Effective Date: 18/05/2018

 Last Updated: 20/08/2025

Suzanne Brooks Art (“Company,” “we,” “our,” or “us”) respects your privacy and is committed to protecting it. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website, purchase artwork, commission a painting, or sign up for our newsletters.

This Policy has been drafted in line with:

• The Isle of Man Data Protection Act 2018 (implementing EU GDPR).
   
• The UK GDPR and Data Protection Act 2018.
   

By using our services, you consent to the practices described in this Privacy Policy.

We may collect and process the following categories of personal information:

• Name, billing address, shipping address, email address, and phone number when you purchase artwork or commissions.
   
• Payment information (processed securely through third-party providers such as Stripe or PayPal — we do not store card details).
   
• Details and photographs you share for commissioned artwork (e.g., pet portraits).
   
• Your preferences for receiving newsletters, updates, or promotions.
   
• Any information you provide when contacting us via email, social media, or forms.
   

• Technical data such as your IP address, browser type, operating system, and browsing behaviour on our website.
   
• Cookies, pixels, and similar tracking technologies (see Section 8).
   

We process your personal data to:

• Fulfil orders and commissions (processing payments, shipping artwork, creating commissioned pieces).
   
• Deliver digital products (ebooks, art guides, courses).
   
• Provide customer support and respond to inquiries.
   
• Send marketing communications such as new collection launches, early access to sales, or studio updates (with your consent).
   
• Maintain records for tax, accounting, and legal compliance.
   
• Improve our website and services through analytics and performance monitoring.
   
• Protect against fraud and maintain the security of our online shop.
   

We rely on the following lawful bases under Isle of Man DPA 2018, UK GDPR, and EU GDPR:

• Contract: To process your purchases, commissions, or digital downloads.
   
• Consent: For newsletters, marketing emails, and personalised promotions.
   
• Legal obligation: For tax, accounting, and regulatory purposes.
   
• Legitimate interest: To improve services, secure our systems, and grow our art business.
   

We never sell your personal data. We may share it only with:

• Payment providers (Stripe, PayPal) for secure transactions.
   
• Delivery partners (Royal Mail, couriers) to ship artwork.
   
• IT and hosting providers for secure website operation.
   
• Analytics and marketing tools (such as Meta, Google Analytics) to improve reach and marketing.
   
• Legal authorities if required by law or for the protection of rights.
   

If you are outside the Isle of Man or UK, your data may be transferred internationally. Where transfers occur, we use safeguards such as Standard Contractual Clauses to ensure compliance with GDPR and Isle of Man law.

We keep personal data only as long as necessary:

• Order and commission records: retained for 7 years to comply with tax law.
   
• Marketing subscriptions: retained until you unsubscribe or withdraw consent.
   
• Commission photographs/reference material: deleted once the work is complete and delivered (unless you consent for us to use it for marketing).
   

• Access a copy of the personal data we hold.
   
• Request correction of inaccurate data.
   
• Request deletion of data (where legally permissible).
   
• Restrict or object to processing of your data.
   
• Data portability (to receive your information in a machine-readable format).
   
• Withdraw consent at any time (e.g., for marketing emails).
   

To exercise your rights, please contact us at suzanne@suzannebrooks.co.uk

We use cookies, pixels, and analytics to:

• Improve browsing and user experience.
   
• Track website performance and sales conversions.
   
• Deliver personalised marketing (if you consent).
   

You can manage or disable cookies through your browser settings.

We implement appropriate technical and organisational safeguards to protect your personal information from loss, misuse, or unauthorised access.

Our services are not intended for children under 16. We do not knowingly collect personal data from children.

Our website and newsletters may contain links to other websites. We are not responsible for the privacy practices of those third parties.

We may update this Privacy Policy to reflect changes in law or business practices. Updates will be posted on our website with the revised “Last Updated” date.

If you have any questions or wish to exercise your rights, please contact us:

Suzanne Brooks Art
Email: suzanne@suzannebrooks.co.uk
Address: 1 Lumby Terrace Shipyard Road Ramsey IOM IM8 3DW

If you are located in the Isle of Man, you also have the right to lodge a complaint with the Isle of Man Information Commissioner’s Office (ICO):
https://www.inforights.im