Overview

Who we are

Our website address is: https://CarleensArt.com

Why do we need access to your data?

If you request a password reset, your IP address will be included in the reset email.

Members of our team have access to the information you provide us. For example, both Administrators and Shop Managers can access:

• Order information such as what was purchased, when it was purchased and where it should be sent.
• Customer information like your name, email address, and billing and shipping information.
• Our team members have access to this information to help fulfil orders, process refunds and support you.

Data is shared with 3rd party providers who enable operation of our website for example: Payment providers, Google, MailPoet (Newsletters and emails).

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Visitor comments may be checked through an automated spam detection service.

We collect information about visitors who comment on Sites that use our Akismet Anti-spam service. The information we collect depends on how the User sets up Akismet for the Site, but typically includes the commenter’s IP address, user agent, referrer, and Site URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself).

MailPoet newsletter & emails

If you have subscribed to our newsletter or if you are a member of our website (you can log in) or if you have purchased on our website, there is a good chance you will receive emails from us.

We will only send you emails which you have signed up to receive, or which pertain to the services we provided to you.

To send you emails, we use the name and email address you provided. Our site also logs the IP address you used when you signed up for the service to prevent abuse of the system.

This website can send emails through the MailPoet Sending Service. This service allows us to track opens and clicks on our emails. We use this information to improve the content of our newsletters.

No identifiable information is otherwise tracked outside this website except for the email address.

Woocommerce – What we collect and store

While you visit our site, we’ll track:

• Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed
• Location, IP address and browser type: we’ll use this for purposes like estimating taxes and shipping
• Shipping address: we’ll ask you to enter this so we can, for instance, estimate shipping before you place an order, and send you the order!

We’ll also use cookies to keep track of cart contents while you’re browsing our site.

Note: you may want to further detail your cookie policy, and link to that section from here.

When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as, to:

• Send you information about your account and order
• Respond to your requests, including refunds and complaints
• Process payments and prevent fraud
• Set up your account for our store
• Comply with any legal obligations we have, such as calculating taxes
• Improve our store offerings
• Send you marketing messages, if you choose to receive them

If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders.

We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for XXX years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses.

We will also store comments or reviews, if you choose to leave them.

Payments

We accept payments through various providers. When processing payments, some of your data will be passed to them, including information required to process or support the payment, such as the purchase total and billing information.

Please see the individual payment provider for more details:

To better understand how a provider uses and stores the data shared with them, check their privacy policies directly:

• 2checkout: https://www.2checkout.com/policies/privacy-policy
• Amazon Pay: https://pay.amazon.com/us/help/201491260
• Authorize.Net: https://www.authorize.net/company/privacy/
• eWay: https://www.eway.com.au/legal
• First Data: https://www.firstdata.com/en_us/privacy.html
• GoCardless: https://gocardless.com/en-eu/legal/privacy/
• Klarna: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_us/privacy
• PayFast: https://www.payfast.co.za/privacy-policy/
• PayPal: https://www.paypal.com/uk/webapps/mpp/ua/privacy-prev
• SnapScan: http://www.snapscan.co.za/downloads/SnapScanAppCustomerTermsConditions(v2).pdf
• Square: https://squareup.com/legal/privacy
• Stripe: https://stripe.com/gb/privacy

Privacy Policy In Full

This privacy policy applies to our use of any and all Data collected by us or provided by you in relation to your usage of CarleensArt Websites, Digital Interfaces and Apps.

This privacy policy applies between you, the User of this Website, Digital Interface or App, and Carleen Houbart, the owner and provider of these elements. 

We take the privacy of your information very seriously. Please read this privacy policy carefully.

Definitions and interpretation

1. In this privacy policy, the following definitions are used:
   Data: collectively all information that you submit to CarleensArt via the  Website. This incorporates, where applicable, the definitions provided  in the Data Protection Laws;

• Cookies: a small text file placed on your computer by this Website when you visit  certain parts of the Website and/or when you use certain features of the  Website. Details of the cookies used by this Website are set out in the  clause below (Cookies);
• Data Protection Laws: any applicable law relating to the processing of personal Data, including  but not limited to the GDPR, and any national implementing and  supplementary laws, regulations and secondary legislation;
• GDPR: the UK General Data Protection Regulation;
• CarleensArt, we or us: registered address Gwyndre, Newborough, Anglesey, LL616RU, 
• UK and EU Cookie Law: the  Privacy and Electronic Communications (EC Directive) Regulations 2003 as amended by the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011 & the Privacy and Electronic  Communications (EC Directive) (Amendment) Regulations 2018;
• User or you: any third party that accesses the Websites, Digital Interfaces and Apps and is not either (i) employed by CarleensArt and acting in the course of their employment or (ii) engaged as a consultant or otherwise providing services to CarleensArt and accessing the Websites, Digital Interfaces and Apps in  connection with the provision of such services; 
• Website
  1. All usage of www.CarleensArt.com including your online profile
  2. And any sub-domains of these digital interfaces and sites unless expressly excluded by their own terms and conditions

2. In this privacy policy, unless the context requires a different interpretation:

• the singular includes the plural and vice versa;
• references  to sub-clauses, clauses, schedules or appendices are to sub-clauses,  clauses, schedules or appendices of this privacy policy;
• a reference to a person includes firms, companies, government entities, trusts and partnerships;
• “including” is understood to mean “including without limitation”;
• reference to any statutory provision includes any modification or amendment of it.
• the headings and sub-headings do not form part of this privacy policy.

Scope of this privacy policy

3. This  privacy policy applies only to the actions of CarleensArt and our Users with respect to our Websites, Apps and Digital Interfaces. It does not extend to any websites that can be accessed from this those listed including, but not limited to, any links we may provide to social media websites.

4. For purposes of the applicable Data Protection Laws, CarleensArt is the “data controller”. This means that
we determine the purposes for which, and the manner in which, your Data is processed.

Data collected

5. We may collect the following Data, which includes personal Data, from you:

• name
• contact information such as email addresses and telephone numbers
• time zone
• job title
• profession
• age / date of birth
• gender
• demographic information such as postcode, preferences, and interests
• financial information such as credit / debit card numbers which are used by our partner payment providers
• IP address (automatically collected)
• web browser type and version (automatically collected)
• operating system (automatically collected)
• a  list of URLs starting with a referring site, your activity on these  Websites, Digital Interfaces and Apps, and the site you exit to  (automatically collected)

In each case, in accordance with this privacy policy

How we collect Data

6. We collect Data in the following ways:

• data is given to us by you ;
• data is received from other sources; and
• data is collected automatically.

Data that is given to us by you

7. We will collect your Data in a number of ways, for example:

• when you contact us through the Websites, Apps and Digital Interfaces, by telephone, post, e-mail or through any other means
• when you register with us and set up an account to receive our products/services/newsletters
• when you complete surveys that we use for research purposes (although you are not obliged respond to them)
• when you enter a competition or promotion through a social media channel
• when you make payments to us, through these Websites, Apps and Digital Interfaces or otherwise
• when you elect to receive marketing communications from us
• when you use our services
  In each case, in accordance with this privacy policy.

Data that is received from third-parties’ sources

8. We will receive Data about you from the following third parties:

• Facebook;
• X;
• Instagram;
• LinkedIN;
• Google;
• Hubspot;

Data that is received from publicly available third parties sources

9. We will receive Data about you from the following publicly available third-party sources:

• industry association lists
• contact directories
• online desk research

Data that is collected automatically

10. To the extent that you access the Websites, Apps and Digital Interfaces, we will collect your Data automatically, for example:

• we  automatically collect some information about your visits to our  Websites, Apps and Digital Interfaces. This information helps us to make  improvements to Website content and navigation, and includes your IP  address, the date, times and frequency with which you access the Website  and the way you use and interact with its content.
• we  will collect your Data automatically via cookies, in line with the  cookie settings on your browser. For more information about cookies, and  how we use them on our Websites, Apps and Digital Interfaces, see the  section below, headed “Cookies”.

Our use of Data

11. Any  or all of the above Data may be required by us from time to time in  order to provide you with the best possible service and experience when  using our website, apps and digital interfaces. Specifically, Data may  be used by us for the following reasons:

• internal record keeping. improvement of our products / services
• transmission by email of marketing materials that may be of interest to you
• contact  for market research purposes which may be done using email, telephone,  fax or mail. Such information may be used to customise or update our  Websites, Apps and Digital Interfaces in each case, in accordance with this privacy policy.

12. We  may use your Data for the above purposes if we deem it necessary to do  so for our legitimate interests. If you are not satisfied with this, you  have the right to object in certain circumstances (see the section  headed “Your rights” below).

13. To tell you about our products and services that you may be interested in.

14. For the delivery of direct marketing to you via e-mail, we’ll need your consent, whether via an opt-in or soft-opt-in:

• soft  opt-in consent is a specific type of consent which applies when you  have previously engaged with us (for example, you contact us to ask us  for more details about a particular product/service, and we are  marketing similar products/services). Under “soft opt-in” consent, we  will take your consent as given unless you opt-out.
• for  other types of e-marketing, we are required to obtain your explicit  consent; that is, you need to take positive and affirmative action when  consenting by, for example, checking a tick box that
  we’ll provide.
• if  you are not satisfied with our approach to marketing, you have the  right to withdraw consent at any time. To find out how to withdraw your  consent, see the section headed “Your rights” below.

15. When  you register with us and set up an account to receive our services, the  legal basis for this processing is the performance of a contract  between you and us and/or taking steps, at your request, to enter into  such a contract.

16. We  may use your Data to show you adverts and other content on other websites. If you do not want us to use your data to show you   adverts and other content on other websites,  please turn off the relevant cookies (please refer to the section headed  “Cookies” below).

Who we share Data with

17. We may share your Data with the following groups of people for the following reasons:

• any of our group companies or affiliates – to facilitate and optimise your experience
• our employees, agents and/or professional advisors – to facilitate and optimise your experience
• third  party service providers who provide services to us which require the  processing of personal data – to facilitate and optimise your experience
• third party payment providers who process payments made over these Websites, Digital Interfaces and Apps – to facilitate and optimise your experience
• digital  advertising providers including LinkedIn, Meta (Facebook and  Instagram), You Tube, X, Google ads

In each case, in accordance with  this privacy policy.

Keeping Data secure

18. We will use technical and organisational measures to safeguard your Data, for example:

• access  to your account is controlled by a password and a username that is  unique to you. Please note we reserve the right to change usernames or  delete accounts which have usernames some people may find offensive.
• we store your Data on secure servers
• payment  details are encrypted using SSL technology (typically you will see a  lock icon or green address bar (or both) in your browser when we use  this technology

19. We will use technical and organisational measures to safeguard your Data, for example:reach. If you suspect any misuse or loss or unauthorised access  to your Data, please let us know immediately by contacting us via this  e-mail address: support@CarleensArt.com

20. If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.

Data retention

21. Unless a longer retention period is required or permitted by law, we will only hold your Data on our systems for the period necessary to fulfil the purposes outlined in this privacy policy or until you request that the Data be deleted.

22. Even if we delete your Data, it may persist on backup or archival media for legal, tax or regulatory purposes.

Your rights

23. You have the following rights in relation to your Data:

• Right to access – the right to request (i) copies of the information we hold about you at any time, or (ii) that we modify, update or delete such information. If we provide you with access to the information we hold about you, we will not charge you for this, unless your request is “manifestly unfounded or excessive.” Where we are legally permitted to do so, we may refuse your request. If we refuse your request, we will tell you the reasons why.
• Right to correct – the right to have your Data rectified if it is inaccurate or incomplete.
• Right to erase – the right to request that we delete or remove your Data from our systems.
• Right to restrict our use of your Data – the right to “block” us from using your Data or limit the way in which we can use it.
• Right to data portability – the right to request that we move, copy or transfer your Data.
• Right to object – the right to object to our use of your Data including where we use it for our legitimate interests.

24. To make enquiries, exercise any of your rights set out above, or withdraw your consent to the processing of your Data (where consent is our legal basis for processing your Data), please contact us via this e-mail address: support@CarleensArt.com

25. If you are not satisfied with the way a complaint you make in relation to your Data is handled by us, you may be able to refer your complaint to the relevant data protection authority. For the UK, this is the Information Commissioner’s Office (ICO). The ICO’s contact details can be found on their website at https://ico.org.uk/.

26. It is important that the Data we hold about you is accurate and current. Please keep us informed if your Data changes during the period for which we hold it.

Transfers outside the United Kingdom and European Economic Area

27. Data which we collect from you may be stored and processed in and transferred to countries outside of the UK and European Economic Area (EEA). For example, this could occur if our servers are located in a country outside the UK or EEA or one of our service providers is situated in a country outside the UK or EEA. We also share information with our group companies, some of which are located outside the UK or EEA.

28. We will only transfer Data outside the UK or EEA where it is compliant with data protection legislation and the means of transfer provides adequate safeguards in relation to your data, e.g. by way of data transfer agreement, incorporating the current standard contractual clauses adopted by the European Commission.  

29. To ensure that your Data receives an adequate level of protection, we have put in place appropriate safeguards and procedures with the third parties we share your Data with. This ensures your Data is treated by those third parties in a way that is consistent with the Data Protection Laws.

Links to other websites 

30. These Websites, Apps and Digital Interfaces may, from time to time, provide links to other websites. We have no control over such websites and are not responsible for the content of these websites. This privacy policy does not extend to your use of such websites. You are advised to read the privacy policy or statement of other websites prior to using them.

Changes of business ownership and control 

31. We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of CarleensArt. Data provided by Users will, where it is relevant to any part of our business so transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this privacy policy, be permitted to use the Data for the purposes for which it was originally supplied to us.

32. We may also disclose Data to a prospective purchaser of our business or any part of it.

33. In the above instances, we will take steps with the aim of ensuring your privacy is protected.

Cookies 

34. Our Websites, Apps and Digital Interfaces may place and access certain Cookies on your computer. We uses Cookies to improve your experience of using its Websites, Apps and Digital Interfaces and to improve our range of products and services. We have carefully chosen these Cookies and has taken steps to ensure that your privacy is protected and respected at all times.

35. All Cookies used by this Websites, Apps and Digital Interfaces are used in accordance with current UK and EU Cookie Law.

36. Before the Websites, Apps and Digital Interfaces places Cookies on your computer, you will be presented with a message bar requesting your consent to set those Cookies. By giving your consent to the placing of Cookies, you are enabling us to provide a better experience and service to you. You may, if you wish, deny consent to the placing of Cookies; however certain features of the Website may not function fully or as intended.

37. This Website may place the following Cookies:

• Strictly necessary cookies: These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services. 
• Analytical/performance cookies: They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily. 
• Functionality cookies:  These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region). 
• Targeting cookies: These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose. 

38. You can find a list of Cookies that we use in the Cookies Schedule.

39. You can choose to enable or disable Cookies in your internet browser. By default, most internet browsers accept Cookies but this can be changed. For further details, please consult the help menu in your internet browser.

40. You can choose to delete Cookies at any time; however you may lose any information that enables you to access the Website more quickly and efficiently including, but not limited to, personalisation settings.

41. It is recommended that you ensure that your internet browser is up-to-date and that you consult the help and guidance provided by the developer of your internet browser if you are unsure about adjusting your privacy settings.

42. For more information generally on cookies, including how to disable them, please refer to aboutcookies.org. You will also find details on how to delete cookies from your computer.

General 

43. You may not transfer any of your rights under this privacy policy to any other person. We may transfer our rights under this privacy policy where we reasonably believe your rights will not be affected.

44. If any court or competent authority finds that any provision of this privacy policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforce-ability of the other provisions of this privacy policy will not be affected.

45. Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.

46. This Agreement will be governed by and interpreted according to the law of England and Wales. All disputes arising under the Agreement will be subject to the exclusive jurisdiction of the English and Welsh courts.

Changes to this privacy policy 

47. We reserve the right to change this privacy policy as we may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the Website and you are deemed to have accepted the terms of the privacy policy on your first use of the Website following the alterations.   You may contact us by email at Support@CarleensArt.com

Attribution

This privacy policy was created on 4th  December 2025

Cookies

“Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit 

http://www.allaboutcookies.org. 

Below is a list of the cookies that we use. We have tried to ensure this is complete and up to date, but if you think that we have missed a cookie or there is any discrepancy, please let us know. 

Strictly necessary 

We use the following strictly necessary cookies: 

hs_opt_out :This cookie is used by the opt-in privacy policy to remember not to ask the visitor to accept cookies again. This cookie is set when you give visitors the choice to opt out of cookies. It contains the string “yes” or “no”. It expires in 13 months. 

__hs_do_not_track : This cookie can be set to prevent the tracking code from sending any information to HubSpot. It contains the string “yes”. It expires in 13 months. 

__hs_initial_opt_in :This cookie is used to prevent the banner from always displaying when visitors are browsing in strict mode. It contains the string “yes” or “no”. It expires in seven days. 

__hs_cookie_cat_pref : This cookie is used to record the categories a visitor consented to. It contains data on the consented categories. It expires in 13 months. 

hs_ab_test : This cookie is used to consistently serve visitors the same version of an A/B test page they’ve seen before. It contains the id of the A/B test page and the id of the variation that was chosen for the visitor. It expires at the end of the session. 

hs-messages-is-open : When visiting a password-protected page, this cookie is set so future visits to the page from the same browser do not require login again. The cookie name is unique for each password-protected page. It contains an encrypted version of the password so future visits to the page will not require the password again. It expires in 14 days. 

hs-messages-hide-welcome-message : This cookie is used to prevent the chat widget welcome message from appearing again for one day after it is dismissed. It contains a Boolean value of True or False. It expires in one day. 

__hsmem : This cookie is set when visitors log in to a HubSpot-hosted site. It contains encrypted data that identifies the membership user when they are currently logged in. It expires in one year. 

hs-membership-csrf : This cookie is used to ensure that content membership logins cannot be forged. It contains a random string of letters and numbers used to verify that a membership login is authentic. It expires at the end of the session. 

hs_langswitcher_choice : This cookie is used to save the visitor’s selected language choice when viewing pages in multiple languages. It gets set when an end user selects a language from the language switcher and is used as a language preference to redirect them to sites in chosen language in the future, if they are available. It contains a colon delimited string with the ISO639 language code choice on the left and the top-level private domain it applies to on the right. An example will be “EN-US:hubspot.com”. It expires in two years. 

_cfruid : This cookie is set by HubSpot’s CDN provider because of their rate limiting policies. It expires at the end of the session. 

__cf_bm : This cookie is set by HubSpot’s CDN provider and is a necessary cookie for bot protection. It expires in 30 minutes. 

MailPoet – email and newsletters

mailpoet_page_view – Cookie expiry: 3,650 days: The purpose of this cookie is to track the last time a subscriber viewed any page on the site.

mailpoet_revenue_tracking – Cookie expiry: 14 days: The purpose of this cookie is to track which newsletter sent from your website has acquired a click-through and a subsequent purchase in your WooCommerce store.

mailpoet_subscriber – Cookie expiry: 3,650 days: The purpose of this cookie is to track subscriber engagement. It is used when the user logs in, signs up in a form, confirms subscription to a newsletter, or places an order through WooCommerce.
Note: User must be opted-in and a confirmed subscriber.

popup_form_dismissed_{$formId} – the expiration date varies and can be set per form: This cookie is used to track if a user has previously dismissed a specific form, preventing the re-display of the form until the cookie’s expiration date. It is applicable for popup, slide-in, or fixed bar forms.

This sample language includes the basics around what personal data your store may be collecting, storing and sharing, as well as who may have access to that data. Depending on what settings are enabled and which additional plugins are used, the specific information shared by your store will vary. We recommend consulting with a lawyer when deciding what information to disclose on your privacy policy.

We collect information about you during the checkout process on our store.

Analytical/performance 

We use the following analytical/performance cookies:

_ga and _gid,: Used to distinguish users. 

_ga_ : Used to persist session state. 

_gac_gb_ : Contains campaign related information. If you have linked your Google Analytics and Google Ads accounts, Google Ads website conversion tags will read this cookie unless you opt-out. Learn more. 

The ga.js JavaScript library uses first-party cookies to: Determine which domain to measure; distinguish unique users; throttle the request rate; remember the number and time of previous visits; remember traffic source information; determine the start and end of a session; remember the value of visitor-level custom variables 

Targeting 

We use the following targeting cookies: 

Facebook Pixel : Collects data that helps us track conversions from Facebook ads, to optimize ads, and build targeted audiences for future ads and remarketing. 

LinkedIN insight ad : Tracks website conversions tied to our LinkedIn ads to help optimise our marketing and remarketing campaigns 

Google ads : Tracks website conversions tied to our Google ads to help optimise our marketing and remarketing campaigns 

If you require further information about our Processing of your Personal Data, please contact our Data Protection Officer via the contact us form on www.CarleensArt.com