Privacy Policy

Vivid Pixels (www.vividpixels.co.uk)

Last updated: [26/8/26]

Vivid Pixels ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit www.vividpixels.co.uk (the "Website") or place an order with us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

---

1. Who We Are

Vivid Pixels is a sole trader business owned and operated by John Leaver.

Data controller: John Leaver, trading as Vivid Pixels Address: 247 Kingsbridge Road, Morden, Surrey, SM4 4PX Email: jleaver247@gmail.com Website: www.vividpixels.co.uk

As a small sole trader business, we are not required to appoint a Data Protection Officer, but you can contact us directly using the details above with any privacy questions or requests.

---

2. What Personal Data We Collect

Depending on how you interact with the Website, we may collect the following categories of personal data:

2.1 Information you give us directly

• Name
• Email address
• Delivery address and, where different, billing address
• Telephone number (if provided)
• Order details (products purchased, sizes, framing options, order value)
• Payment confirmation details (see Clause 5 — we do not store full card or bank account details ourselves)
• Any messages you send us, e.g. via email or a contact form

2.2 Information collected automatically

• IP address
• Browser type and device information
• Pages visited and time spent on the Website
• Referring website/source
• Cookie data (see our [Cookie Policy] / Clause 8 below)

We do not knowingly collect any special category data (such as health information, religious beliefs, etc.) and ask that you do not send us any such information unnecessarily.

---

3. How We Use Your Personal Data

We use your personal data for the following purposes, and only where we have a lawful basis to do so:

You can withdraw consent for marketing at any time by clicking "unsubscribe" in any marketing email or by contacting us directly.

---

4. Who We Share Your Data With

We do not sell your personal data. We share personal data only with the following categories of third party, and only as needed to run our business:

4.1 Printumo (our print-on-demand fulfilment partner) When you place an order, we share your name, delivery address, and order specification with Printumo ApS (Pilestræde 41, 2, 1112 København K, Denmark), who print, frame, package, and ship your Product on our behalf. Printumo processes this data under its own privacy policy, available at printumo.com/privacy-policy. Because Printumo is based in Denmark (EU), your data remains within the UK/EU data protection framework.

4.2 Payment providers Where you pay via PayPal, your payment details are processed directly by PayPal in accordance with their own privacy policy; we do not see or store your full payment credentials. Where you pay by bank transfer, your bank handles the transaction directly and we only retain confirmation of payment for our own records.

4.3 Website and email hosting providers We use third-party providers Wix.com to host the Website and, wThese providers process data on our behalf and are bound by their own data protection obligations.

4.4 Google Analytics We use Google Analytics to understand how visitors use the Website. Google processes this data on our behalf in accordance with its own privacy policy, available at policies.google.com/privacy. See Clause 8 (Cookies) for more detail and how to opt out.

4.5 Legal and regulatory bodies We may disclose personal data where required by law, for example to HMRC for tax purposes, or to law enforcement where legally obliged to do so.

We do not share your data with any third party for their own independent marketing purposes.

---

5. Payment Data

We do not store your full card details or bank account numbers. Bank transfer payments are handled directly through your own bank; PayPal payments are handled directly through PayPal's own secure systems in accordance with their privacy policy, available at paypal.com/privacy. We only retain a record that payment was received, for order and accounting purposes.

---

6. International Data Transfers

Your data is shared with Printumo, based in Denmark, which is within the European Economic Area (EEA) and covered by UK adequacy regulations, meaning no additional safeguards are required for this transfer. If we begin using any service provider based outside the UK/EEA in future, we will ensure appropriate safeguards (such as Standard Contractual Clauses) are in place and will update this policy accordingly.

---

7. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes it was collected:

• Order and transaction records: retained for [6 years], in line with UK tax and accounting record-keeping obligations.
• Marketing contact details: retained until you unsubscribe or withdraw consent.
• General enquiries: retained for a reasonable period to resolve your query, then deleted or anonymised.

---

8. Cookies

The Website uses cookies and similar technologies to:

• Enable core functionality (e.g. remembering items in your shopping basket);
• Understand how visitors use the Website, so we can improve it;
• Where applicable, measure the effectiveness of marketing.

We use Google Analytics to understand how visitors use our Website (e.g. which pages are viewed, how long visitors stay, and which artwork is most popular). Google Analytics uses cookies to collect this information, which is processed in an anonymised or pseudonymised form and used to help us improve the Website. Google acts as a data processor for this activity, and data may be transferred to and processed on Google's servers, including outside the UK/EEA, under Google's own safeguards. You can find out more about how Google uses this data at policies.google.com/technologies/partner-sites.

You can control or disable cookies, including Google Analytics cookies, through your browser settings at any time, or via Google's opt-out browser add-on (tools.google.com/dlpage/gaoptout). Disabling essential cookies may affect the functionality of the Website (e.g. the shopping basket may not work correctly).

---

9. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — ask us to delete your personal data, where there is no legal reason for us to continue holding it (e.g. once tax record obligations have passed).
• Right to restrict processing — ask us to limit how we use your data in certain circumstances.
• Right to data portability — request your data in a portable format, where technically feasible.
• Right to object — object to processing based on legitimate interests or direct marketing at any time.
• Right to withdraw consent — where processing is based on consent (e.g. marketing emails), withdraw it at any time.

To exercise any of these rights, contact us at jleaver247@gmail.com. We will respond within one month, in accordance with UK GDPR requirements.

You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk, if you believe we have not handled your data properly.

---

10. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including using secure, reputable third-party platforms for payment processing, website hosting, and order fulfilment. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

---

11. Children's Privacy

The Website is not intended for use by children under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

---

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

---

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

Vivid Pixels John Leaver Email: jleaver247@gmail.com Address: 247 Kingsbridge Road, Morden, Surrey, SM4 4PX Website: www.vividpixels.co.uk