Privacy Statement.

Effective date: 2025

This Privacy Policy describes how Gill Lyon Art collects, uses, and protects your personal data when you interact with us — whether online, via email, or in person at events.

We are committed to respecting and protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR).

1. Who We Are

Gill Lyon Art is a independent artist based in Edinburgh, Scotland.

Contact:

You can contact us about this policy or your data at:

Email [email protected]

2. What Data we Collect

We may collect the following personal data from you:

Full name

Email address

Postal address (if required for delivery of products/orders)

Details of purchases or orders

Any information you provide via forms or direct communication

We do not collect or store payment information ourselves. All payments are processed securely through Etsy , Sum Up, Stripe — please refer to their privacy policies for more details.

3. How We Collect Your Data

We may collect data when you:

Make a purchase through our online store

Visit our stall and share your contact information voluntarily

4. Why We Collect Your Data (Legal Basis)

We collect and use your personal data for the following purposes:

To send you updates about markets, fairs, and events

To share new blog posts, products or special offers

To fulfil and communicate about your orders or inquiries

Our lawful basis for collecting your data is:

Consent – You have given us permission (e.g., by signing up to the mailing list)

Contract – To fulfil an order or respond to a purchase inquiry

Legitimate interest – e.g., marketing relevant to previous customers (you can opt out at any time)

5. How We Store and Protect Your Data

Your data is stored securely via trusted services including:

Mailchimp – for managing email newsletters

Etsy - for fulfilling orders

Big Cartel - for fulfilling orders

Stripe - for processing payments

Sum Up - for processing payments

We take appropriate steps to protect your data from unauthorised access, alteration, or disclosure. Access is limited to only those who need it to provide our services.

6. Sharing Your Data

We do not sell, rent, or trade your personal information.

We only share your data with:

Trusted third-party providers (e.g., Mailchimp, payment processors, shipping partners), solely for the purpose of fulfilling our services.

These providers are GDPR-compliant and only process data on our behalf.

7. Your Rights Under GDPR

You have the right to:

Access a copy of your personal data

Correct inaccurate or incomplete data

Request deletion of your data ("right to be forgotten")

Withdraw your consent at any time

Object to processing in certain cases

Lodge a complaint with the Information Commissioner's Office (ICO)

To make a request, contact us at [email protected]

8. Email Marketing & Unsubscribing

If you have subscribed to our newsletter, you can unsubscribe at any time by:

Clicking the “unsubscribe” link at the bottom of any marketing email

Emailing us at [email protected] with your request

We aim to process unsubscribe requests promptly.

9. Cookies

Our website uses cookies to provide a better browsing experience and to analyse website traffic. You can adjust your browser settings to disable cookies, though this may affect how the website functions.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The most current version will always be available on our website or by request. If we make significant changes, we’ll notify you via email where appropriate.

Questions?

We take privacy seriously. If you have any concerns or questions about this policy or how your data is used, please email us at [email protected]