Privacy Policy

1. Introduction

This privacy policy explains how I collect, use, and protect your personal information when you visit joyfoulds.com or make a purchase. I'm committed to keeping your data safe and only using it for the purposes described here. If you have any questions, you can reach me at joyfouldsart@gmail.com

For the purposes of UK data protection law, Joy Foulds is the "data controller" of the personal information you provide.

2. What information I collect

Depending on how you use this site, I may collect:

  • Your name, email address, postal address, and phone number, if you make a purchase, contact me, or sign up to a mailing list.

  • Payment information - this is processed directly by PayPal and/or Stripe; I don't see or store your full card details on my own systems.

  • Order details, such as what you've bought and shipping preferences.

  • Technical information such as your IP address, browser type, and how you use the site, collected automatically via cookies and analytics tools (see below).

3. How I use your information

I use your information to:

  • Process and fulfil your orders, including arranging shipping and handling payment.

  • Respond to enquiries and provide customer service.

  • Send you updates about your order (e.g. dispatch confirmation).

  • Send you marketing emails about new work or exhibitions, but only if you've opted in — you can unsubscribe at any time via the link in any email, or by contacting me directly.

  • Improve this website, based on aggregated, anonymised browsing data.

  • Prevent fraud and comply with legal obligations (e.g. keeping financial records).

I rely on performance of a contract (to process your order), your consent (for marketing emails and non-essential cookies), and legitimate interest (to run and improve the site) as the legal grounds for these uses, as required under UK GDPR.

4. Cookies

This site uses cookies — small files stored on your device — to:

  • Remember items in your shopping basket.

  • Understand how visitors use the site, via Google Analytics / Squarespace Analytics

  • Track visits from social media or ad platforms, via Facebook/Meta Pixel

Cookies that aren't strictly necessary for the site to function (such as analytics or advertising cookies) will only be set with your consent, via the cookie banner shown when you first visit. You can change your cookie preferences at any time via the cookie settings link in the footer.or through your browser settings.

5. Sharing your information

I don't sell your personal information. I share it only with:

  • Payment processors (PayPal, Stripe) — to process your payment securely.

  • Squarespace, as the platform that hosts this website and its e-commerce functionality.

  • Delivery couriers, e.g. Royal Mail/Parcel Force — to deliver your order.

  • Email marketing platform, if used, e.g. Mailchimp/Squarespace Email Campaigns — if you've subscribed to updates.

  • Law enforcement or regulators, if required by law.

Each of these third parties has its own privacy policy governing how it handles your data.

6. How long I keep your information

  • Order and transaction records are kept for 6 years, in line with UK tax and accounting requirements.

  • Marketing contact details are kept until you unsubscribe or ask me to delete them.

  • Comment data, if applicable: kept indefinitely to help recognise genuine repeat commenters, unless you ask for it to be removed.

7. Your rights

Under UK GDPR, you have the right to:

  • Ask what personal information I hold about you, and get a copy of it.

  • Ask me to correct inaccurate information.

  • Ask me to delete your information, where I'm not required to keep it for legal reasons.

  • Object to or restrict certain uses of your data, including marketing.

  • Ask for your data in a portable format.

  • Withdraw consent at any time, where I rely on consent (e.g. marketing emails, non-essential cookies).

To exercise any of these rights, email joyfouldsart@gmail.com If you're unhappy with how your data has been handled, you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office.

8. Children's data

This website is not directed at, and I don't knowingly collect personal information from, children under 13.

9. Security

I take reasonable technical and organisational measures to protect your personal information, including using a securely-hosted platform Squarespace with SSL encryption, and processing payments through established third-party providers rather than handling card details myself directly.

10. Changes to this policy

I may update this policy from time to time; the "last updated" date below will reflect the most recent version. Please check back periodically.

Last Updated: 5th September 2026