Privacy Policy — Rosewood Arts

1. Who We Are

This Privacy Policy explains how Rosewood Arts ("we", "us", "our"), operated by Sebastian Starostka, collects, uses, and protects your personal data when you visit rosewoodarts.com or place an order with us. We are the "data controller" for the purposes of UK GDPR.

2. What Data We Collect

When you place an order or create an account: name, email address, phone number (optional), delivery address, and details of what you ordered. Creating an account is entirely optional — you can check out as a guest.

When you contact us: your name, email address, and the content of your message.

When you pay online: your payment is handled directly by Stripe, our payment processor — we never see or store your full card number. We only keep a reference to the payment (a transaction ID) so we can match it to your order.

Automatically, when you browse the site: which pages you visit, which products you view, what you add to your basket, your approximate device type and browser, and which external site (if any) referred you here. This is collected by our own server — see Section 4, "Cookies & Analytics", for details on how this differs from typical website tracking.

3. How We Use Your Data

We use your data to: fulfil and deliver your order; send order and payment confirmations; respond to enquiries you send us; keep accounting and invoicing records as required by UK law; and understand which pages, products, and blog posts visitors find most useful, so we can improve the site.

The legal bases we rely on are: performance of a contract (processing your order), legitimate interest (site analytics, fraud prevention, and general site improvement), and legal obligation (keeping financial records).

4. Cookies & Analytics

We do not use third-party advertising or tracking cookies (no Google Analytics, no Facebook Pixel, nothing that follows you across other websites). The only cookies we set are strictly necessary ones — to remember what's in your basket and to keep you signed in if you have an account — and these do not require your consent under UK cookie law, because they're essential to the site working. See our Cookie Policy for the full list.

Our own analytics (which pages are visited, which products are viewed, where visitors came from) run entirely on our server, from information your browser already sends with every request. We do not store your IP address in these analytics records; where we determine your approximate country, we do so from your IP address at the moment of your visit without keeping it on file long-term.

5. Who We Share Your Data With

We share the minimum necessary data with: Stripe (to process your payment — see Stripe's own privacy policy), our email delivery provider (to send order confirmations and account emails), and our hosting provider (to run the website). We do not sell your data to anyone, and we do not share it for marketing purposes with third parties.

Some of these providers may process data outside the UK/EEA (for example, in the United States); where that happens, they do so under recognised safeguards such as Standard Contractual Clauses.

6. How Long We Keep Your Data

We keep order and invoice records for as long as required by UK tax and accounting law (currently up to 6 years). If you have an account, we keep your account details until you ask us to delete them. Contact form messages are kept only as long as needed to deal with your enquiry.

7. Your Rights

Under UK GDPR, you have the right to: access the personal data we hold about you; ask us to correct it if it's inaccurate; ask us to delete it (subject to our legal obligation to keep order/invoice records for accounting purposes); object to or restrict how we use it; and request a copy of it in a portable format.

To exercise any of these rights, email rosewoodarts@outlook.com. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), if you believe we haven't handled your data properly.

8. Children's Privacy

Our website and shop are not directed at children, and we do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this policy from time to time — for example, as the site gains new features. The version in force at the time you use the site is the one that applies.

10. Contact

Questions about this policy or your data? Get in touch at rosewoodarts@outlook.com or +44 7570 275746.