How your information is handled
Privacy
Last updated 29 August 2026
This site is run by one artist selling prints of her own paintings. It collects as little as it can, keeps it for as short a time as it can, and never sells it to anybody. This notice explains exactly what that means.
The person responsible for your information is the artist trading as The Secret Artist NW5. Reach her at secretartistnw5@gmail.com.
What is collected, and why
| Information | When | Why |
|---|---|---|
| Name and email address | You send an enquiry or place an order | To reply, and to arrange the order |
| Delivery address | You place an order | To post the print to you |
| What you wrote in the message | You send an enquiry | To answer it |
| Payment details | You pay by card | Handled entirely by Stripe. They are never sent to this site and the artist never sees them. |
| Your IP address | Any visit | Held briefly to count requests, so the site can block password guessing and message flooding |
There is no advertising and no tracking on this site. Nothing follows you around the internet afterwards. Visits are counted with Vercel Web Analytics, which uses no cookies and does not identify you: it records which pages are viewed, the referring site, and your country and device type, aggregated so no individual visitor can be picked out. The only cookie set is the one that keeps the artist signed in to her own admin area, which is strictly necessary and is why you have not been asked to accept cookies.
The lawful basis
- Performing a contract — your name, email and delivery address, so an order you placed can actually reach you.
- Legitimate interests — replying to enquiries, and keeping the site secure by rate limiting.
- Legal obligation — keeping records of sales for as long as tax law requires.
Who else handles it
Running a small shop means using a handful of services. Each one only receives what it needs to do its job:
- Vercel — hosts the site. Sees the usual web server information, including IP addresses.
- Supabase — the database behind the artist's admin area. Holds catalogue information about paintings, and short-lived request counts. No customer names or addresses.
- Resend — delivers enquiries and orders to the artist's inbox, so it processes what you type into those forms.
- Stripe — takes card payments. Your card details go straight to Stripe and never touch this site.
- OpenStreetMap — supplies the map tiles on the map page. Loading a map means your browser requests images from them, so they see your IP address. Don't open the map page if you would rather they didn't.
Some of these are based outside the United Kingdom. Where information leaves the UK it is protected by the standard safeguards those providers have in place. Your information is never sold, rented or shared for marketing.
How long it is kept
- Enquiries: kept in the artist's inbox while the conversation is useful, then deleted.
- Orders: kept for six years, because tax records have to be.
- Request counts used for rate limiting: deleted after a day.
What you can ask for
Under UK data protection law you can ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted, object to it being used, or ask for it in a portable form. Email secretartistnw5@gmail.com and you will get a reply within a month, usually much sooner.
If you are unhappy with how it is handled you can complain to the Information Commissioner's Office at ico.org.uk.
Children
This site sells art prints and is not aimed at children. Information is not knowingly collected from anyone under 16.
Changes
If this notice changes, the date at the top changes with it. See also the terms of sale.