Privacy Policy

Welcome to The Painless Artist. We are committed to protecting your privacy and handling your personal data responsibly.

This Privacy Policy explains how we collect, use, and protect your personal data when you use our website: www.thepainlessartist.co.uk

The Painless Artist (“we”, “us”, “our”) is the data controller responsible for your personal data under UK GDPR.

1. Personal Data

We may collect and process the following personal data when you use our website, make a booking, attend an event, or contact us, which may include;

Name
Email address
Phone number (if provided)
Billing details and address (where applicable)
Booking and event attendance information
Enquiry or correspondence details
Payment information (processed securely via third-party providers such as Wix Payments and PayPal)

We do not store full payment card details.

We may also collect information you voluntarily provide through forms, bookings, surveys, or direct communications with us.

2. How we use your data

We use your personal data to:

Provide, manage, and deliver our services and events
Process bookings, payments, and related administration
Respond to enquiries and communicate with you
Send service-related notifications (e.g. booking confirmations or updates)
Comply with legal, tax, and accounting obligations
Improve our website, services, and customer experience
Maintain security, prevent fraud, and protect our systems

3. Marketing communications

If you opt in, we may send you updates about events, offers, and news from The Painless Artist.

You can unsubscribe at any time using the link in our emails.

We only send marketing communications with your consent.

4. Analytics and website usage

We use analytics tools to understand how visitors use our website and to improve performance, user experience, and marketing effectiveness.

This may include information such as pages viewed, time spent on pages, device type, and general interaction patterns.

Where possible, this data is aggregated or anonymised and does not directly identify individuals.

5. Cookies

We use cookies and similar technologies to enable website functionality, improve user experience, analyse traffic, and support marketing.

Non-essential cookies (such as analytics and marketing cookies) are only used with your consent, which can be managed through your cookie settings.

For more information, please refer to our Cookie Policy.

6. Legal basis for processing

We process your personal data under the following legal bases:

Consent - for marketing communications and optional cookies
Contract - to provide services, bookings, and purchases you request
Legal obligation- for tax, accounting, and regulatory compliance
Legitimate interests - to operate, improve, secure, and promote our services, where such interests are not overridden by your rights

7. Data sharing

We only share personal data with trusted third-party service providers who support the operation of our business, such as website hosting, payment processing, booking systems, email services, and analytics providers.

These providers act as data processors and are contractually required to keep your data secure and only process it in accordance with our instructions.

We do not sell your personal data.

8. Data retention

We keep personal data only for as long as necessary to fulfil the purposes it was collected for, including legal, tax, or reporting requirements.

9. Your rights

Under UK GDPR, you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data (where applicable)
Restrict or object to processing in certain circumstances
Request transfer of your data (where applicable)

To exercise your rights, contact us using the details below.

10. Children's data

Our services are not intended for individuals under 13 years of age unless they are attending a supervised event where under-18 participation is explicitly permitted.

Where children attend such events, data processing relating to their attendance will only occur where necessary for booking, safety, and legal compliance, and typically with the consent of a parent or legal guardian.

We do not knowingly collect personal data from children outside of these circumstances. If we become aware that we have done so without appropriate basis, we will delete it.

11. Data security

We take appropriate technical and organisational measures to protect your personal data, including access controls, secure systems, and regular security practices.

However, no method of transmission or storage over the internet can be guaranteed to be completely secure, and we cannot guarantee absolute security.

12. International transfers

If we transfer your data outside the UK or EU, we ensure appropriate safeguards are in place, such as adequacy regulations or approved contractual protections.

13. Changes to this policy

We may update this Privacy Policy from time to time. Any significant changes will be posted on this page.

Where appropriate, we may notify you of material changes via email or website notice.

Your continued use of our website and services after changes are posted constitutes acceptance of the updated policy.

14. Supervisory authorities

If you have concerns about how your personal data is handled, please contact us first so we can address your concerns.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): https://ico.org.uk.

15. Contact us

If you have any questions about this Privacy Policy or wish to exercise your rights, contact:

Wayne Howard-Saunders (The Painless Artist)
Email: thepainlessartist@gmail.com