Privacy Policy

1. Introduction

This Privacy Policy explains how Blue Goose Arts (“we”, “us”, “our”) collects, uses, and protects your personal information when you create an account, place an order, or interact with this website.
We are committed to handling your data responsibly and in accordance with UK data protection laws, including the UK GDPR.

2.1 Information You Provide

• Name
• Email address
• Billing and shipping address
• Phone number (if provided)
• Order details
• Account login information
• Messages or enquiries you send

2.2 Information Collected Automatically

• IP address
• Browser type and device information
• Pages visited and actions taken on the website
• Cookies (see section 8)

2.3 Payment Information

Payments are processed securely through third‑party providers (e.g., Stripe, PayPal).
Blue Goose Arts does not store or have access to your full payment card details.

3. How We Use Your Information

Your information is used to:

• Create and manage your account
• Process and deliver your orders
• Send order confirmations and updates
• Respond to enquiries or support requests
• Improve website performance and user experience
• Detect and prevent fraud or misuse
• Comply with legal obligations

We do not sell or share your data with third parties for marketing purposes.

4. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Contract: To fulfil your orders and manage your account
• Consent: When you opt in to newsletters or marketing
• Legitimate interests: To improve the website and prevent fraud
• Legal obligation: For tax, accounting, and regulatory requirements

5. Sharing Your Information

Your data may be shared with trusted third parties only when necessary, such as:

• Payment processors (e.g., Stripe, PayPal)
• Delivery services (e.g., Royal Mail, couriers)
• Website hosting and security providers
• WooCommerce and related plugins used to operate the store

These providers only receive the information required to perform their services.

6. Data Storage & Security

We take reasonable steps to protect your information, including:

• Secure website hosting
• Encrypted connections (HTTPS)
• Limited access to customer data
• Secure payment gateways

No online system is 100% secure, but we work to protect your data as best as possible.

7. How Long We Keep Your Data

Your information is kept only for as long as necessary:

• Order records: up to 6 years (legal requirement)
• Account information: until you request deletion
• Emails and enquiries: typically 12–24 months

You may request deletion of your account at any time.

8. Cookies

This website uses cookies to:

• Enable essential site functions
• Remember your preferences
• Improve performance and analytics
• Support checkout and account login

You can manage or disable cookies through your browser settings, but some features may not work correctly without them.

9. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Restrict or object to processing
• Request a copy of your data (data portability)
• Withdraw consent for marketing at any time

To exercise any of these rights, contact us using the details below.

10. Account Closure

We reserve the right to suspend or close accounts where necessary to protect the website, customers, or business operations. If your account is closed while an order is active, it will still be processed or refunded appropriately.

11. Changes to This Policy

This Privacy Policy may be updated occasionally. Any changes will be posted on this page with an updated revision date.

12. Contact Information

If you have any questions about this Privacy Policy or your data, you can contact us at, info@bluegoosearts.com.