Privacy Policy
Last updated: 30 April 2026
This Privacy Policy explains how alphabet-art.com (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you visit the Site, send us an email, or interact with cookie and storage technologies we control. It should be read together with our Cookie Policy and Terms of Service. We aim to process data fairly, lawfully, and transparently in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) where they apply.
Who is responsible for your data
The data controller for personal data processed through this Site is the publisher identified on the contact page. If you have questions about this Policy or wish to exercise your rights, please contact us using the details in the “Contact” section below.
Categories of personal data we process
Depending on how you use the Site, we may process: technical identifiers such as IP address, user agent string, device type, operating system, language preferences, and approximate location derived at regional level from IP data; usage information such as pages viewed, referring URL, timestamps, and click paths; communications data if you email us, including your email address, message content, and attachments; and records of cookie or local storage choices together with timestamps of consent or withdrawal.
Purposes and legal bases
We process technical and usage data on the basis of legitimate interests to operate, secure, and improve the Site, to detect fraud or abuse, to measure aggregate traffic, and to maintain reliable hosting. Where we rely on legitimate interests, we balance our interests against your rights and offer opt-outs where required by law. Where UK GDPR requires consent for non-essential cookies or similar technologies, we will obtain consent before activating those technologies and record your choice. If you email us, we process your contact details and message on the basis of legitimate interests to respond to your enquiry, and where your message relates to a contract or pre-contractual steps, we may also rely on performance of a contract.
Cookies and similar technologies
We use cookies, local storage, and session storage as described in our Cookie Policy. Essential technologies are needed for basic functions such as security, load balancing, and remembering your cookie preference. Optional technologies may remember simple UI preferences or help us understand aggregate usage. You can manage cookies through your browser settings; blocking essential cookies may affect Site functionality.
Recipients and processors
We use hosting, email, security, and analytics providers who process data on our instructions under written agreements that require appropriate technical and organisational measures. Some providers may be located outside the United Kingdom; where data is transferred internationally, we rely on adequacy decisions or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, or other mechanisms recognised under UK GDPR.
Retention
Server logs and security records are retained only as long as necessary for incident investigation and defence of legal claims, typically not longer than twelve months unless a longer period is required by law. Email correspondence is retained for as long as needed to complete your request and for a reasonable period afterwards for quality assurance and legal compliance. Cookie consent logs are retained to demonstrate compliance with PECR.
Your rights
Subject to conditions in UK GDPR, you may have the right to access your personal data, rectify inaccuracies, erase data in certain circumstances, restrict processing, object to processing based on legitimate interests, and receive a machine-readable copy of data you provided where processing is based on consent or contract. You may withdraw consent at any time where processing is consent-based, without affecting the lawfulness of prior processing. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO). We encourage you to contact us first so we can try to resolve your concern.
Automated decision-making
We do not use solely automated decision-making, including profiling, that produces legal or similarly significant effects on you in relation to the Site.
Children
The Site is not directed at children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided data, please contact us and we will take reasonable steps to delete it.
Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. No internet transmission is completely secure; you use the Site at your own risk beyond the measures we describe.
Changes to this Policy
We may update this Privacy Policy to reflect legal, technical, or business changes. The “Last updated” date will change when revisions are published. Material changes may be highlighted on the Site where practicable.
Contact
Privacy questions and data subject requests: info@alphabet-art.com