Last updated: 30 August 2026

1. WHO I AM

Lisa Hart is a sole trader based in Scotland, UK.

Email: me@lisahart.co.uk

Website: lisahart.co.uk

I am the data controller responsible for your personal data.

I am committed to protecting your personal information and handling it fairly, securely and transparently in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. WHAT PERSONAL DATA I COLLECT

Depending on how you interact with my website and business, I may collect:

When you purchase from me:

Name; Email address; Phone number; Billing and delivery address and information, where required; Payment and transaction information; Details of your purchase; Correspondence relating to your order; Cart activity.

I do not store your full payment card details. Payments are processed securely by the relevant payment provider.

When you sign up to receive emails:

Email address; First name, if provided; Other information you choose to provide.

When you contact me:

Name; Email address; Any information you choose to include in your message.

When you use my website:

Depending on your cookie and privacy choices, technical and usage information may be collected, such as:

IP address; Browser and device information; Pages visited; Date and time of visits; Referring website or source; Information about how you interact with the website.

Some of this information may be collected through cookies, pixels or similar technologies.

3. HOW I USE YOUR PERSONAL DATA

I may use your personal data to:

Process and fulfil orders; Provide digital products, downloads or other products you have requested; Send order confirmations and other necessary service communications; Respond to enquiries; Provide customer support; Manage my email list where you have chosen to receive marketing; Improve my website, products and services; Understand how my website and marketing perform, where you have given the necessary consent; Prevent fraud and maintain the security of my website and services; Keep appropriate business and financial records; Comply with legal and regulatory obligations.

4. WHERE DATA COMES FROM

I may collect personal data:

Directly from you when you purchase something, sign up to my email list, contact me or otherwise provide information to me; Automatically when you use my website, including through cookies, pixels and similar technologies, where permitted; From service providers who process information on my behalf in connection with your order, account or use of my website; From publicly available sources, where appropriate and lawful.

5. LAWFUL BASIS FOR PROCESSING

I process personal data only where I have a lawful basis to do so.

Depending on the circumstances, this may include:

Contract

Where processing is necessary to provide something you have purchased or requested, such as processing an order or providing a download.

Legal obligation

Where I need to keep or process information to comply with legal, tax, accounting or other regulatory requirements.

Consent

Where you have actively chosen to receive marketing communications or consented to optional cookies or similar technologies.

Legitimate interests

Where processing is necessary for legitimate business purposes, such as managing enquiries, maintaining business records, improving my services or protecting my website, provided that these interests are not overridden by your rights and interests.

Where consent is required, I will ask for it separately and you can withdraw it at any time.

6. EMAIL MARKETING

If you choose to subscribe to my email list, I may send you information about my products, artwork, creative projects, offers and other news from Lisa Hart.

Marketing emails will include an unsubscribe option.

You can unsubscribe at any time by clicking the unsubscribe link in a marketing email or by contacting me at: me@lisahart.co.uk

If you purchase from me, I may also send you essential service communications relating to your purchase. These are not marketing emails.

Where applicable, I may rely on the rules that allow marketing to existing customers in certain circumstances, but I will always provide an easy way to opt out.

7. WHO I SHARE YOUR DATA WITH

I do not sell or rent your personal data.

I may share personal data with trusted organisations that help me operate my business, where necessary for the purposes described in this policy.

These may include:

Shopify and other website and e-commerce service providers; Digital product and download providers; Email marketing and communication providers; Payment processors; Delivery and fulfilment providers; Print-on-demand or manufacturing partners; Website analytics and advertising providers; IT, security and technical service providers; Professional advisers, where necessary; HMRC, regulators or other authorities where I am legally required to do so.

The specific providers I use may change as my business develops.

Where a third-party processes personal data on my behalf, I take reasonable steps to ensure that appropriate data protection and security arrangements are in place.

Some service providers may process data outside the UK. Where this happens, appropriate safeguards will be used where required by UK data protection law.

Shopify

My website and online store may use Shopify to provide website, e-commerce, checkout and related services. Shopify may process personal data in its own capacity in connection with certain Shopify services and features.

Further information about how Shopify handles personal data is available in the Shopify Consumer Privacy Policy.

8. HOW LONG I KEEP YOUR DATA

I keep personal data only for as long as I reasonably need it for the purposes for which it was collected, including any legal, accounting or reporting requirements.

The exact retention period depends on the type of information.

For example:

Order and financial records may need to be retained for a number of years to meet legal and accounting requirements; Email marketing information is generally retained while you remain subscribed, and removed or suppressed when you unsubscribe, subject to any information I need to retain to record your opt-out; Enquiry and customer-service correspondence is retained only for as long as reasonably necessary to deal with the enquiry and any related matters.

When personal data is no longer required, I will securely delete it or anonymise it where appropriate.

9. YOUR RIGHTS

Under UK data protection law, you may have the right to:

Ask for access to the personal data I hold about you; Ask me to correct inaccurate or incomplete information; Ask me to delete your personal data in certain circumstances; Ask me to restrict how I use your personal data in certain circumstances; Object to certain processing, including some processing based on legitimate interests; Request your personal data in a portable format in certain circumstances; Withdraw consent where processing is based on consent.

These rights are subject to certain legal exceptions.

To exercise your rights, contact: me@lisahart.co.uk

I may need to ask for information to confirm your identity before responding to a request.

10. DATA SECURITY

I take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

11. CHILDREN

My website and products are not generally directed at children under 13, and I do not knowingly collect personal data from children for marketing purposes.

If you believe a child has provided personal information to me without appropriate consent, please contact me at: me@lisahart.co.uk

12. THIRD-PARTY WEBSITES AND SERVICES

My website may contain links to third-party websites or services.

If you follow a link to a website or service that I do not control, you should review its own privacy policy and terms.

I am not responsible for the privacy practices or security of third-party websites or services.

13. CHANGES TO THIS POLICY

I may update this Privacy Policy from time to time to reflect changes to my business, the services I use or applicable legal requirements.

The latest version will always be published on this page, with the date of the most recent update shown at the top.

14. COMPLAINTS

If you have concerns about how I have handled your personal data, please contact me first at: me@lisahart.co.uk

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Website: ico.org.uk

Telephone: 0303 123 1113

COOKIE POLICY

Last updated: 30 August 2026

WHAT ARE COOKIES?

Cookies are small files placed on your device when you visit a website. Similar technologies, including pixels, tags and other tracking technologies, may also be used.

They can help a website function, remember your preferences, understand how visitors use it and, where you have given consent, measure or support advertising.

HOW I USE COOKIES AND SIMILAR TECHNOLOGIES

I may use the following categories:

Strictly necessary technologies

These are required for the website to function properly and securely.

They may include technologies used for:

Shopping baskets; Checkout and payment processes; Account or session functionality; Security; Remembering essential preferences.

These technologies do not require consent where they are genuinely necessary for a service you have requested.

Analytics technologies

These help me understand how people use my website, such as which pages are visited, how visitors arrive at the website and how the website performs.

Analytics technologies are not automatically considered strictly necessary, so I will ask for consent where required.

Marketing and advertising technologies

I may use cookies, pixels or similar technologies to:

Measure the effectiveness of advertising; Understand how people interact with advertisements; Build or measure audiences; Improve advertising performance.

These technologies will only be used where the required consent has been obtained.

THIRD-PARTY SERVICES

Some of the services used to operate my website and business may place their own cookies or use similar technologies.

These may include providers involved in:

Website and e-commerce functionality; Payment processing; Digital products and downloads; Email marketing; Analytics; Advertising and social media.

The providers I use may change over time as my business develops.

Those providers may process information in accordance with their own privacy policies and terms.

YOUR COOKIE CHOICES

When required, you will be given the opportunity to accept or reject optional cookies and similar technologies.

You can change or withdraw your cookie choices where the website provides a consent-management facility.

You can also manage cookies through your browser settings, although browser controls may not provide the same level of control as the website's cookie settings.

Please note that blocking strictly necessary cookies may affect how the website functions.

MORE INFORMATION

If you have questions about how I use cookies or similar technologies, please contact: me@lisahart.co.uk