PRIVACY POLICY

Last updated: August 2026 | Compliant with UK GDPR, EU GDPR & ePrivacy Directive

This privacy policy describes how and when Alex Ashton Art ("I", "me", "my", "the business") collects, uses, and shares information when you purchase an item, contact the business, or otherwise use services provided through this website.
This policy does not apply to the practices of third parties that are not owned or controlled by Alex Ashton Art, including Wix, delivery couriers, or third-party payment providers.

1.1 Lawful Basis and Personal Data Collected

Under UK & EU data protection laws, personal data is processed under the following lawful bases:
Contractual Necessity: To fulfill your order, process payment, send transaction updates, and arrange
physical delivery.
Legal Obligation: To comply with tax, customs, and financial reporting requirements (e.g., maintaining sales ledgers for official accounting).
Legitimate Interests: To provide tailored customer care, respond to inquiries, and improve shop offerings.
Consent: For optional communications, such as email newsletters, which you can withdraw at any time.
Personal Data Collected Includes: Full name, shipping address, billing address, email address, transaction details, purchased items, and any custom notes/commission instructions provided.

1.2 Payment Processing, Disclosure & International Transfers

Financial transactions are processed through Wix and integrated third-party payment gateways (e.g., Stripe, PayPal). Alex Ashton Art does not store or have access to full credit card numbers or banking passwords.
Personal data is shared strictly on a need-to-know basis with trusted service providers:
Delivery Couriers: Royal Mail, DHL, or national postal services to dispatch and deliver physical artwork.
Platform & Hosting: Wix.com for site operations, order management, and form submissions.
Legal Compliance: Tax authorities (HMRC), legal counsel, or regulatory bodies if required by applicable law, regulation, or court order.
International Data Transfers: Wix hosts data globally on secure servers. Where personal data is transferred outside the UK or EEA, appropriate safeguards (such as UK International Data Transfer Agreements or EU Standard Contractual Clauses) are utilized to protect your information.

​​​

1.3 Data Retention & Deletion

Personal data is retained only for as long as necessary to fulfill the operational purposes for which it was collected, complete transaction requirements, and satisfy statutory accounting/tax rules (typically retained for up to 6–7 years following transaction completion under UK tax regulations).

1.4 Your Statutory Rights

Residents of the UK, EU, and certain other jurisdictions hold specific rights regarding personal data:
Access & Portability: Request a copy of the personal information held about you.
Rectification: Request correction or updates to incomplete or inaccurate data.
Erasure ("Right to be Forgotten"): Request deletion of data, except where retention is required by statutory legal/tax duties.
Object & Restrict: Object to processing based on legitimate interests or request restrictions on processing.
Withdraw Consent: Withdraw consent for marketing at any time via unsubscribe links or direct contact.
Lodge a Complaint: You have the right to lodge a complaint with your supervisory authority (e.g., Information Commissioner's Office - ICO in the UK).

1.5 Cookies & Tracking Technologies

This website utilizes essential and non-essential cookies via Wix to guarantee security, analyze website functionality, and enable navigation.
Cookie Name Type / Category Purpose Duration
XSRF-TOKEN Essential Security Prevents Cross-Site Request Forgery attacks Session
hs Essential Security Ensures site security and data protection Session
svSession Essential Functional Connects visitor login sessions 2 Years
SSR-caching Essential Performance Indicates platform system rendering node 1 Minute
_wixCIDX System / Debug System monitoring and error logging 3 Months
_wix_browser_sess System / Debug System monitoring and session state Session
consent-policy Essential Functional Remembers user cookie banner preference 12 Months
smSession Essential Functional Identifies logged-in site members Session
TS* Essential Security Fraud prevention and bot identification Session
bSession Analytics & Performance Measures site loading effectiveness 30 Minutes
fedops.logger.sessionId Analytics & Performance Measures platform stability and metrics 12 Months​​​​​​