Privacy Policy
This Privacy Policy explains how Anna D’Assaro (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit annadassaro.com, make a purchase, or enquire about creative services. We comply with the UK GDPR and the Data Protection Act 2018.
1. Who Is Responsible for Your Data
The data controller is Anna D’Assaro. Contact: Contact page.
2. What Data We Collect
- Contact details — your name and email address
- Delivery details — your shipping address (for shop orders)
- Payment information — processed securely by our payment provider; we never see or store your full card number
- Order & project information — what you ordered or commissioned, and related correspondence
- Technical data — IP address, browser type, and pages visited (via cookies)
- Enquiry data — messages sent via our contact form or email
3. How We Collect Your Data
We collect data when you place an order, submit an enquiry or commission request, create an account, contact us by email, or browse our website (via cookies and analytics).
4. How We Use Your Data
- To process and fulfil your shop orders
- To manage and deliver commissioned creative projects
- To send order confirmations, delivery updates, and project correspondence
- To respond to your enquiries
- To comply with legal and accounting obligations
- To improve our website (analytics, cookies)
We will only contact you with marketing if you have explicitly opted in. You can unsubscribe at any time.
5. Legal Basis for Processing
- Contract — fulfilling orders and commissioned work
- Legal obligation — accounting and tax records
- Legitimate interests — improving our website, responding to enquiries, preventing fraud
- Consent — marketing communications and non-essential cookies
6. Who We Share Your Data With
We may share your data with:
- Gelato (gelato.com) — our print fulfilment partner, who receives your name and address to produce and ship your order
- Payment processors (e.g. Stripe, PayPal) — for secure payment handling
- Shipping couriers — to deliver your order
- WooCommerce / WordPress — the platform powering our shop
- Google Analytics (if enabled) — for anonymous website usage data
We do not sell your personal data to any third party.
7. How Long We Keep Your Data
Order and client data is retained for up to 7 years for UK tax and accounting compliance. Project correspondence may be kept for the same period. After this, data is securely deleted.
8. Your Rights
Under UK GDPR, you have the right to access, correct, or delete your data; to restrict or object to processing; to data portability; and to withdraw consent at any time. To exercise any of these rights, get in touch via our Contact page and we will respond within 30 days.
You can also complain to the ICO at ico.org.uk.
9. Cookies
Please see our Cookie Policy for full details.
10. Security
We take reasonable measures to protect your data. All payments are processed over encrypted HTTPS connections. We do not store payment card details.
11. Changes to This Policy
We may update this policy from time to time. Changes will be posted here with an updated date.
12. Contact
Privacy questions? get in touch via our Contact page.