🔒 Privacy Policy

Last updated: 8th April 2025

At Art by Lelli, your privacy is important to us. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or make a purchase from www.artbylelli.co.uk.

1. What Information We Collect

We may collect and process the following personal information:

  • Your name

  • Email address

  • Billing and shipping address

  • Phone number

  • Payment details (processed securely via Stripe – we do not store full card information)

  • Order history

  • Website usage data (via cookies and analytics tools)

2. How We Use Your Information

We use your information to:

  • Process and fulfill your orders

  • Send you order confirmations and updates

  • Communicate with you about your purchase or enquiry

  • Improve our website and customer experience

  • Send occasional marketing emails (only if you opt-in)

3. Sharing Your Information

We do not sell or rent your personal data to third parties. However, we may share your information with trusted services necessary to operate our store, such as:

  • Stripe – for secure payment processing

  • Shipping providers – to deliver your order

  • Email marketing tools – if you’ve opted into our newsletter

  • Analytics platforms – for website performance insights

These third parties are only given the data necessary to perform their services and are bound by privacy obligations.

4. Your Rights

Under the UK GDPR and Data Protection Act 2018, you have the right to:

  • Access the personal data we hold about you

  • Request correction of incorrect or outdated information

  • Request deletion of your data (where applicable)

  • Withdraw consent for marketing at any time

  • Lodge a complaint with a data protection authority

To exercise any of these rights, please contact us at hello@artbylelli.co.uk.

5. How We Protect Your Data

We take security seriously. Our website uses SSL encryption, and all payment transactions are processed securely through Stripe, which is PCI-compliant. We also limit access to your data to authorised personnel only.