Effective Date - 16/10/2025

Last Updated - 16/10/2025

Privacy Policy

Welcome to our site. We are committed to protecting your privacy. Please take a moment to read this carefully.

The Painless Artist ("We", "Our", "Us", "Wayne Howard-Saunders", "Wayne") is the data controller for your personal data.

This Privacy Policy ("Policy") governs and explains the use of data (including but not limited to personal data) on this website ("www.thepainlessartist.co.uk").

Please read this Policy carefully, to ensure you understand how we collect, process, use, store, and protect your personal data in accordance with the UK GDPR.

This Policy applies to all individuals who interact with our website, services, and or products.

Personal Data

We may collect a variety of personal data, as well as any other information you choose to provide us, or that which is necessary to provide our services. We may collect information necessary to process your order, including your name, billing address, delivery address, email address, phone number, and payment details (processed securely via our payment processor, Wix Payments or PayPal).

We may also offer email marketing communications, which you can opt in to by providing your email address. You may unsubscribe at any time using the link in the footer of such emails.

Payments on our site are processed securely by third-party payment providers such as PayPal. We do not store your full payment card information. The provider(s) we use process personal data in accordance with their own privacy policy. Please review their policies before using them.

Aggregated Data

We may collect aggregated data to analyse trends, monitor website performance, improve the site and its functionality, enhance marketing efforts, and improve the user experience, which may include using Wix Analytics and third-party tools such as Google Analytics. Where we use analytics cookies (for example, Google Analytics), these are only activated once you consent via our cookie banner or settings.

Aggregated data includes (but may not be limited to) general usage patterns, visit statistics (such as average page time), post views, traffic sources, session data by location (e.g., city or country), sessions over time, visitor engagement, average pages per session, average duration per session, bounce rates, button click data, behavioural patterns, benchmarks, unique visitors, and returning visitors. This information does not identify individual users and is used solely in an anonymised format to enhance our services and refine marketing efforts.

The legal basis for processing this aggregated data is our legitimate interests in improving the functionality of the Site, enhancing the user experience, and refining our marketing strategies, in accordance with the UK General Data Protection Regulation (UK GDPR).

Marketing Purposes

Aggregated data may be used to develop and optimise our marketing strategies. By identifying trends, preferences, and user behaviour, we can target advertisements and relevant content more effectively, ensuring our marketing efforts are aligned with user interests and enhancing overall engagement.

No personal data is used for marketing purposes. All data used for marketing is aggregated, anonymised, and processed in accordance with the UK General Data Protection Regulation (UK GDPR).

Performance Purposes

We use aggregated data to assess and improve the performance of our Site and services. This includes understanding user behaviour, measuring the effectiveness of marketing campaigns, tracking user engagement, and identifying areas for optimisation to enhance both the functionality of the Site and user experience.

Data Sharing

We only share personal data with service providers who assist us in delivering our services (for example, hosting providers).

These service providers are required to protect personal data and may not use it for their own purposes.

Cookies and Tracking Technologies

Lawful Basis

We may use cookies and similar technologies to enhance website performance, analyse traffic, and personalise content.

Please refer to our Cookie Policy, where you can manage your preferences, and find additional details in regard to the types of cookies we use, their purposes, and how you can control your settings.

The Painless Artist processes your personal data under the following lawful bases:

Consent (Where you have given explicit permission for specified purposes, for example, to receive marketing communications)

Contractual Requirements (Provide the products/services you have requested)

Legal Obligation (Comply with legal requirements, including but not limited to, accounting and tax requirements)

Legitimate Interests (Help manage business operations, prevent fraud, and improve our services)

The purposes for which we process personal data include:

Providing and managing our services

Communications with you regarding ongoing services (for example, regarding your account, inquiries, or updates)

Complying with legal obligations and defending legal claims

Monitoring and improving website performance (and other areas such as, for example, security and user experience)

Conduct internal business operations and risk management

User Rights

You have the following rights under the UK GDPR (and EU GDPR) regarding your personal data:

Your right to be informed about how your personal data is collected, used, and shared

Your right to access your personal data

Your right to rectify inaccurate or incomplete data, and to request erasure where applicable (‘right to be forgotten’)

Your right to restrict processing in certain circumstances

Your right to data portability, where technically feasible

Your right to object to the processing of your personal data in certain circumstances

Some rights may be subject to legal or contractual limitations. To exercise your rights, please contact us using the contact details provided.

Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including to comply with legal, accounting, or reporting obligations.

Child Data

Our services are not intended for users under the age of 13 (or the relevant minimum age of majority in your country).

We do not knowingly collect personal data from children under this age without verified parental consent.

If we become aware that we have:

Collected a child's data without parental consent; or
Inadvertently collected a child's data,

We will take steps to delete such information promptly, and may notify you at our discretion.

Security

We take personal data security seriously.

We implement practices such as, limited data access, multi-step authentication, data minimisation, and periodic password changing, to help ensure personal data is handled with appropriate safeguards, including protection against loss, damage, destruction, unauthorised processing, or unlawful activity.

International Data Transfers

In the event that we transfer personal data outside of your country, which may include outside the UK or EU, we ensure that appropriate safeguards are in place.

Appropriate safeguards may include adequacy decisions, legally approved agreements, for example, International Data Transfer Agreements (IDTAs), or other measures which are required under the applicable data protection laws to maintain an adequate level of protection.

Changes to this Privacy Policy

We may update this Policy from time to time. We may notify you of significant changes at our discretion.

It is your responsibility to review the updated Policy, and your continued use of our services constitutes acceptance of any changes.

If you do not agree with the updated Policy, please cease using this website and our services immediately.

Supervisory Authorities

If you have concerns about how your data is processed, you can contact us at thepainlessartist@gmail.com.

You can also contact your local data protection authority for the relevant procedures.

The UK supervisory authority is the UK ICO (Information Commissioner's Office).

Contact Us

For any questions about this Policy or to exercise your rights, please contact:

Wayne Howard-Saunders (The Painless Artist)
Email: thepainlessartist@gmail.com