Privacy Policy

This policy explains what personal information Artway Ltd collects when you visit or buy from art-kits.co.uk, how we use it, who we share it with, and the rights you have over your data.

Last updated: 19 June 2026

Who we are

Artway Ltd ("we", "us", "our") operates the online store at art-kits.co.uk. We are the data controller responsible for your personal data.

Artway Ltd, 17 Merlin Way, Bowerhill Industrial Estate, Melksham, Wiltshire, SN12 6TJ, United Kingdom.
Telephone: 01225 819241

For any questions about this policy or your data, contact us at privacy@artway.co.uk.

What information we collect

Depending on how you use our store, we may collect:

  • Technical & usage data — your IP address, device and browser type, the pages and products you view, timestamps, and how you reached our site. Collected through cookies and similar technologies.
  • Account data — if you create an account: your name, email address and login details.
  • Order data — when you buy from us: your name, billing and delivery address, email, phone number, and order history.
  • Payment data — card payments are handled directly by our payment providers; we do not store your full card details.
  • Communications & marketing data — messages you send us, and your marketing preferences if you sign up to hear from us.

How we use your data and our legal bases

Under UK GDPR we must have a lawful basis for using your personal data. The table below sets out what we do and why.

What we do Lawful basis
Run the store, keep you logged in, remember your basket and process and deliver your orders Performance of a contract
Keep records for tax, accounting and fraud-prevention purposes Legal obligation
Keep the site secure, monitor performance and improve how it works Legitimate interests
Send you marketing emails and show you relevant offers Consent (you can withdraw it at any time)
Set non-essential cookies (analytics and marketing) Consent

Cookies and tracking

Cookies are small text files placed on your device. We use essential cookies that are needed to make the store work — for example to keep you logged in and remember what's in your basket. These don't require your consent.

We also use non-essential cookies for analytics and marketing. Under the Privacy and Electronic Communications Regulations (PECR) we only set these with your consent, which you give through our cookie banner when you first visit. You can change or withdraw your choices at any time using the cookie settings link, or by adjusting your browser settings.

Marketing

If you ask to hear from us, we use Klaviyo to send marketing emails about our products, offers and news. We only send these with your consent. Every email includes an unsubscribe link, and you can opt out at any time by clicking it or by emailing privacy@artway.co.uk. Opting out of marketing won't stop service messages relating to orders you've placed.

Who we share your data with

We don't sell your personal data. We share it only with the trusted providers that help us run the store, and only as far as they need it to provide their service:

  • BigCommerce — the platform that hosts and runs our online store.
  • Stripe, PayPal and Apple Pay — to process card and digital payments securely. Our store is PCI-DSS compliant.
  • Klaviyo — to manage and send our marketing emails.
  • Delivery and courier partners — to ship your orders.

We may also disclose information where we are legally required to do so, for example to comply with a court order or tax obligations.

International transfers

Some of our providers (including BigCommerce, Stripe and Klaviyo) are based in or process data in the United States. Where your data is transferred outside the UK, we make sure it's protected by an approved safeguard — such as the UK extension to the EU–US Data Privacy Framework, or the UK's International Data Transfer Agreement (IDTA) and standard contractual clauses.

How long we keep your data

We keep personal data only for as long as we need it:

  • Account data — for as long as you hold an account with us. You can ask us to close your account and delete it at any time.
  • Marketing data — until you unsubscribe or withdraw consent.

We may keep some information longer where we have a legal obligation to do so, or for the detection and prevention of fraud.

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you;
  • Rectify data that is inaccurate or incomplete;
  • Erase your data ("right to be forgotten"), where applicable;
  • Restrict or object to how we use it;
  • Port your data to another provider;
  • Withdraw consent at any time, where we rely on it.

To exercise any of these rights, contact privacy@artway.co.uk. We'll respond within one month. Exercising your rights is free, and we won't treat you differently for doing so.

How to complain

If you're unhappy with how we've handled your personal data, please tell us first so we can put it right. Email us at privacy@artway.co.uk, or write to us at the address above. We'll acknowledge your complaint within 30 days, investigate it without undue delay, keep you informed, and tell you the outcome.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

Changes to this policy

We may update this policy from time to time to reflect changes to our services or the law. When we do, we'll post the new version here and update the "last updated" date at the top. Significant changes will be highlighted on our home page.