Privacy Policy

Last updated: January 2026

Who we are

This website is operated by Sam Cannon Art. We sell artwork and related products through our online store.

If you have any questions about this Privacy Policy or how your personal information is handled, you can contact us at:

samantha_cannon@hotmail.co.uk

What personal information we collect

When you place an order, we collect the information needed to process your payment and deliver your order. This may include:

  • your name;
  • your email address;
  • your billing address;
  • your delivery address;
  • details of the items you ordered;
  • payment and transaction information processed by Stripe.

We do not store your full card details on our own systems. Payment details are processed securely by Stripe.

How we use your information

We use your personal information to:

  • process and fulfil your order;
  • take payment securely through Stripe;
  • send order confirmations and important order updates;
  • arrange delivery;
  • handle refunds, returns, support requests, and disputes;
  • keep accounting, tax, and financial audit records;
  • protect our business from fraud or misuse.

We do not use your checkout information for email marketing, SMS marketing, or telephone marketing.

Our lawful basis for using your information

Under UK data protection law, we need a lawful basis to use your personal information.

  • Contract: we use your information to process your order, take payment, and deliver your purchase.
  • Legal obligation: we keep certain order and transaction records for accounting, tax, and audit purposes.
  • Legitimate interests: we may use limited order information to manage refunds, disputes, chargebacks, fraud prevention, and customer support.

Who we share your information with

We only share personal information where necessary to run our store, process payments, deliver orders, or comply with legal obligations.

This may include:

  • Stripe, for secure payment processing;
  • delivery or shipping providers, to deliver your order;
  • website, hosting, or technical service providers;
  • professional advisers where needed for accounting or legal matters;
  • authorities where required by law.

We do not sell your personal information.

Stripe payments

We use Stripe to process payments. Stripe may collect and process payment information, billing details, transaction details, and fraud-prevention information when you complete a purchase.

You can read more about how Stripe handles personal information in Stripe's own privacy policy.

Your rights

Depending on the circumstances, you may have the right to:

  • access the personal information we hold about you;
  • ask us to correct inaccurate information;
  • ask us to delete information where we no longer need it;
  • object to certain uses of your information;
  • ask us to restrict how we use your information;
  • request a copy of your information in a portable format.

Some information may need to be retained where we have a legal obligation or legitimate business reason, such as accounting, audit, dispute, or fraud-prevention records.

Security

We take reasonable steps to protect your personal information. Our payment processing is handled by Stripe, and administrative access to payment systems is protected using two-factor authentication.

We aim to limit access to personal information to those who need it to fulfil orders, manage payments, provide support, or meet legal obligations.

Complaints

If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the UK Information Commissioner's Office.

Back to home