This Privacy Policy describes how Karen Sutton Art (“we”, “us”, “our”) collects, uses, shares, and safeguards your information.

Overview

This Privacy Policy applies to our website, applications, products, and services that link to this policy or otherwise refer you to this policy (collectively, our “Services”).

Information Collection and Use

Personal Data

What information do we collect?
We may collect and process the following data about you:

     

      • Your name, your business name, telephone number, and email address.

      • Additional information that is provided by you filling in forms on our website or at exhibitions/events or over the telephone. This includes information provided at the time of registering to use our site, subscribing to our services, posting material, or requesting further services or information. We may also ask you for information when you report a problem with our Website.

      • If you contact us, we may keep a record of that correspondence.

      • Details of transactions you carry out through our site and of the fulfilment of your orders.

      • Details of your visits to our website and emails received including, but not limited to:
        traffic data
        location data
        web logs
        other communication data, whether this is required for our own billing purposes or otherwise.

    In addition, we may collect information about your computer, including where available your IP address, operating system, and browser type, for system administration.

    Non-Personal Data

    We may also collect non-personal data, which is data that cannot be directly linked to an individual. This includes browser and device information, application usage data, information collected through cookies, pixel tags, and other technologies, and demographic information.

    Use of Information

    We use the information we collect for purposes including:

       

        • Providing, maintaining, and improving our Services.

        • Processing transactions and sending related information.

        • Responding to user inquiries and providing customer support.

        • Conducting research and analysis.

        • Ensuring network and information security.

      Information Sharing

      We may share your personal information with third parties under the following circumstances:

         

          • With your consent.

          • With third-party vendors and other service providers that perform services on our behalf.

          • If we believe disclosure is necessary to comply with relevant laws, to respond to legal requests, or to protect our rights, property, or safety.

          • In connection with any merger, sale of company assets, or acquisition.

        Cookies and Tracking Technologies

        We may use cookies, analytics services (such as Google Analytics), logs, and various other tracking technologies to automatically collect information. You have the right to disable cookies at your browser level, though this may affect your ability to use certain features of our Services.

        Security

        We employ reasonable physical, technical, and administrative measures designed to safeguard the information we collect. However, no security measure is 100% secure, and we cannot guarantee the absolute security of your information.

        Your Rights and Choices

        Depending on your location, you may have certain rights in relation to your personal information. These may include: the right to access, rectification, erasure, restrict processing, or object to processing of your personal data, and the right to data portability.

        Children’s Privacy

        Our Services are not directed to individuals under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.

        GDPR Notice

        Legal Basis for Processing Personal Data

        Under the General Data Protection Regulation (GDPR), we must have a legal basis to process your personal information. We process your information on the following legal bases:

           

            • You have consented to the use of your personal information. For example, we may seek to obtain your consent for our uses of cookies.

            • We need your personal information to provide you with services and products requested by you, or to respond to your inquiries.

            • We have a legal obligation to use your personal information.

            • We have a legitimate interest in using your personal information.

          Transfers of Personal Data

          The personal data that we collect from you may be stored and processed in your region, or transferred to, stored at or otherwise processed outside the European Economic Area (“EEA”), including but not limited to the United States, where we have our data centers.

          of Personal Data

          We will retain your personal information for as long as necessary to provide our services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

          Data Subject Rights

          Under the GDPR, you have the following rights:

             

              • Right to Access: You have the right to request access to your personal data that we hold.

              • Right to Rectification: You have the right to correct any inaccurate personal data about you and to complete any incomplete personal data about you.

              • Right to Erasure (the “Right to be Forgotten”): In certain circumstances, you have the right to the erasure of your personal data from our systems.

              • Right to Restrict Processing: In certain circumstances, you have the right to restrict the processing of your personal data.

              • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.

              • Right to Object: In certain circumstances, you have the right to object to the processing of your personal data.

              • Right to Withdraw Consent: If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time.

            Exercising Your GDPR Data Protection Rights

            You may exercise any of your rights in relation to your personal data by written notice to us addressed to the following: admin@karensuttonart.co.uk

            Data Protection Officer

            We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact the DPO at admin@karensuttonart.co.uk.

            Changes to this Privacy Policy

            We reserve the right to modify this Privacy Policy at any time.

            Contact Us

            If you have any questions about this Privacy Policy, please contact us at admin@karensuttonart.co.uk.

            Last updated: 28/03/2026