Effective Date: 1st July 2026
At Grace Wong (“I”, “me”, “my”), I respect your privacy and am committed to protecting your personal information. This Privacy Policy explains how I collect, use and protect your information when you visit www.gracewong.co.uk, contact me, or purchase artwork from my online shop.
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who I Am
Website: www.gracewong.co.uk
For any questions about this Privacy Policy or how I handle your personal information, please contact:
Email: grace@gracewong.co.uk
2. What Information I Collect
Depending on how you use my website, I may collect the following information.
Information you provide
When you place an order, contact me or subscribe to updates, you may provide:
- Name
- Billing address
- Delivery address
- Email address
- Telephone number (if provided)
- Order details
- Messages sent through my contact form or by email
You are under no obligation to provide personal information, but without certain details I may be unable to process your order or respond to your enquiry.
Information collected automatically
When you browse my website, certain information may be collected automatically, including:
- IP address
- Browser type
- Device information
- Operating system
- Pages visited
- Time spent on pages
- Date and time of your visit
- Referring website
This information helps me improve the website, understand how visitors use it and maintain security.
3. How I Use Your Information
I use your personal information to:
- Process and fulfil your orders
- Deliver your purchases
- Process payments securely
- Respond to enquiries
- Provide customer support
- Send order confirmations and updates
- Comply with legal, accounting and tax obligations
- Improve my website and customer experience
- Prevent fraud and maintain website security
If you choose to subscribe to my newsletter, I may occasionally send emails about new linocut prints, exhibitions, workshops, special offers or other news. You can unsubscribe at any time using the link provided in every email.
4. Payments
Payments are processed securely through Stripe.
I do not collect or store your payment card details. Payment information is handled directly by Stripe using secure encryption.
For more information, please see Stripe’s Privacy Policy:
https://stripe.com/gb/privacy
5. Shipping
To dispatch your order, I use Royal Mail Click & Drop.
Your name, delivery address and contact details (where required) are shared with Royal Mail solely for the purpose of delivering your order.
Royal Mail processes your information in accordance with its own Privacy Policy.
6. Contact Forms
If you contact me using the contact form on this website or by email, I will use the information you provide solely to respond to your enquiry.
I do not use information submitted through the contact form for marketing unless you separately choose to join my mailing list.
7. Cookies
This website uses cookies to ensure it functions correctly and to improve your browsing experience.
Cookies may be used to:
- Remember items in your shopping basket
- Enable secure checkout
- Remember your preferences
- Improve website performance
- Analyse visitor activity
- Help keep the website secure
Where required by law, you will be asked for your consent before non-essential cookies are placed on your device.
You can change or remove cookies at any time through your browser settings.
8. Google Analytics
If enabled, this website uses Google Analytics to help me understand how visitors use the website.
Google Analytics collects information such as:
- Pages visited
- Time spent on the website
- Device type
- Browser
- Approximate location
- Referring website
This information is anonymised where possible and is used only to improve the website.
You can opt out of Google Analytics using Google’s browser add-on if you wish.
9. Embedded Content
This website may include embedded content from third-party platforms such as Instagram.
Viewing embedded content may allow those platforms to collect information about your visit, use cookies or track your interaction with the embedded content, particularly if you are logged into your account with that service.
Please refer to Instagram’s Privacy Policy for more information.
10. WooCommerce
My online shop is powered by WooCommerce.
WooCommerce stores information necessary to:
- Process your order
- Calculate shipping
- Manage customer accounts (where applicable)
- Maintain order records
- Process refunds if required
WooCommerce does not store your payment card information.
11. Third-Party Services
To operate my business, I work with trusted third-party service providers, including:
- Stripe (payment processing)
- Royal Mail Click & Drop (shipping and delivery)
- My website hosting provider
- Website security and maintenance services
- Google Analytics (if enabled)
These providers only receive the information necessary to provide their services and are required to handle your information securely.
12. Legal Basis for Processing
Under UK GDPR, I process your personal information because:
- It is necessary to fulfil my contract with you when you place an order.
- It is necessary to comply with legal obligations, including tax and accounting requirements.
- It is in my legitimate interests to operate, improve and protect my business.
- Where required, I rely on your consent, such as for marketing emails or non-essential cookies.
13. How Long I Keep Your Information
I keep personal information only for as long as necessary.
Order records may be retained for up to six years to comply with UK tax and accounting requirements.
Enquiries submitted through the contact form or by email are retained only as long as necessary to deal with your enquiry.
Mailing list information is kept until you unsubscribe.
14. Keeping Your Information Secure
I take reasonable technical and organisational measures to protect your personal information from unauthorised access, misuse, alteration or loss.
However, no method of transmitting information over the internet is completely secure, and I cannot guarantee absolute security.
15. International Transfers
Some of the third-party services I use, such as Stripe or Google, may process personal information outside the United Kingdom.
Where this happens, appropriate safeguards are used in accordance with UK data protection law.
16. Your Rights
Under UK GDPR, you have the right to:
- Access the personal information I hold about you.
- Request correction of inaccurate information.
- Request deletion of your information where appropriate.
- Restrict how your information is processed.
- Object to certain types of processing.
- Request a copy of your personal information in a portable format.
- Withdraw consent where processing is based on consent.
To exercise any of these rights, please contact me using the details below.
If you are not satisfied with how I handle your personal information, you have the right to complain to the Information Commissioner’s Office (ICO).
17. Changes to This Privacy Policy
I may update this Privacy Policy from time to time to reflect changes in the law, my business or my website.
The latest version will always be available on this page and will include the updated effective date.
18. Contact
If you have any questions about this Privacy Policy or how your personal information is used, please contact:
Grace Wong
Website: www.gracewong.co.uk
Email: grace@gracewong.co.uk
