Contact

Privacy Policy - Vivienne Littley

PRIVACY POLICY

Privacy Policy – Vivienne Littley Art

Effective date: 23 January 2026

This Privacy Policy explains how Vivienne Littley Art (“we”, “us”, “our”) collects, uses and protects personal information when you visit https://viviennelittley.com/ (the “Website”).

We respect your privacy and are committed to protecting your personal data in line with UK data protection laws, including the UK GDPR and the Data Protection Act 2018.

Privacy summary

  • We only collect personal information that we need to reply to enquiries, send newsletters (if you opt in), and process orders.
  • If you buy artwork, payments are handled securely by Stripe. We do not store card details.
  • If you subscribe to the newsletter, your details are stored in Kit (ConvertKit) and you can unsubscribe any time.
  • We use Fathom Analytics (a privacy-friendly analytics tool). We do not use Google Analytics or Meta Pixel.
  • We use a cookie notice tool so you can manage cookie preferences.
  • We do not sell your data or share it for advertising purposes.

Who we are

Website: https://viviennelittley.com/
Business name: Vivienne Littley Art
Data Controller: Vivienne Littley

Contact:
Email: in**@*************ey.com
Postal address: 58 Dukes Way, Axminster, Devon EX13 5QP

What personal data we collect and why we collect it

We collect only the personal data we need to run the Website, respond to enquiries, manage newsletter subscriptions, and fulfil orders.

Depending on how you interact with the Website, we may collect:

  • Identity data: your name
  • Contact data: your email address, phone number (if provided), address (if purchasing)
  • Transaction data: orders, products purchased, payment confirmation
  • Technical data: IP address (limited), browser/device information, usage data (via privacy-friendly analytics)
  • Marketing preferences: whether you opt in to receive emails

Our lawful bases for processing

Under UK GDPR, we process personal data using one or more of these lawful bases:

  • Contract: to process and fulfil orders you place through the Website
  • Legitimate interests: to run the Website effectively, respond to messages, prevent fraud, and improve services
  • Consent: where you opt in to our newsletter or accept non-essential cookies (if applicable)
  • Legal obligation: where we must keep records for tax/accounting

We do not intentionally collect special category data (such as health information) and we ask you not to submit this type of information through the Website.

Comments

Comments are disabled on this Website, so we do not collect comment data.

Media

This Website does not allow visitors to upload media files. If you contact us via the contact form, please avoid including sensitive personal information in your message.

Contact forms

If you contact us via the Website contact form, we collect the information you provide, which may include:

  • name
  • email address
  • message content

We use this information to:

  • respond to your enquiry
  • provide customer service
  • keep a record of communications where appropriate

Email delivery: messages may be delivered via SMTP2GO (email delivery provider).
Form handling: the Website uses Divi Contact Form Helper to support form functionality.

We do not use contact form enquiries for marketing unless you have explicitly opted in.

Orders and payments (WooCommerce + Stripe)

If you buy artwork through the Website, we collect information necessary to fulfil your order, such as:

  • billing/shipping address
  • contact details
  • order details and purchase history

Payments are processed securely via Stripe. We do not store your card details. Stripe may collect payment information directly, in line with their privacy policy.

WooCommerce may also store order-related information within the Website database.

Newsletter emails (Kit / ConvertKit)

If you subscribe to the newsletter, we collect:

  • your email address
  • your name (if provided)
  • email marketing preferences and interaction data (for example opens/clicks)

Newsletter emails are managed through Kit (ConvertKit). You can unsubscribe at any time by using the unsubscribe link in any email.

Cookies

This Website uses cookies and similar technologies to support functionality and comply with consent preferences. We use a cookie banner/tool called:

Cookie Notice & Compliance for GDPR / CCPA

Cookies may be used for:

  • essential site functionality (e.g. shopping basket/cart)
  • consent management preferences
  • performance and anonymous measurement (analytics)

You can manage cookie preferences through the cookie notice settings and your browser settings.

Analytics

We use Fathom Analytics, a privacy-focused analytics tool designed to be GDPR-compliant.

Fathom helps us understand how visitors use the Website (for example which pages are viewed most often) so we can improve content and usability.

  • We do not use Google Analytics.
  • We do not use Meta Pixel.
  • We do not use personal profiling or behavioural advertising tools.

External links

The Website may include links to external websites (for example galleries, exhibitions, or partner sites). If you follow these links, those websites have their own privacy policies and we are not responsible for their practices.

Who we share your data with

We only share personal data where necessary to operate the Website and deliver services. This may include:

  • Stripe (payment processing)
  • WooCommerce (ecommerce functionality)
  • Kit / ConvertKit (newsletter email marketing)
  • SMTP2GO (sending email confirmations and contact replies)
  • Krystal Hosting (website hosting)

We may also share data if required by law, or to protect our rights (for example fraud prevention).

How long we retain your data

We keep personal data only as long as needed:

  • Contact form enquiries: typically up to 12 months (unless ongoing correspondence is required)
  • Newsletter subscriptions: until you unsubscribe
  • Order and transaction records: typically 6 years to meet UK tax/accounting requirements
  • Website analytics: retained according to Fathom’s retention settings (privacy-friendly and aggregated)

What rights you have over your data

Under UK GDPR you have the right to:

  • request access to your personal data
  • request correction of inaccurate data
  • request deletion of your data (in some circumstances)
  • object to processing based on legitimate interests
  • request restriction of processing (in some circumstances)
  • request data portability (in some circumstances)
  • withdraw consent at any time (where processing is based on consent)

To exercise your rights, contact us using the details below.

Where your data is sent

This Website is hosted in the UK by Krystal.io (UK-based, 100% green energy host).

Some third-party services we use may process data outside the UK (for example Stripe, Kit/ConvertKit, SMTP2GO). Where this happens, we ensure appropriate safeguards are in place (such as international data transfer agreements and standard contractual clauses) so your data remains protected to UK GDPR standards.

Contact information

For privacy enquiries or requests, contact:

Vivienne Littley
Email: in**@*************ey.com
Postal address: 58 Dukes Way, Axminster, Devon EX13 5QP

Additional information

How we protect your data

We take practical steps to protect personal data, including:

  • SSL encryption (HTTPS) on the Website
  • secure hosting environment
  • limited access to Website admin accounts
  • secure payment processing via Stripe (we do not store card details)

What data breach procedures we have in place

If a data breach occurs, we will assess the risk and take appropriate action, which may include:

  • securing systems and investigating the cause
  • notifying affected users where required
  • reporting to the UK Information Commissioner’s Office (ICO) where legally required

What third parties we receive data from

We generally collect data directly from you. We may also receive limited data from:

  • Stripe (payment confirmations)
  • Kit/ConvertKit (subscription management)
  • WooCommerce (order processing)

What automated decision making and/or profiling we do

We do not use automated decision making or profiling in a way that produces legal or significant effects.

Changes to this Privacy Policy

We may update this policy occasionally to reflect Website changes or legal requirements. The latest version will always be published on this page.

contact me