Privacy policy
This page explains what personal information I collect when you visit or shop with DaisyBee Arts, why I collect it, how long I keep it, and what rights you have over it.
DaisyBee Arts is a small independent art business run by one person, so there's no marketing department poring over your data. I collect what I need to take your order, paint your commission, get it to you, and keep the records the law requires. Nothing more.
If you have any questions about anything here, email me at daisybeearts@gmail.com.
Who is responsible for your information
I'm Daisy Banks, a sole trader trading as DaisyBee Arts, and I'm the data controller for the personal information described on this page. That means I'm the one responsible for looking after it.
DaisyBee Arts
73 Airyhall Drive
Aberdeen
AB15 7QQ
United Kingdom
daisybeearts@gmail.com
What information I collect
When you place an order, I collect your name, email address, delivery address, billing address, phone number if you give one, and the details of what you ordered.
When you pay, your card details go directly to Shopify and its payment providers. I never see or store your full card number. I only see the last four digits, the card type, and confirmation that payment went through.
When you sign in to an account, Shopify sends a one-time code to your email address. Your account holds your order history and the addresses you have saved. There's no password for me to store.
When you sign up to my emails, I collect your email address and the fact that you opted in, and send you your 10% welcome code.
When you send an enquiry or a message, through the contact form, the commission form or by email, I keep what you tell me: your name, email, phone number if you give one, and your message. A phone number is only used to call or text you about your enquiry.
When you start a commission, I collect the photos and notes you send me of the place or pet you'd like painted. There's a section on this below.
When you leave a review, I collect your name, email address, what you bought, your rating and your review, and a link to a photo if you add one.
When you browse the site, Shopify collects standard technical information such as your IP address, device and browser type, and which pages you looked at. This keeps the shop working and secure, and, if you allow it, tells me in general terms how the shop is being used.
I don't use the Meta pixel, Google Analytics or any third-party advertising trackers on the site.
Cookies
The site uses a small number of cookies, all set by Shopify.
Necessary cookies make the shop work, for example remembering what's in your cart, keeping checkout secure and keeping you signed in. These are always on, because the shop can't work without them.
Analytics cookies tell me things like how many people visited and which pages they looked at. These are only set if you agree to them on the cookie banner when you first visit.
You can change your choice at any time with the Cookie preferences link at the bottom of every page.
Commission photos
To paint a commission I work from photos you send me, usually of a house, a building or a much-loved pet.
How I use them. Your photos are used only to paint your commission. That's it.
Other people in your photos. I paint places and pets, not people, so there's no need to send photos of anyone. If someone happens to be in a photo, please make sure they're happy for you to share it with me.
How long I keep them. I keep your photos for 12 months after your commission is finished, in case there's a question about the work. After that I delete them. If you'd like me to delete them sooner, just ask.
Sharing your commission. I won't post your photos, your finished commission, or anything that could identify you or your home on social media or this website without asking you first and getting a clear yes. If you'd rather your piece stayed private, that's completely fine.
Why I'm allowed to use your information
Under UK data protection law I need a lawful basis for using your information. Mine are:
- To carry out our contract. Taking your order, taking payment, painting your commission, posting your order, and handling returns.
- Your consent. Sending you marketing emails, analytics cookies, publishing your review, and sharing your commission publicly. You can withdraw consent at any time.
- My legitimate interests. Answering your enquiries, keeping the shop secure, preventing fraud, and keeping basic records of what I've painted and sold.
- Legal obligation. Keeping order and payment records for tax purposes.
Who I share your information with
I don't sell your personal information to anyone, and I never will. I share it only with the services I need to run the shop:
- Shopify, which hosts the shop, sends my emails and processes orders on my behalf. You can read the Shopify Consumer Privacy Policy.
- Payment providers, to take payment securely.
- Royal Mail, which needs your name and address to deliver your parcel.
- HMRC or other authorities, only where the law requires me to.
How long I keep things
- Order records: 6 years after the end of the tax year they belong to, which is what HMRC requires.
- Email subscribers: until you unsubscribe, then I remove you from the list.
- Commission photos: 12 months after the commission is finished, unless you ask me to delete them sooner.
- Enquiries and emails: around 2 years, unless they relate to an order or something still ongoing.
- Reviews: published reviews stay on the site until you ask me to take yours down.
Marketing emails
If you've signed up to my emails, I'll send you occasional news about new paintings, prints and commission openings. I won't pass your email to anyone else for their own marketing.
Every email has an unsubscribe link at the bottom, and you can use it at any time, or just email me and ask. I'll still send you emails about orders you've placed, because those aren't marketing.
Information going outside the UK
Shopify and some of the services it uses are based outside the UK, mainly in Canada, the United States and Ireland, so your information may be transferred and stored there.
Where that happens, the transfer is protected by legal safeguards such as the UK International Data Transfer Agreement, or by the country being recognised as giving your information adequate protection.
Keeping your information safe
The shop runs on Shopify, which handles security, encryption and payment protection to industry standards. Card payments are encrypted and processed by certified payment providers.
On my side, I'm the only person with access to customer information, and I delete what I no longer need. No system can promise perfect security, so please don't send anything sensitive by email.
Children
The shop isn't aimed at children, and I don't knowingly collect information about anyone under 16. If you think a child has given me their information, email me and I'll delete it.
Your rights
Under UK data protection law you have the right to:
- access the personal information I hold about you
- correct anything that's wrong or incomplete
- have your information deleted, where there's no legal reason for me to keep it
- restrict or object to how I use it
- get a copy of your information in a format you can take elsewhere
- withdraw your consent at any time, where consent is what I relied on
To use any of these rights, email me at daisybeearts@gmail.com. I'll reply within one month, and it's free. I may need to check it's really you first, which usually just means confirming details from your order.
Complaints
If you're unhappy with how I've handled your information, please tell me first and I'll do my best to put it right.
You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at any time: ico.org.uk/make-a-complaint.
Changes to this policy
I'll update this page if the way I handle your information changes, and change the date below when I do. If the change is significant, I'll let subscribers know by email.
Contact
Email: daisybeearts@gmail.com
I aim to reply within 2 to 3 working days.
Last updated: October 2026