Privacy Policy

Privacy Policy

Last updated: 9 September 2026

John Wright Fine Art respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what information is collected when you visit www.johnwrightfineart.com, contact us or purchase an artwork. It also explains how that information is used, stored and shared, and the rights available to you.

1. Who is responsible for your information?

The data controller responsible for your personal information is:

John Wright, trading as John Wright Fine Art
Address: 169 High Street, Swanage, Dorset, BH19 2NE
Email: johnfrwright@me.com

References in this policy to “John Wright Fine Art”, “we”, “us” or “our” mean John Wright trading as John Wright Fine Art.

2. Information we may collect

Depending on how you use the website, we may collect the following information.

Information you provide

This may include:

  • your name

  • billing and delivery addresses

  • email address

  • telephone number, where required for delivery

  • order and transaction details

  • the artwork, size and presentation option purchased

  • messages and information provided when you contact us

  • cancellation, return, refund or complaint information

  • delivery instructions

  • marketing preferences, if you choose to subscribe to communications

Payment information

Payments are processed securely by the payment provider made available through the website.

John Wright Fine Art does not receive or store your complete payment-card number or card security code. We may receive limited transaction information, such as payment status, payment method, transaction reference and the amount paid.

Information collected automatically

When you visit the website, certain technical information may be collected automatically. This can include:

  • IP address

  • browser and device type

  • operating system

  • pages viewed

  • referring website or source

  • approximate location

  • dates and times of visits

  • interactions with the website

  • cookie and consent preferences

Some of this information is collected only when you consent to analytics or other non-essential cookies.

3. How we use your information

We may use personal information for the following purposes:

PurposeNormal lawful basisProcessing and fulfilling an orderPerformance of a contractTaking payment and confirming a transactionPerformance of a contractProducing, packaging and delivering an artworkPerformance of a contractProviding a Certificate of AuthenticityPerformance of a contractHandling cancellations, returns, refunds and complaintsPerformance of a contract and compliance with legal obligationsResponding to questions or requestsLegitimate interests or steps requested before entering into a contractMaintaining financial and tax recordsCompliance with legal obligationsProtecting the website, customers and business against fraud or misuseLegitimate interests and, where applicable, legal obligationsUnderstanding website use and improving its performanceConsent where non-essential cookies or similar technologies are usedSending optional marketing communicationsConsent, or another lawful basis where permitted by lawEstablishing, exercising or defending legal claimsLegitimate interests and compliance with legal obligations

Where we rely on legitimate interests, we consider whether the use of the information is necessary and whether your rights and interests outweigh our business interest.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect processing that took place before consent was withdrawn.

4. Orders and fulfilment

Limited-edition prints are produced and dispatched by a specialist professional laboratory. Our current fulfilment partner is WhiteWall.

When you place an order, we may provide the fulfilment partner with the information required to produce and deliver your artwork. This may include:

  • your name

  • delivery address

  • telephone number or email address where required by the courier

  • details of the artwork ordered

  • delivery instructions

  • relevant order references

The fulfilment partner and its delivery companies may use this information only as required to produce, dispatch, track and deliver the order, resolve delivery problems and comply with their legal obligations.

The fulfilment provider may change in the future. Any replacement will be selected with appropriate regard for quality, security and data protection.

5. Website and commerce platform

This website and online shop are hosted by Squarespace.

Squarespace processes information required to operate the website, provide shopping and checkout functions, maintain security and generate website activity information. Information may pass through Squarespace when you browse the website, submit a form or place an order.

Squarespace has its own privacy notices explaining how it processes information when providing its services.

6. Payment providers

Payments are processed by the payment service offered during checkout.

The payment provider may collect information such as your name, billing address, payment-card details, transaction information, IP address and fraud-prevention information.

Payment providers process this information under their own legal and regulatory responsibilities. Please consult the privacy notice of the payment provider displayed at checkout for further information.

We do not sell, rent or trade your payment or order information.

7. Website analytics

We use website analytics to understand how visitors find and use the website. These services may include Squarespace Analytics and Google Analytics.

Depending on your cookie choices, analytics information may include:

  • pages visited

  • time spent on the website

  • general device and browser information

  • approximate geographical location

  • traffic source

  • interactions with pages and products

  • completed purchases

Non-essential analytics technologies will be used only where the required consent has been provided.

Analytics information is used in aggregate to understand website performance and improve the visitor experience. It is not used by John Wright Fine Art to make decisions that produce legal or similarly significant effects about individual visitors.

8. Cookies

Cookies are small files stored on your device when you visit a website. Similar technologies may also be used to remember information or measure website activity.

The website may use:

  • essential cookies, required for security, navigation, checkout and other core functions

  • preference cookies, which remember choices such as cookie settings

  • analytics cookies, which help us understand how the website is used

  • third-party cookies, which may be used by connected services or embedded content

Essential cookies may operate without consent where they are necessary to provide the website or a service you have requested.

Analytics and other non-essential cookies will be used only after you have provided the required consent. You can accept or decline these through the website’s cookie banner and, where available, change your preferences later.

You can also control cookies through your browser. Blocking essential cookies may prevent parts of the website or checkout from working correctly.

The particular cookies used by Squarespace or connected services can change as those services are updated.

9. Contacting us

If you contact us by email or through a website form, we will use the information you provide to respond to your enquiry and deal with any related request.

Please do not send sensitive personal information unless it is genuinely necessary.

Emails are processed through our email service provider and may be retained as part of our business correspondence.

10. Marketing communications

We will send marketing emails only where you have requested them or where another lawful basis permits this.

You can unsubscribe at any time by:

  • selecting the unsubscribe link in a marketing email, where provided

  • contacting johnfrwright@me.com

We may retain a minimal suppression record after you unsubscribe so that we can respect your request and avoid contacting you again unintentionally.

Service messages relating to an order, delivery, return or account are not marketing and may still be sent where necessary.

11. Social media and external links

The website contains links to social media pages and other external websites.

If you follow one of these links, the external service may collect information about your visit according to its own privacy and cookie policies. John Wright Fine Art does not control how external websites process personal information.

This Privacy Policy applies only to information processed by John Wright Fine Art through this website and related business activities.

12. Who we share information with

We share personal information only where reasonably necessary.

Recipients may include:

  • Squarespace, as the website and commerce platform

  • the payment provider used during checkout

  • WhiteWall or another appointed production and fulfilment laboratory

  • couriers and delivery companies

  • website analytics providers, where consent has been given

  • email and communications service providers

  • professional advisers, including accountants, insurers or legal advisers

  • technology and security providers

  • regulators, courts, law-enforcement bodies or public authorities where legally required

These organisations receive only the information reasonably required for the relevant purpose.

We do not sell personal information.

13. International processing

Some service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate legal safeguard is available. Depending on the destination and provider, this may include:

  • a UK adequacy regulation

  • approved contractual safeguards

  • the UK International Data Transfer Agreement

  • the UK Addendum to approved standard contractual clauses

  • another transfer mechanism permitted by data-protection law

Service providers may also maintain their own legally recognised international transfer arrangements.

14. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax and dispute-resolution requirements.

Our normal retention approach is:

  • order, payment and accounting records: normally up to six years after the end of the relevant financial or accounting period

  • customer service, return and complaint correspondence: normally up to six years where connected to an order or potential legal claim

  • general enquiries that do not result in an order: normally up to two years after the last meaningful contact

  • marketing consent and subscription records: while you remain subscribed and for a reasonable period afterwards to demonstrate how your preferences were recorded

  • unsubscribe or suppression records: for as long as reasonably necessary to ensure that your request continues to be respected

  • analytics information: according to the configured retention period of the relevant analytics service and only for as long as reasonably necessary

  • cookie-consent records: for as long as reasonably necessary to record and respect your choices

Information may be retained for longer where required by law, necessary to resolve a dispute or needed to establish, exercise or defend a legal claim.

When information is no longer required, it will be deleted, anonymised or securely disposed of where reasonably practicable.

15. Security

We take reasonable organisational and technical measures to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.

These measures include using reputable service providers, secured website connections, controlled access and established payment services.

No internet transmission or storage system can be guaranteed to be completely secure. If we become aware of a personal-data breach that creates a legal reporting obligation, we will notify the relevant authority and affected individuals where required.

16. Your data-protection rights

Depending on the circumstances, you may have the right to:

  • request access to personal information held about you

  • ask for inaccurate or incomplete information to be corrected

  • ask for personal information to be deleted

  • ask for the use of your information to be restricted

  • object to certain uses of your information

  • receive certain information in a portable format

  • withdraw consent where processing is based on consent

  • object to direct marketing at any time

  • complain to the Information Commissioner’s Office

These rights are not absolute and may be subject to legal conditions or exemptions.

To exercise a right, contact johnfrwright@me.com. We may need to request information to confirm your identity before responding.

There is normally no charge for exercising your rights. We aim to respond within one month, although the law allows additional time in certain complex cases.

17. Complaints

If you have concerns about how your information has been handled, please contact us first so that we can try to resolve the matter:

Email: johnfrwright@me.com
Address: 169 High Street, Swanage, Dorset, BH19 2NE

You also have the right to complain to the UK data-protection regulator:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Website: www.ico.org.uk
Telephone: 0303 123 1113

18. Children

The website and its products are not directed specifically at children, and we do not knowingly collect personal information from children for marketing purposes.

If you believe that a child has provided personal information to us inappropriately, please contact us so that the matter can be investigated.

19. Automated decision-making

John Wright Fine Art does not use personal information to make solely automated decisions that have legal or similarly significant effects on individuals.

Payment providers and fraud-prevention services may use automated systems to assess transactions. Their privacy notices provide further details about their practices.

20. Changes to this policy

We may update this Privacy Policy to reflect changes to the website, our service providers, our business practices or the law.

The latest version will be published on this page, with the revision date shown at the top.

21. Contact

Questions about this Privacy Policy or the use of your personal information may be sent to:

John Wright Fine Art
John Wright, proprietor
Email: johnfrwright@me.com
Address: 169 High Street, Swanage, Dorset, BH19 2NE