Privacy Policy

Last Updated: 5 June 2025

At GetGoArt, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website https://www.getgoart.com and purchase our products. We comply with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).

1. Who We Are

GetGoArt is a UK-based e-commerce business selling art prints. Our website address is: https://www.getgoart.com

2. Information We Collect

We collect various types of personal data from you when you interact with our website, place an order, or communicate with us.

a. Information You Provide Directly:

  • Account Information: When you create an account, we collect your name, email address, and password.

  • Order Information: When you place an order, we collect your name, billing address, shipping address, email address, phone number, and payment details.

  • Communications: When you contact us via email, contact forms, or other means, we collect the content of your communication and your contact information.

  • Reviews & Comments: If you leave comments or product reviews, we collect the data shown in the comments form, and also your IP address and browser user agent string to help spam detection.

b. Information Collected Automatically (via Cookies and Tracking Technologies):

  • Usage Data: We collect information about how you interact with our website, including the pages you visit, products you view, and actions you take.

  • Technical Data: We collect technical information about your device, such as your IP address, browser type and version, operating system, and referral source.

  • Cookies: Our website uses cookies to function correctly (e.g., maintain your shopping cart), analyze website traffic, and personalize your experience. Please see our Cookie Policy page for more detailed information about the cookies we use and how to manage your preferences.

3. How We Use Your Information (Purposes and Legal Bases)

We use your personal data for the following purposes, based on the specified legal grounds under UK GDPR:

  • To Process and Fulfill Your Orders (Contractual Necessity): We use your name, address, payment details, and contact information to process your purchase, arrange for production and shipping via Printful, and send you order confirmations and updates.

  • To Manage Your Account (Contractual Necessity/Legitimate Interest): To allow you to create and manage your user account, view your order history, and save your preferences.

  • To Communicate with You (Legitimate Interest/Consent): To respond to your inquiries, provide customer support, send important service announcements (e.g., changes to policies), and (with your consent) send marketing communications or newsletters.

  • To Improve Our Website and Services (Legitimate Interest): We use usage and technical data to understand how our website is used, identify areas for improvement, troubleshoot issues, and enhance your Browse and shopping experience. This may involve analytics tools.

  • For Security and Fraud Prevention (Legal Obligation/Legitimate Interest): To protect our website, prevent fraudulent transactions, and ensure the security of our systems and users.

  • To Comply with Legal Obligations (Legal Obligation): To meet our legal and regulatory requirements, including tax obligations and consumer protection laws.

4. Sharing Your Information (Third Parties)

We share your personal data with third parties only when necessary for the purposes outlined in this policy:

  • Printful (Our Print-on-Demand and Fulfilment Partner): We share your shipping address, contact name, product selection, and any relevant order notes with Printful for the sole purpose of producing and shipping your order. Printful acts as a “data processor” on our behalf, processing your data according to our instructions and their own privacy policy which you can find on their website.

  • Payment Processors: We use trusted third-party payment gateways (e.g., Stripe, Woocommerce) to process your payments securely. We do not store your full credit card details on our servers. Your payment information is directly provided to these processors, who handle it according to their own privacy policies.

  • Shipping Carriers: Printful shares your shipping details with their chosen shipping carriers (e.g., Royal Mail, FedEx, DHL, USPS) to deliver your order.

  • Analytics Providers: We use analytics services (e.g., Google Analytics) to understand website traffic and user behavior. These services may collect data such as IP addresses and Browse activity. This data is usually aggregated and anonymized where possible.

  • Marketing Platforms: If you opt-in to marketing communications, we may share your email address with email marketing platforms (e.g., Mailchimp) to send you newsletters and promotional offers.

  • Legal Compliance: We may disclose your information if required by law, court order, or governmental authority.

5. International Data Transfers

As we use Printful and other global service providers, your data may be transferred to and stored in countries outside the UK, including the European Economic Area (EEA) and the United States. Where such transfers occur, we ensure appropriate safeguards are in place to protect your data, such as standard contractual clauses approved by the UK Information Commissioner’s Office (ICO), or other mechanisms deemed adequate under UK GDPR.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. This typically means:

  • Order information is retained for [e.g., 7 years for tax purposes] after the order is completed.

  • Account information is retained as long as your account is active.

  • Marketing consent is retained until you withdraw it.

7. Your Data Protection Rights (Under UK GDPR)

As a data subject under UK GDPR, you have the following rights regarding your personal data:

  • The Right to Be Informed: About how your data is collected and used (this Privacy Policy serves this purpose).

  • The Right of Access: To request copies of the personal data we hold about you.

  • The Right to Rectification: To request that we correct any inaccurate or incomplete personal data.

  • The Right to Erasure (“Right to be Forgotten”): To request that we delete your personal data in certain circumstances.

  • The Right to Restrict Processing: To request that we limit the way we use your personal data in certain circumstances.

  • The Right to Data Portability: To request that we transfer your personal data to another organisation, or directly to you, in a structured, commonly used, machine-readable format.

  • The Right to Object: To our processing of your personal data in certain circumstances, including for direct marketing.

  • Rights in Relation to Automated Decision Making and Profiling: To object to decisions made solely based on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

To exercise any of these rights, please contact us at i[email protected]. We will respond to your request within one month.

8. How We Protect Your Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes using SSL encryption on our website, secure servers, and limiting access to personal data to authorized personnel only.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the updated policy on our website with a new “Last Updated” date.

10. How to Complain

If you have any concerns about our use of your personal data, you can make a complaint to us at [email protected]. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO). Their website is: www.ico.org.uk.