Last updated: 30 May 2025

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

J. Parsonage operates the website www.jparsonage.com, an art dealership offering original artworks, prints, and related services. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and (where applicable) the EU General Data Protection Regulation (EU GDPR).

Please read this policy carefully before using our Site or providing us with your personal data. By using the Site, you acknowledge that you have read and understood this policy.

1. WHO WE ARE (DATA CONTROLLER)

────────────────────────────────────────────────────────────────────────

J. Parsonage is the data controller responsible for your personal data.

Trading Name: J. Parsonage

Website: www.jparsonage.com

Email: james@jparsonage.com

Data Protection Enquiries: Please contact us at james@jparsonage.com

If you have any questions about this policy or how we handle your data, please contact us at the details above.

2. PERSONAL DATA WE COLLECT

We collect and process the following categories of personal data, depending on how you interact with our Site.

2.1 Newsletter and Marketing Subscribers

When you sign up for our newsletter or subscribe to receive communications from us, we collect:

• Your name

• Your email address

• Your marketing preferences

• The date, time, and mechanism of your subscription and consent

2.2 Customers Placing Orders

When you place an order through our Site, we collect the following information to fulfil your order and, where you have consented, for marketing purposes:

• Full name

• Billing address and, if different, delivery address

• Email address and telephone number

• Payment information (processed securely through our payment processor — we do not store full card details)

• Order history and transaction records

• Correspondence and communications relating to your order

2.3 Technical and Usage Data

When you visit our Site, we may automatically collect certain technical data, including:

• Your IP address

• Browser type and version

• Operating system and platform

• Pages visited, links clicked, and time spent on the Site

This data is collected via cookies and similar technologies. Please see our Cookie Policy for further information.

3. HOW AND WHY WE USE YOUR PERSONAL DATA

We will only use your personal data where we have a lawful basis to do so under the UK GDPR and EU GDPR.

PURPOSE LEGAL BASIS

─────────────────────────────────────────────────────────────────────────

Sending newsletter and marketing communications Consent — you have given us explicit consent by subscribing.

Processing and fulfilling your order Contract — processing is necessary to fulfil our contractual obligations to you.

Sending marketing to customers who opted in Consent — your explicit opt-in at the point of purchase.

at checkout

Managing our relationship and responding to Contract and Legitimate Interests.

enquiries

Complying with legal and regulatory Legal Obligation.

obligations (e.g. tax records, accounting)

Improving our Site through analytics Legitimate Interests — we have a legitimate interest in understanding how our Site is used.

Detecting and preventing fraud and security Legitimate Interests.

incidents

4. MARKETING COMMUNICATIONS

We will only send you marketing communications where you have given us your explicit consent — whether via our newsletter sign-up form or by opting in at the time of placing an order.

You have the right to withdraw your consent at any time, without detriment, by:

• Clicking the "unsubscribe" link at the bottom of any marketing email; or

• Contacting us directly at james@jparsonage.com

Withdrawal of marketing consent does not affect our ability to process your data for other lawful purposes, such as fulfilling an existing order.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5. SHARING YOUR PERSONAL DATA

We only share your personal data with third parties where it is necessary and where we have a lawful basis to do so.

5.1 Service Providers

• Payment processors — to securely process your payment. These processors are bound by their own privacy and security obligations.

• Delivery and logistics providers — to fulfil and ship your order.

• Email marketing platforms — to manage our newsletter and subscriber communications.

• Website hosting and IT service providers — who support the operation of our Site.

All third-party service providers are required to take appropriate security measures to protect your personal data and may only process it in accordance with our instructions.

5.2 Legal and Regulatory Obligations

We may disclose your personal data to law enforcement, regulators, or other authorities if required to do so by law or in connection with legal proceedings.

5.3 Business Transfers

In the event that we sell or transfer all or part of our business, your personal data may be transferred to the new owner, subject to the same protections set out in this policy.

6. INTERNATIONAL DATA TRANSFERS

Some of our third-party service providers may be based outside the UK or European Economic Area (EEA). Where we transfer your personal data internationally, we ensure that appropriate safeguards are in place, such as:

• Transfers to countries that benefit from a UK or EU adequacy decision

• Use of the International Data Transfer Agreement (IDTA) or Standard Contractual Clauses (SCCs)

• Other legally recognised transfer mechanisms

Please contact us if you would like further information about the safeguards we apply.

7. DATA RETENTION

We retain your personal data only for as long as is necessary for the purposes set out in this policy, or as required by law.

DATA CATEGORY RETENTION PERIOD

──────────────────────────────────────────────────────────────────────

Newsletter subscriber data Until you unsubscribe or withdraw consent, plus a short additional period to process the request.

Order and customer data Seven (7) years from the date of the order, in line with HMRC requirements.

Marketing consent records For the duration of the relationship, plus seven (7) years to demonstrate compliance.

Technical and usage data Up to 13 months, in line with standard analytics retention practices.

Customer correspondence Up to six (6) years from the date of the last interaction (Limitation Act 1980).

Once your data is no longer required, it will be securely deleted or anonymised.

8. YOUR RIGHTS UNDER UK AND EU GDPR

You have the following rights in relation to your personal data:

Right of access

You have the right to request a copy of the personal data we hold about you.

Right to rectification

You have the right to request that we correct any inaccurate or incomplete personal data.

Right to erasure ("right to be forgotten")

You have the right to request that we delete your personal data in certain circumstances.

Right to restrict processing

You have the right to request that we limit how we process your data in certain circumstances.

Right to data portability

Where applicable, you have the right to receive your data in a structured, commonly used, machine-readable format.

Right to object

You have the right to object to processing based on legitimate interests, and an absolute right to object to direct marketing at any time.

Right to withdraw consent

You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

Rights related to automated decision-making

You have the right not to be subject to decisions made solely by automated processing that produce significant effects on you.

To exercise any of these rights, please contact us at james@jparsonage.com. We will respond within one calendar month. We may need to verify your identity before processing your request.

If you are located in the EU, you also have the right to contact your local data protection supervisory authority.

9. COOKIES

Our Site uses cookies and similar tracking technologies. We use the following types of cookies:

• Strictly necessary cookies — essential for the Site to function correctly.

• Analytical/performance cookies — allow us to understand how visitors use our Site so we can improve it.

• Marketing cookies — used to deliver relevant content where you have consented.

Where required by law, we will ask for your consent before placing non-essential cookies. You can manage your cookie preferences through our cookie consent tool or your browser settings. Please note that disabling certain cookies may affect the functionality of the Site.

10. DATA SECURITY

We have put in place appropriate technical and organisational security measures to protect your personal data, including:

• SSL encryption for all data transmitted to and from our Site

• Access controls limiting who can access your personal data

• Regular review of our data collection, storage, and processing practices

Payment card details are encrypted and are not stored on our servers.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and will notify you directly where required by law.

11. CHILDREN'S PRIVACY

Our Site is not intended for use by individuals under the age of 18. We do not knowingly collect or process personal data from children. If you believe that a child has provided us with personal data without appropriate parental consent, please contact us at james@jparsonage.com and we will take steps to delete that information.

12. THIRD-PARTY LINKS

Our Site may contain links to third-party websites. This Privacy Policy applies only to our Site. We are not responsible for the privacy practices of third-party websites and encourage you to read their privacy policies.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised effective date. Where required by law, we will seek your consent to significant changes. We encourage you to review this policy periodically.

14. CONTACT US AND COMPLAINTS

If you have any questions, concerns, or requests relating to this Privacy Policy, please contact us:

Email: james@jparsonage.com

Website: www.jparsonage.com

Subject line: Data Protection Enquiry

This Privacy Policy was last reviewed and updated on 30 May 2025. J. Parsonage reserves the right to amend this policy at any time.

Follow

Hours

J. Parsonage