Privacy policy

This Privacy Policy describes how fineartcanvasx.shop collects, uses, discloses and protects personal information when customers visit our website, communicate with us or purchase products from our online store.

For privacy enquiries:

Email: info@fineartcanvasx.shop

Our Commitment to Privacy

We recognise that customers entrust us with personal information when browsing our store, creating or using account features, purchasing products, communicating with customer service or otherwise interacting with fineartcanvasx.shop.

We seek to handle that information lawfully, fairly and transparently.

This Privacy Policy is intended to reflect applicable UK data-protection requirements, including the UK GDPR, the Data Protection Act 2018, applicable Privacy and Electronic Communications Regulations requirements and amendments introduced by the Data (Use and Access) Act 2025.

The ICO confirms that all data-protection provisions of the Data (Use and Access) Act 2025 were in force by 19 June 2026.

Personal Information We May Collect

Depending on how you interact with fineartcanvasx.shop, we may collect information including:

Identity Information

Such as:

• Name;
• Account name; and
• Other identifiers associated with an order or customer account.

Contact Information

Such as:

• Email address;
• Delivery address;
• Billing address; and
• Other contact details voluntarily provided to us.

Order Information

Such as:

• Products purchased;
• Product variations;
• Order value;
• Order date;
• Returns;
• Refunds;
• Cancellations; and
• Customer service history.

Payment Information

Payments may be processed by third-party payment providers.

We may receive information relating to payment status, transaction identifiers, payment method type, fraud-screening results and other information necessary to administer transactions.

We generally do not need to store full payment-card credentials where they are processed directly by an authorised payment provider.

Device and Technical Information

Depending on the technologies used by our website, we may receive information such as:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Referring URL;
• Pages visited;
• Approximate geographic information derived from technical data;
• Cookie identifiers; and
• Information regarding interaction with the store.

Communications

If you contact us, we may retain information contained in your message and our response.

How We Obtain Personal Information

We may obtain personal information:

• Directly from you;
• Automatically when you use our website;
• Through Shopify, which hosts our ecommerce store;
• Through payment processors;
• Through shipping and fulfilment providers;
• Through analytics and security technologies;
• Through advertising or marketing platforms where legally permitted; and
• Through other service providers supporting store operations.

How We Use Personal Information

We may process personal information for purposes including:

• Processing purchases;
• Taking and verifying payment;
• Providing order confirmations;
• Fulfilling and delivering orders;
• Providing tracking or delivery information;
• Processing cancellations;
• Processing returns and refunds;
• Responding to customer enquiries;
• Providing customer support;
• Preventing fraud and abuse;
• Protecting website and account security;
• Maintaining business and transaction records;
• Complying with legal and tax obligations;
• Improving website functionality;
• Understanding store performance;
• Managing customer relationships;
• Sending marketing communications where legally permitted; and
• Establishing, exercising or defending legal claims.

Legal Bases for Processing

Where UK data-protection law requires us to identify a lawful basis, processing may rely on one or more of the following.

Performance of a Contract

We may process personal information where necessary to provide products or services requested by you, including processing payment, fulfilling an order and providing customer service associated with the transaction.

Legal Obligations

We may process information where required to comply with applicable tax, accounting, consumer-protection, regulatory or other legal obligations.

Legitimate Interests

We may process information where necessary for legitimate business interests and where those interests are not overridden by your rights and interests.

Examples may include:

• Preventing fraud;
• Protecting network and website security;
• Responding to customer enquiries;
• Improving our services;
• Maintaining appropriate business records; and
• Establishing or defending legal claims.

Consent

Where required, we may rely on your consent, including for certain marketing activities or uses of non-essential tracking technologies.

Where processing is based on consent, you may withdraw that consent subject to applicable law.

Shopify also recommends that UK merchants explain the legal basis for the purposes for which personal information is processed.

Shopify

fineartcanvasx.shop is hosted using Shopify.

Shopify provides ecommerce infrastructure that enables us to operate the store, display products, process transactions and provide related functionality.

As part of providing these services, information may be processed by Shopify and its authorised affiliates and service providers.

For UK customer information, Shopify states that relevant personal data is initially processed by Shopify International Limited in Ireland and may subsequently be processed by Shopify affiliates and subprocessors in accordance with applicable contractual and data-protection safeguards.

Where Shopify Consumer Services such as Shop or Shop Pay are used, Shopify may also process certain information in its own capacity under its applicable consumer privacy terms.

Sharing Personal Information

We may share personal information with service providers where reasonably necessary to operate the store.

These may include:

• Shopify;
• Payment processors;
• Fraud-prevention providers;
• Shipping carriers;
• Warehousing and fulfilment providers;
• Customer-service providers;
• IT and cloud-service providers;
• Analytics providers;
• Marketing providers where permitted;
• Professional advisers;
• Regulators;
• Courts; and
• Law-enforcement authorities where legally required.

We do not disclose personal information simply because a third party requests it. Disclosure is limited to circumstances where there is an appropriate operational or legal basis.

Cookies and Similar Technologies

Our website may use cookies, pixels, local storage and other storage or access technologies for purposes such as:

• Keeping the site operational;
• Remembering shopping-cart information;
• Maintaining security;
• Preventing fraud;
• Remembering preferences;
• Measuring website performance;
• Analytics; and
• Advertising or marketing where permitted.

UK requirements concerning cookies and similar technologies have been amended by the Data (Use and Access) Act 2025. Some limited categories of storage and access technology may now be used without consent where applicable statutory requirements are satisfied, while other uses—particularly certain advertising and tracking activities—remain subject to applicable consent requirements.

Where consent is legally required, we seek to obtain it through appropriate privacy controls.

Direct Marketing

Where permitted by law, we may send information about products, offers or store updates.

Electronic marketing is subject to applicable UK privacy and electronic communications requirements.

Where consent is required, marketing will be sent on the basis of that consent.

Customers may unsubscribe from marketing emails using the unsubscribe functionality provided in the communication or by contacting info@fineartcanvasx.shop.

Transactional communications relating to an existing order are not treated in the same way as optional promotional marketing.

International Transfers

Because ecommerce infrastructure, payment services, technical providers and other service providers may operate internationally, personal information may be transferred outside the United Kingdom.

Where UK data-protection law requires safeguards for international transfers, we seek to use providers and mechanisms intended to provide an appropriate level of protection.

Shopify states that international transfers from the UK are subject to legal mechanisms designed to provide protections required by applicable data-protection law.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal, operational and regulatory requirements.

Retention periods may depend on:

• Whether an order remains active;
• Customer-service requirements;
• Tax and accounting obligations;
• Fraud-prevention needs;
• Legal limitation periods;
• Contractual requirements; and
• Whether information is necessary to establish or defend legal claims.

When information is no longer reasonably required, it may be deleted, anonymised or securely disposed of in accordance with applicable requirements.

Security

We use reasonable organisational and technical measures intended to protect personal information against unauthorised access, unlawful processing, loss, alteration or disclosure.

However, no method of transmission over the internet and no electronic storage system can be guaranteed to be completely secure.

Customers are also responsible for maintaining the confidentiality of passwords or account credentials they control.

Your UK Data-Protection Rights

Subject to applicable legal requirements and exceptions, individuals may have rights including:

• The right to be informed;
• The right of access;
• The right to rectification;
• The right to erasure;
• The right to restrict processing;
• The right to data portability;
• The right to object to certain processing; and
• Rights relating to certain automated decision-making.

Where processing is based on consent, you may also have the right to withdraw consent.

To make a privacy request, contact:

info@fineartcanvasx.shop

We may need to take reasonable steps to verify identity before responding to a request.

Complaints

If you have concerns about our handling of your personal information, please first contact:

info@fineartcanvasx.shop

We will review privacy complaints in accordance with applicable data-protection requirements.

Individuals may also have the right to complain to the UK Information Commissioner's Office where applicable.

Children's Privacy

fineartcanvasx.shop is intended as a general ecommerce store and is not designed for the intentional collection of children's personal information without appropriate legal basis or safeguards.

Where we become aware that personal information has been collected in circumstances that do not comply with applicable requirements, we will take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy where necessary to reflect:

• Changes in law;
• Regulatory guidance;
• Shopify functionality;
• Store operations;
• Service providers;
• Technology; or
• Our data-processing practices.

The current version will be published on fineartcanvasx.shop with an updated revision date.

Contact

For privacy enquiries and data-protection requests:

fineartcanvasx.shop
Email: info@fineartcanvasx.shop