Privacy policy
Last updated: 8th May, 2026
I am Hannah Rowney, a sole trader based in Scotland, UK, selling my original artwork and fine art prints around the world. Your privacy and rights are very important to me.
This Privacy Policy explains how I collect, use, and protect your personal information when you visit my website, place an order, or contact me.
My online store is hosted by Shopify, which provides the ecommerce platform that allows me to run my shop securely.
Information I Collect
When you interact with my website, I may collect the following personal information:
- Your name, billing address, shipping address, email address, and phone number
- Account details if you create a customer account (such as login information)
- Order details and purchase history
- Messages or enquiries you send to me
- Payment information (processed securely by Shopify and trusted payment providers - I do not store your card details myself)
- Basic technical information such as your IP address, browser type, and how you use the website
I only collect information that is necessary to run my shop, process orders, provide customer support, and meet legal obligations.
How I Use Your Information
I use your personal information to:
- Process and fulfil your orders
- Take payment securely through Shopify and payment providers
- Arrange shipping and delivery
- Communicate with you about your order or enquiries
- Provide customer support
- Improve my website and services
- Send marketing emails only if you have opted in. You can opt-out of receiving these communications at any time by following the instructions in our emails or contacting us directly.
- Comply with legal, tax, and accounting obligations
- Help prevent fraud or misuse of the website
Where Your Information Comes From
Most information is provided directly by you when you place an order, create an account, sign up to emails, or contact me.
Some information is collected automatically when you use the website, such as device and browsing data, through cookies and similar technologies.
I may also receive information from Shopify and other service providers where necessary to operate my store and process orders.
Sharing Your Information
I only share your personal information when it is necessary to run my business and provide services to you.
This may include:
- Shopify, which hosts and powers my online store
- Trusted payment providers that securely process payments
- Delivery companies that ship your orders
- Service providers that help operate the website or email communications
These providers only have access to the information they need to perform their services.
I may also share information if required to comply with legal obligations, prevent fraud, or protect my rights.
Relationship with Shopify
My store is hosted by Shopify, which provides the platform that allows me to sell artwork and manage orders.
When you use this website, your personal information is processed by Shopify on my behalf. Shopify may also process some data to operate, secure, and improve its services.
Some data may be processed outside the UK or European Economic Area (EEA), but Shopify uses appropriate safeguards to protect your information in line with data protection laws.
To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy . Depending on where you live, you may exercise certain rights with respect to your personal information here Shopify Privacy Portal Link.
Cookies and Tracking Technologies
This website uses cookies and similar technologies provided by Shopify and other services to help the site function properly, improve performance, and understand how visitors use the site.
Some cookies are essential for the website to work (for example, enabling your shopping basket or account login). Others are optional and may be used for analytics, personalisation, or marketing, depending on your consent.
When you first visit the website, you can choose which cookies you allow using the cookie banner. You can change your preferences at any time through your browser settings or the cookie tool on the site.
Disabling some cookies may affect how the website functions.
Marketing Emails
If you subscribe to my mailing list, I may send you occasional emails about new artwork and shop updates.
I will only send you marketing emails if you have given your consent.
You can unsubscribe at any time by clicking the link in any email or contacting me directly.
You will still receive essential emails about your orders even if you unsubscribe.
Order Emails
When you place an order, I will send you emails related to your purchase, such as order confirmation, shipping updates, and tracking information.
These emails are necessary to complete your order and keep you informed.
They are not marketing emails.
International Data Transfers
Some of your personal information may be processed outside the UK or EEA, including in countries such as the United States or Canada, where Shopify and its service providers operate.
When this happens, appropriate safeguards are used to ensure your data is protected in line with UK and EU data protection laws.
Data Retention
I keep your personal information only for as long as necessary to fulfil your order, provide customer support, and meet legal and tax obligations.
For UK tax and accounting purposes, I generally keep order information for up to 6 years.
After this period, your data is securely deleted.
Security
I take appropriate measures to protect your personal information from unauthorised access, use, or disclosure.
While I work to keep your data secure, no method of transmission or storage is completely secure, and I cannot guarantee absolute security.
Your Rights
Under UK and EU data protection laws, you have the following rights:
- The right to access your personal data
- The right to correct inaccurate data
- The right to request deletion of your data
- The right to restrict how your data is used
- The right to request your data in a portable format
- The right to withdraw consent at any time
- The right to object to certain types of processing, including marketing
How to Exercise Your Rights
If you would like to exercise any of these rights, please contact me at: contact@hannahrowney.com
I will respond within one month. In some cases, I may need to verify your identity before processing your request.
Children’s Privacy
This website is not intended for children under 13, and I do not knowingly collect personal data from anyone under this age.
If you believe a child has provided personal data, please contact me and I will delete it.
Complaints
If you are unhappy with how I handle your personal data, please contact me first so I can try to resolve the issue.
You also have the right to complain to:
- The Information Commissioner’s Office (ICO) in the UK
- Your local data protection authority if you are in the EU/EEA here.
Third-Party Links
My website may contain links to third-party websites, such as social media or external services.
I am not responsible for the privacy practices of these websites, and I recommend reviewing their privacy policies before sharing any personal data.
Changes to This Policy
I may update this Privacy Policy from time to time to reflect changes in my business or legal requirements.
The latest version will always be available on this page, with the “Last Updated” date shown at the top.
Contact
If you have any questions about my privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you please contact me at:
Email: contact@hannahrowney.com
Name: Hannah Rowney
Address: 2 Barnton Park Gardens, Edinburgh, SCT, EH4 6HN, GB
Phone: +44(0)7868255215
For the purpose of applicable data protection laws, I am the data controller of your personal information.