Privacy policy

Last updated: October 2026

This privacy policy explains how Christian Artists (christianartists.co.uk) collects, uses and protects personal information when you visit our website, contact us or buy artwork from us. We take your privacy seriously and collect only what we need to run the shop and answer your questions.

Who we are

The data controller for this website is Christian Artists (christianartists.co.uk). If you have any questions about this policy or about how your information is handled, please get in touch through our contact page.

The information we collect

When you use our contact form

If you send us an enquiry, we collect your full name, phone number, email address, address, postcode, preferred contact method, the service you are interested in and the content of your message. We use this information to reply to you and deal with your enquiry.

When you place an order

When you buy artwork, we record your name, email address, the items you ordered and the IP address used to place the order. We use this to supply your downloads, send your order email with download links, keep accounting records and help prevent fraud.

When you submit a testimonial

If you choose to leave a review, we collect the name, location, rating and review text you provide. Testimonials may be published on our website, so please include only details you are happy to share publicly.

Website statistics

We keep simple first-party statistics, stored on our own server, to understand how the website is used. These records include the pages viewed, the date and time of each visit, the referring site, your IP address, your browser or user agent and your approximate country. These statistics are not shared with advertising networks and are used only to improve the website and keep it secure.

Payments

Payments are handled by Stripe, for card payments including Apple Pay and Google Pay, and by PayPal. When you pay, you give your payment details directly to them. We never see or store your card details. Stripe and PayPal process your information under their own privacy policies and tell us whether a payment has succeeded, so that we can complete your order.

Cookies

We use essential cookies only:

• a session cookie, which keeps your basket working, allows checkout to complete and helps protect our forms from misuse;
• an admin login cookie, used only by the people who manage the website.

We do not use advertising cookies or tracking cookies. Because the cookies we set are strictly necessary for the website to work, they do not require your consent, but you can block them in your browser settings if you wish; the basket and checkout may not work if you do. Stripe and PayPal may set their own cookies when you use their payment pages, and these are covered by their own policies.

How we use your information and our legal basis

Under UK GDPR we must have a lawful basis for using personal information. We rely on:

• Contract: to process your order, supply your downloads and provide support with your purchase;
• Legal obligation: to keep financial records for tax purposes;
• Legitimate interests: to answer enquiries, keep website statistics, protect the website from misuse and improve our service;
• Consent: to publish testimonials you submit, which you can withdraw at any time.

We do not sell your personal information, and we do not use it for automated decision-making or profiling.

Emails

We send emails, such as order confirmations with download links and replies to enquiries, through our mail provider. The provider processes these messages only on our behalf so that they can be delivered. We do not send marketing emails unless you have asked to receive them.

Who we share information with

We share personal information only where it is needed to run the website and shop: with our payment providers, Stripe and PayPal; with our mail provider; and with our website hosting provider, which stores data on our behalf. We may also disclose information where the law requires it. Some of these providers may process data outside the UK, and where they do, the safeguards required by UK data protection law are in place.

How long we keep your information

• Orders: six years, to meet tax and accounting requirements.
• Contact form enquiries: two years from our last correspondence with you.
• Website statistics: 13 months.
• Testimonials: for as long as they are published, or until you ask us to remove them.

After these periods, information is deleted or anonymised.

How we keep it secure

Our website uses an encrypted HTTPS connection, access to stored data is restricted to those who need it, and admin areas are protected by login. No system is completely secure, but we take reasonable steps to protect your information.

Your rights

Under UK data protection law you have the right to:

• access the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete (rectification);
• ask us to delete your information (erasure), where we are not required to keep it;
• ask us to limit how we use it (restriction);
• object to our use of it where we rely on legitimate interests;
• receive your information in a structured, commonly used format (data portability).

To make a request, please write to us using our contact form. We may need to confirm your identity first. We will respond within one month, and there is normally no charge.

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised.