Privacy Policy

Last Updated: 17 January 2026

1. Introduction

1.1 We are committed to safeguarding the privacy of our website visitors, subscribers and customers.

1.2 This policy applies where we are acting as a data controller with respect to personal data; in other words, where we determine the purposes and means of processing that personal data.

1.3 We use cookies and similar technologies on our website. Non-essential cookies (including analytics and marketing cookies) are used only with your prior consent, which you may give or withdraw at any time via our cookie banner or cookie settings.

2. Credit

2.1 This document was created using a template from Docular (https://seqlegal.com/free-legal-documents/privacy-policy) and has been adapted to reflect current UK data protection law.

3. Personal data we collect

3.1 We may process the following categories of personal data:

(a) Contact data – name, email address, and/or social media account identifiers, provided by you or (where applicable) via a third-party login provider.

(b) Communication data – information contained in or relating to communications you send to us, including content and metadata.

(c) Usage data – information about your use of our website, including IP address, browser type, device information, pages visited and navigation paths. This data is collected only where you have consented to analytics cookies.

(d) Transaction data – information relating to purchases or payments, including name, contact details and transaction details. Payment card data is processed securely by our payment providers and is not stored by us.

4. Purposes of processing and legal bases

4.1 We process personal data for the following purposes and under the following legal bases:

4.2 Website operation and communications
Legal basis: legitimate interests (operating and administering our website and services).

4.3 Publications and content sharing
Legal basis: legitimate interests and/or your express instructions.

4.4 Relationship management and support
Legal basis: legitimate interests (customer support, enquiries, complaints handling).

4.5 Direct marketing
Legal basis: consent.
You may withdraw consent at any time by using the unsubscribe link in our emails or by contacting us.

4.6 Analytics and website improvement
Legal basis: consent.
Analytics cookies are used only after you have opted in via our cookie banner.

4.7 Advertising and tracking technologies (including Meta Pixel)
Legal basis: explicit consent.
Marketing and advertising cookies are not placed unless you have actively consented.

4.8 Record keeping
Legal basis: legitimate interests and legal obligation.

4.9 Security and fraud prevention
Legal basis: legitimate interests.

4.10 Legal claims and compliance
Legal basis: legitimate interests and legal obligation.

5. Sharing your personal data

5.1 We may share personal data with professional advisers, insurers and service providers where reasonably necessary.

5.2 Website hosting and marketing services are provided by:

Wix.com Ltd
MailerLite

5.3 Payment processing is carried out by:

Stripe Payments Europe Limited
Squareup Europe Limited / Squareup International Limited

Payment data is shared only to the extent necessary to process transactions and refunds.

5.4 We may disclose personal data where required by law or to establish, exercise or defend legal claims.

6. International transfers

6.1 Some of our service providers process data outside the UK and EEA.

6.2 Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including:

UK adequacy decisions
UK–US Data Bridge (where applicable)
Standard Contractual Clauses approved by the UK government

6.3 Data submitted for publication may be accessible globally via the internet.

7. Data retention

7.1 We retain personal data only for as long as necessary for the purposes for which it is processed.

Typical retention periods include:

Marketing data: until consent is withdrawn or after a period of inactivity
Transaction and financial records: up to 6–7 years (legal and tax obligations)
Enquiries and correspondence: up to 24 months
Analytics data: retained in anonymised or aggregated form where possible

7.2 Data may be retained longer where required by law or for legal claims.

8. Your rights

8.1 You have the following rights under UK data protection law:

Access
Rectification
Erasure
Restriction
Objection
Data portability
Withdrawal of consent
Complaint to a supervisory authority

8.2 You may lodge a complaint with the Information Commissioner’s Office (ICO) via www.ico.org.uk.

8.3 You may exercise your rights by contacting us using the details below.

9. Cookies

9.1 Cookies are small files stored on your device when you visit a website.

9.2 We use:

Essential cookies (required for site functionality)
Analytics cookies (only with consent)
Marketing cookies (only with explicit consent)

9.3 You can manage or withdraw your cookie preferences at any time via the cookie settings link on our website.

10. Third-party cookies

10.1 We use Google Analytics to analyse website usage only where consent has been given.

10.2 We use Meta (Facebook) advertising technologies, including the Meta Pixel, only where you have consented to marketing cookies. Meta may act as a joint controller for certain processing activities.

11. Children’s data

11.1 Our website is not intended for children under the age of 16, and we do not knowingly collect personal data relating to children.

12. Amendments

12.1 We may update this policy from time to time.
12.2 The latest version will always be available on our website.

13. Our details

13.1 This website is owned and operated by ArtULTRA Limited, registered in England and Wales (Company No. 13237964).

13.2 Registered office:
124 City Road, London, EC1V 2NX

13.3 Contact:

Email: info@artultra.net
Website contact form

This Privacy Policy is dated 17 January 2026