Last updated: 28 January 2026
Charlotte Snipe (“I”, “me”, “my”, “this website”) is committed to protecting your privacy. This Privacy Policy explains how I collect, use, store, share and protect your personal data when you visit www.charlotteabraham.art (the “Website”), contact me, or use my services.
I am the data controller for the personal data I process through this Website. My contact details are below.
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information I Collect
I may collect the following types of personal data:
Identity & contact information — name, email address, postal address, telephone number (e.g. when you send an enquiry, commission request, or sign up to my newsletter).
Payment information — if you purchase artwork or pay a deposit (card details are processed securely by [Stripe/PayPal/etc.] — I do not store full card details myself).
Correspondence — details in messages you send me via contact forms, email, social media or otherwise.
Technical data — IP address, browser type/version, operating system, referring site, pages visited, time/date of visit, time spent on pages (collected automatically via cookies or similar technologies).
Marketing & communication preferences — whether you wish to receive updates about new work, exhibitions, or offers.
I do not knowingly collect special category data (e.g. health, race, religion) or data about children under 16.
2. How I Collect Your Data
I collect data when you:
Fill in forms on the Website (contact, commission enquiry, newsletter signup).
Purchase artwork or services.
Correspond with me (email, messages, social media).
Browse the Website (via cookies and analytics tools).
3. How I Use Your Data (Purposes & Lawful Basis)
I only process your personal data where I have a lawful basis under UK GDPR Article 6. The main bases I rely on are:
| Purpose | Type of data | Lawful basis |
|---|---|---|
| Responding to enquiries / commissions | Name, email, message details | Contract (steps to enter contract) or legitimate interests |
| Processing & fulfilling sales | Name, address, payment info | Contract |
| Sending newsletters / art updates | Email, name, preferences | Consent (you can unsubscribe anytime) |
| Website improvement & analytics | Technical data (IP, pages) | Legitimate interests (improving site) |
| Preventing fraud / site security | Technical data | Legitimate interests |
| Complying with legal obligations | Any relevant data | Legal obligation |
Legitimate interests are only used where my interests are not overridden by your rights.
4. Cookies & Similar Technologies
This Website uses cookies and similar technologies. Essential cookies are always on. Non-essential cookies (analytics, marketing) are only placed with your consent via the cookie banner.
This Website uses cookies to improve your experience and for analytics.
- Essential cookies — needed for the site to function.
- Analytics cookies (e.g. Google Analytics) — measure site usage (anonymised).
- Marketing cookies — if used for targeted ads.
You manage preferences via the cookie banner.
5. Who I Share Your Data With
I do not sell your personal data. I may share it with:
Service providers acting as processors (e.g. email provider MailerLite, website host, payment processor [Stripe/PayPal], analytics provider Google Analytics).
Professional advisers (accountant, lawyer) if needed.
Authorities if required by law (e.g. HMRC for tax purposes).
All processors are required to protect your data and only process it on my instructions.
6. International Transfers
Some processors (e.g. Google, Mailchimp) are based outside the UK. Where data is transferred to countries without an adequacy decision, I rely on UK-approved safeguards such as Standard Contractual Clauses or the UK International Data Transfer Addendum.
7. How Long I Keep Your Data
I keep personal data only for as long as necessary for the purpose:
Enquiry/commission correspondence: up to 2 years after last contact (unless longer for legal reasons).
Newsletter subscribers: until you unsubscribe.
Purchase records: 5 year for tax/accounting purposes.
Analytics data: 14–26 months (depending on provider settings).
After that time, I securely delete or anonymise it.
8. Your Rights Under UK GDPR
You have the following rights (subject to some exceptions):
Access — request a copy of your data.
Rectification — correct inaccurate data.
Erasure (“right to be forgotten”) — in certain circumstances.
Restriction of processing.
Data portability.
Object to processing (especially direct marketing or legitimate interests).
Withdraw consent (where consent is the basis).
Complain to the ICO (www.ico.org.uk).
To exercise any right, contact me at the details below. I usually respond within one month (free of charge unless requests are excessive).
9. Security
I take reasonable technical and organisational measures to protect your data from unauthorised access, loss or misuse (e.g. secure hosting, limited access, password protection). However, no transmission over the internet is 100% secure.
10. Third-Party Links
The Website may contain links to other sites (e.g. social media, payment gateways). This policy does not cover those sites — check their privacy policies.
11. Changes to This Policy
I may update this policy from time to time. Changes will be posted here with an updated date. Where significant, I may notify you by email or site notice.
12. Contact Me
If you have questions about this policy or your data, contact:
Charlotte Snipe
Email: charlotteabrahamart@gmail.com
You can also contact the Information Commissioner’s Office (ICO) at www.ico.org.uk or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Thank you for visiting my site.