The boring but essential page....Updated September 2026
This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from caitlinscanvas.com (the “Site”).

WHO WE ARE

Caitlin's Canvas, is the trading name for Artist Caitlin Falloon, who is the data controller responsible for your personal information.

The terms used in this policy such as "we" "us" and "our" refer to Caitlin Falloon and anyone working in association with Caitlin's Canvas. 

If you have any questions about how we collect, use or protect your personal information, you can contact us at caitlin.r.falloon@icloud.com or through our Contact page.
 

PERSONAL INFORMATION

When you visit the Site, we may collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we may collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

We collect Device Information using the following technologies:

• “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

• “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

• “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. We refer to this information as “Order Information.”

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.
 

HOW DO WE USE YOUR PERSONAL INFORMATION?

We use the Order Information that we collect generally to fulfil any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations).

Additionally, we may use this Order Information to:

Communicate with you;
Screen our orders for potential risk or fraud; and
When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
 

SHARING YOUR PERSONAL INFORMATION

We won't sell your data to other companies but we may have to share your data in order to provide and improve our services for example in order to power an online store or to analyse how our customers use the Site. we will always endeavour to choose the most secure and reputable service providers in these situations. Your data security is important to us. 

Finally, we may also share your Personal Information to comply with applicable laws and regulations.
 

LAWFUL BASES FOR PROCESSING

We only use your personal information where we have a lawful basis to do so under applicable data protection law. Depending on how you interact with the Site, we may rely on the following lawful bases:

• Contract – where the use of your personal information is necessary to process and fulfil your order, take payment, arrange delivery, manage returns or refunds, provide customer service, or otherwise perform our contract with you.

• Legal obligation – where we need to use or retain information to comply with legal or regulatory requirements, including accounting, taxation or responding to lawful requests from public authorities.

• Legitimate interests – where the use of your information is necessary for our legitimate business interests and those interests are not overridden by your rights and interests. This may include protecting our website and business from fraud and misuse, improving our services, analysing business performance and maintaining appropriate records.

• Consent – where you have actively agreed to a particular use of your personal information, such as receiving certain marketing communications or allowing optional cookies and similar technologies where consent is required. You can withdraw your consent at any time.

Where we send marketing communications using the permitted “soft opt-in” for existing customers, we may rely on our legitimate interests as the lawful basis for processing your personal information, provided the applicable legal requirements are met and you are given a clear opportunity to opt out.
 

MARKETING COMMUNICATIONS

We may use your personal information to send you news, offers, product updates and other marketing communications from Caitlin's Canvas where we are permitted to do so.

You may choose to sign up for marketing communications online, at a show or event, or when entering a competition. Where consent is required, we will ask you to make a clear positive choice to opt in. Making a purchase, requesting a digital receipt, attending an event or entering a competition does not automatically subscribe you to marketing communications.

​

YOUR RIGHTS

Under UK data protection law, you may have the following rights in relation to your personal information:​

If you would like to exercise any of your rights, please get in touch with us through our Contact page. 
 

DATA RETENTION

We keep your personal information only for as long as reasonably necessary for the purposes for which it was collected, including to fulfil our contractual obligations, provide customer service, comply with legal, accounting and tax requirements, prevent fraud and resolve disputes.

The length of time we retain information may vary depending on the type of information and why we hold it. We regularly review our retention periods and securely delete or anonymise personal information when it is no longer required.

Where you ask us to delete your personal information, we will do so where the right to erasure applies. We may need to retain certain information where we have a legal obligation or another lawful reason to keep it.
 

CHANGES

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
 

CONTACT

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us.