Privacy Policy

Last updated: October 13, 2026

This policy explains what personal information I collect when you visit www.rosiepawtraits.com or commission a portrait, why I need it, and what your rights are. I keep as little as I need and I never sell it.

1. Who I am

Rosie Pawtraits is the trading name of Rosemary Grieve, a sole trader based in Suffolk, England. I am the "controller" of your personal information, which means I decide how it is used and I am responsible for looking after it.

You can contact me about anything in this policy at rosiepawtraits@gmail.com or by post at PO BOX ADDRESS.

2. What I collect

• Order and contact details: your name, email address, phone number (if you give it), billing address and delivery address.

• Your pet's photos and details: the reference photos you send, your pet's name, and anything you tell me about them, such as personality, markings or wording you'd like on the portrait.

• Gift voucher details: if you buy a voucher, the recipient's name and, if it is posted to them, their address.

• Messages: emails, contact form messages and direct messages on Instagram (@rosiepawtraits).

• Payment information: payments are taken by my website platform's payment providers (Stripe and PayPal). I see your name, the amount and the last few digits of your card, but never your full card details.

• Website usage data: basic information about how the site is used, such as pages visited, device type and approximate location, collected through cookies (see section 8).

I don't need, and don't ask for, any sensitive information about you. Please only send photos of your pet. If a photo happens to include people, I use it only to paint your pet.

3. Why I use it, and my lawful basis

UK data protection law says I must have a lawful reason for each way I use your information.

What I use it for

Taking your order, painting your portrait and posting it to you

Answering your questions before you order

Keeping accounts and tax records

Sending occasional news or offers by email

Sharing your pet's finished portrait on my website or Instagram

Keeping the website running, secure and working well

4. Sharing your pet's portrait

I love showing finished portraits, but I will only post your pet's portrait on my website, Instagram or other social media if you have said yes when ordering or by email. I will never share your full name, address or the reference photos you sent.

You can change your mind at any time by emailing me. I will remove the portrait from my website and accounts I control. I can't recall posts that other people have already shared.

5. Who I share it with

I only share your information with the people and services I need to run the business:

• Squarespace, which hosts my website, online shop and order system.

• Stripe and PayPal, which process payments.

• Gmail, which handles my email.

• [NEWSLETTER PROVIDER, e.g. Squarespace Email Campaigns], if you sign up for news.

• Royal Mail who need your name and address to deliver your portrait.

• My accountant and HMRC, for tax purposes.

I may also share information if the law requires it. I never sell your information or share it for other people's marketing.

6. Information sent outside the UK

Some of these services, including Squarespace, store data in the United States or elsewhere outside the UK. Where they do, the transfer is protected by UK-approved safeguards, such as the UK–US data bridge or the UK's International Data Transfer Agreement.

7. How long I keep it

8. Cookies

My website runs on Squarespace, which uses cookies. Some are strictly necessary to make the site and shop work, for example remembering what's in your basket. Others help me understand how visitors use the site.

When you first visit, a cookie banner lets you accept or decline non-essential cookies. You can change your choice at any time through the banner or your browser settings. Squarespace's own cookie policy lists the cookies it uses.

9. Your rights

You have the right to:

• ask for a copy of the information I hold about you

• ask me to correct anything that's wrong

• ask me to delete your information

• ask me to limit how I use it, or object to how I use it

• ask for your information in a format you can take elsewhere

• withdraw your consent at any time, for example to newsletters or portfolio sharing

To use any of these rights, email me at rosiepawtraits@gmail.com. I will reply within one month. Some rights have limits; for example, I must keep tax records for as long as the law says.

10. Keeping it safe

I keep your information in password-protected accounts with two-step sign-in where available. Only I have access to it. Reference photos are stored in a private Google Drive folder, not on shared or public drives.

11. Children

My website and services are for adults. If you are under 18, please ask a parent or guardian to order for you.

12. Complaints

If you are unhappy with how I've handled your information, please tell me first at rosiepawtraits@gmail.com. I will acknowledge your complaint within 30 days, look into it, and tell you what I've found and what I'll do.

If you're still not satisfied, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

13. Changes to this policy

I may update this policy from time to time. The date at the top shows when it last changed. If a change affects you significantly, I'll let you know by email.