Privacy

Controller and contact

Insignia Creative Ltd is the controller for personal information used to operate ArtFart. Our address is 2 Marble Court Business Park, Lymington Road, Torquay, Devon TQ1 4FB. Contact info@artfart.co.uk about privacy or your information.

Information we collect

We collect contact and delivery details, order selections, uploaded artwork and filenames, crop settings, order notes, payment references and status, correspondence and delivery tracking details. Artwork may itself contain personal information. Please avoid uploading unnecessary personal or sensitive information about yourself or others.

Essential session information associates your uploads and basket with your browser. The current ArtFart session cookie lasts up to 90 days. Authorised administrators sign in through ChatGPT.

How and why we use it

We use information to manage your basket, fulfil orders, take payment, deliver prints and answer enquiries. Our lawful basis is taking steps at your request before a contract and performing that contract.

We keep legally required financial records under legal obligations. Necessary security, fraud prevention and proportionate handling of complaints or legal claims rely on legitimate interests, balanced against your rights. Any optional marketing will require an appropriate separate permission and an easy way to stop it.

Sharing and payments

We share the information needed for fulfilment with our website hosting and storage providers, payment providers and delivery carrier. Stripe processes checkout payments and PayPal processes payments where selected. We receive payment references and status rather than storing complete card details. Royal Mail receives the delivery details needed for your parcel. Website hosting is provided through OpenAI Sites using Cloudflare storage. Resend sends website emails and 20i hosts our contact mailbox.

Access to artwork and orders is limited to authorised personnel and necessary service providers. We do not publish customer artwork in the ArtFart Wall without separate permission.

Retention

Artwork files are deleted three calendar months after fulfilment. Unpurchased uploads are deleted after 30 days of inactivity. Background cleanup runs when the website is used, so removal may occur at the next cleanup after the retention period. Relevant files may be held while a complaint or legal claim is unresolved.

Necessary invoices and transaction records are retained for six years from the end of the relevant company financial year, longer where required by law. Routine enquiries are retained for 12 months after resolution unless needed for a complaint or claim. These records are separate from artwork files.

Sent website email records are removed from our application after 30 days. Resend states that email and delivery logs on its standard plans are retained for 30 days, with backups lasting seven days. Provider-managed security logs and backups follow the applicable service retention cycles. Our operational target for logs and rolling backups is 30 days where settings permit; this is not a guarantee of a 30-day limit for every provider copy. We reapply deletions if data is restored.

Our team also applies the artwork retention period to files downloaded for production. Please contact us if you want to exercise a deletion right; legally required records and necessary claim records may need to be retained.

International processing

Our providers may process information outside the UK, including in the United States. OpenAI’s ChatGPT Sites data-processing terms provide standard contractual clauses with the UK Addendum for UK hosted data. Resend stores email content and delivery data in the US and provides contractual clauses with the UK Addendum, together with its stated Data Privacy Framework participation. 20i’s agreement covers UK and EEA processing and safeguarded transfers where required. You can contact info@artfart.co.uk for information about these safeguards.

Cookies

The essential artfart_session cookie connects your uploads and basket to your browser and lasts up to 90 days. You can delete it through your browser settings, but doing so may prevent access to your existing basket and uploads. If you accept analytics cookies, Google Analytics (measurement ID G-MTZ06N50H6) measures visits to our public information pages so we can improve the website. Our lawful basis for this optional analytics is consent. Google may process analytics information outside the UK. Analytics is disabled on basket, upload, checkout, order and admin pages to protect order and artwork details. We do not enable Google advertising signals or personalised advertising. Your choice is saved in your browser for six months and you can change it using Cookie settings. Analytics cookies (_ga and _ga_*) are configured to last up to six months. Rejecting analytics does not affect ordering. Stripe and PayPal may use their own cookies on their payment services.

Your rights

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your information and object to processing based on legitimate interests. Where we rely on consent, you can withdraw it. These rights have legal exceptions. Email info@artfart.co.uk; we normally respond within one month.

You can complain to the Information Commissioner's Office at [ico.org.uk](https://ico.org.uk/make-a-complaint/) or raise the matter with us first.