate safeguards are in place (such as standard contractual clauses or other lawful transfer mechanisms) to protect your data.
11. Cookies and similar technologies
a. We use cookies and similar technologies to operate the site, analyse usage, and support marketing. Essential cookies are required for site functionality. Non-essential cookies (analytics, advertising) are used only with your consent. You can manage or withdraw cookie consent via your browser settings or the site’s cookie control tool.
12. Data retention
a. We retain personal data only as long as necessary for the purposes set out in this policy or to meet legal, accounting, or reporting requirements. Retention periods vary by data type (e.g., transactional records retained for statutory periods; marketing data retained until consent is withdrawn).
13. Your rights
a. Subject to applicable law, you have rights in relation to your personal data, including the right to:
i. Request access to your personal data.
ii. Request correction of inaccurate data.
iii. Request deletion of your data (where we are not required to retain it).
iv. Request restriction of processing.
v. Object to processing based on legitimate interests or for direct marketing.
14. Data portability (where applicable).
a. To exercise any rights, contact us at info@joannagoodwin.art We may need to verify your identity before acting on requests.
15. Security
a. We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. However, no internet transmission is completely secure; we cannot guarantee absolute security.
16. Children
a. The site is not intended for children under 13.
i. We do not knowingly collect personal data from children under 13.
ii. If you believe we have collected such data, contact us and we will delete it.
17. Third‑party links
a. The site may contain links to third‑party websites. We are not responsible for their privacy practices. Review their privacy policies before providing personal data.
18. Changes to this policy
a. We may update this Privacy Policy from time to time. We will publish the updated policy on the site with a revised “Last updated” date.
19. Complaints
a. If you have a complaint about how we handle your personal data, please contact us at [insert contact email]. You also have the right to complain to the UK Information Commissioner’s Office (ICO).
20. Contact details
a. Email: info@joannagoodwin.art Postal address: 58 Belgrave Road, Seaford, East Sussex, BN25 2EN, UK