P r i v a c y P o l i c y
Last updated: August 2026
Christopher Andrew Art trading as CA Art (hereinafter "CA Art") respects your privacy and is fully committed to protecting your personal information, which is of the utmost importance to Christopher Andrew and employees of CA Art.
This Privacy Policy explains how personal information is collected, used, stored and protected when you visit this website, contact CA Art, make an enquiry, purchase artwork, enquire about or commission artwork, or otherwise communicate with CA Art.
This Privacy Policy is intended to comply with applicable UK data protection legislation, including the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations 2003 ("PECR"), as amended.
1. WHO IS RESPONSIBLE FOR YOUR PERSONAL INFORMATION?
For the purposes of UK data protection law, the data controller is:
Christopher Andrew Jones, Sole trader and owner of CA Art
Email: Christopher@CA-Art.co.uk
Postal address: CA Art Studio 34-35 Chatsworth Road Worthing W. Sussex BN11 1LY
Website: www.ca-art.co.uk
References in this Privacy Policy to "CA Art", "we", "us" or "our" mean the above data controller.
2. PERSONAL INFORMATION WE MAY COLLECT
Depending upon how you use the website and interact with CA Art, we may collect and process the following categories of personal information:
Identity and contact information, including your name, email address, postal or delivery address and telephone number.
Enquiry and correspondence information, including information you provide when contacting CA Art, making an enquiry about an artwork, requesting information, discussing a commission or otherwise corresponding with us.
Transaction and order information, including details of artwork purchased or commissioned, order details, delivery information, payment status and records relating to the transaction.
Payment information. Where payments are processed through a third-party payment provider, CA Art may receive information concerning the payment or transaction but may not receive or retain your complete payment-card details. Payment providers process information in accordance with their own privacy policies.
Technical and usage information, which may include your Internet Protocol (IP) address, browser type and version, device information, operating system, pages visited, dates and times of visits, referring website or source and information concerning how visitors use the website.
Marketing preferences, including whether you have asked or agreed to receive information about new artwork, exhibitions, events, commissions or other CA Art news.
Other information which you voluntarily provide when communicating with CA Art.
We do not intentionally seek to collect special-category personal data through this website. Please avoid supplying sensitive personal information unless it is necessary for a particular enquiry.
3. HOW PERSONAL INFORMATION IS COLLECTED
We may collect personal information:
(a) directly from you when you contact us, complete a website form, make an enquiry, place an order, request or discuss a commission, subscribe to communications or otherwise provide information to us;
(b) automatically through the operation of the website and the use of cookies or similar technologies, where applicable;
(C) from service providers involved in operating the website, processing payments, fulfilling orders or delivering services; and
(d) where appropriate, from publicly available sources or third parties where there is a lawful reason for doing so.
(e) Where we obtain personal information from a source other than you, we will comply with the additional transparency requirements imposed by applicable data protection legislation.
4. HOW AND WHY WE USE PERSONAL INFORMATION
We will only process personal information where we have a lawful basis for doing so.
We may use your information:
To respond to enquiries and communications.
We use contact and correspondence information to respond to questions about artwork, commissions, availability, exhibitions, purchases or other enquiries. Our lawful basis will generally be our legitimate interests in communicating with people who contact CA Art and, where the enquiry concerns a proposed purchase or commission, taking steps at your request before entering into a contract.
To process purchases and commissions.
Where you purchase or commission artwork, we process information as necessary to administer the order or commission, receive or verify payment, arrange delivery, communicate with you and otherwise perform the contract between us.
To maintain financial, tax and business records.
Certain transaction and accounting records may be retained because we are subject to legal, accounting and taxation obligations. The lawful basis is compliance with our legal obligations.
To operate, secure and improve the website.
We may process appropriate technical information to operate the website, maintain security, prevent misuse, diagnose technical problems and improve the website and user experience. Depending upon the particular processing involved, the lawful basis may be our legitimate interests or consent where consent is legally required.
To send marketing communications.
Where permitted by law, we may use your contact details to provide information about CA Art, including new artwork, exhibitions, events or other relevant news. Where consent is required, such communications will only be sent with the appropriate consent. You may withdraw your consent or opt out of marketing communications at any time.
To establish, exercise or defend legal rights.
Information may be retained or used where reasonably necessary for the establishment, exercise or defence of legal claims or for protecting our legal rights and interests.
5. LEGITIMATE INTERESTS
Where we rely upon legitimate interests as our lawful basis, those interests may include operating and managing CA Art, responding to enquiries, maintaining appropriate business records, protecting the website and business against fraud or misuse, improving our services and protecting or enforcing our legal rights.
We will only rely upon legitimate interests where we have considered the impact upon your rights and interests and consider that those interests do not override your fundamental rights and freedoms.
6. SHARING PERSONAL INFORMATION
We do not sell your personal information.
We may disclose personal information where reasonably necessary to trusted third parties providing services to CA Art, which may include:
website hosting and website service providers;
IT and technical service providers;
payment-processing providers;
delivery, postal and courier services;
professional advisers, including accountants, insurers or legal advisers;
analytics or website-performance providers, where applicable; and
government, taxation, regulatory, law-enforcement or judicial authorities where disclosure is required or permitted by law.
Third-party service providers may process information on our behalf or, in some circumstances, act as independent data controllers. Where required, appropriate contractual and data-protection arrangements will be maintained.
7. INTERNATIONAL TRANSFERS
Some third-party service providers used in connection with the website or CA Art's business may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we will take appropriate steps required by UK data protection law to ensure that the information receives an appropriate level of protection. This may include relying upon UK adequacy regulations or appropriate contractual safeguards recognised under UK data protection law.
Further information concerning safeguards applicable to a particular transfer may be requested using the contact details in this Privacy Policy.
8. HOW LONG WE KEEP PERSONAL INFORMATION
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting, taxation and reporting requirements and, where appropriate, establishing or defending legal claims.
The appropriate retention period depends upon the nature of the information and the reason for processing it.
For example:
general enquiries and correspondence will be retained only for as long as reasonably necessary having regard to the nature of the enquiry;
transaction, invoice and accounting records may be retained for the periods required by applicable taxation and accounting legislation;
information relating to contracts, purchases or commissions may be retained for an appropriate period having regard to contractual obligations and potential legal claims; and
marketing information will be retained until consent is withdrawn, you unsubscribe, or it is no longer appropriate or necessary to retain it.
Information may be securely deleted or anonymised when it is no longer required.
9. SECURITY
We take reasonable and appropriate technical and organisational measures to protect personal information against unauthorised or unlawful access, alteration, disclosure, loss, destruction or damage.
However, no method of transmitting information over the internet or electronic storage system can be guaranteed to be completely secure.
10. COOKIES AND SIMILAR TECHNOLOGIES
This website may use cookies and similar technologies.
Some cookies or technologies are necessary for the website to operate correctly. Others may be used, subject to applicable legal requirements, for purposes such as website analytics, remembering preferences or understanding how visitors use the website.
Where consent is legally required, non-essential cookies or similar technologies will not be used unless and until the appropriate consent has been provided.
Visitors must be given clear information about the cookies and similar technologies used by this website and appropriate controls for non-essential technologies.
Further information is available in our Cookie Policy [insert link] and through the website's cookie preferences facility, where applicable.
11. THIRD-PARTY WEBSITES AND SERVICES
The website may contain links to websites, social-media platforms or services operated by third parties.
CA Art does not control the privacy practices of independent third parties. If you follow a link to another website or service, the processing of your information by that third party will be governed by its own privacy policy. You should review the relevant privacy information before providing personal information to a third party.
12. YOUR DATA PROTECTION RIGHTS
Subject to the circumstances and applicable law, you may have the right to:
access personal information held about you and obtain a copy of it;
rectify inaccurate or incomplete personal information;
erase personal information in certain circumstances;
restrict processing of your personal information in certain circumstances;
object to processing, including certain processing based upon legitimate interests and processing for direct marketing;
data portability, where the legal requirements for that right are satisfied;
withdraw consent at any time where processing is based upon consent, without affecting the lawfulness of processing carried out before withdrawal; and
have rights relating to certain automated decision-making and profiling.
These rights are not absolute and may be subject to exemptions or other conditions under data protection law.
To exercise a data-protection right, please contact us using the details given in section 1.
We may need to request appropriate information to verify your identity before responding to a request.
You will not normally be required to pay a fee for exercising your rights. We will respond within the time limits prescribed by applicable data protection legislation.
13. AUTOMATED DECISION-MAKING
CA Art does not currently use personal information to make decisions based solely upon automated processing which produce legal effects, or similarly significant effects, concerning individuals.
If this changes, this Privacy Policy will be updated and the information required by law will be provided.
14. DIRECT MARKETING
You have the right to object at any time to the use of your personal information for direct marketing.
Where marketing communications are sent electronically, we will comply with applicable data-protection and electronic-communications legislation.
You can unsubscribe from marketing communications at any time by using any unsubscribe facility provided in the communication or by contacting us at [email address].
Withdrawing consent or opting out of marketing will not prevent us from contacting you where necessary concerning an existing order, commission, transaction or other non-marketing matter.
15. CHILDREN
This website is not specifically directed at children and CA Art does not knowingly seek to collect personal information from children through the website.
If we become aware that personal information relating to a child has been collected in circumstances requiring parental or other appropriate authorisation, we will take appropriate steps in accordance with applicable law.
16. COMPLAINTS
If you have a concern about how CA Art uses your personal information, please contact us in the first instance using the details in section 1 so that we have an opportunity to address your concern.
You also have the right to complain to the UK's data-protection supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
Telephone: 0303 123 1113
Website: ico.org.uk
Your right to make a complaint to the ICO is not affected by first raising the matter with CA Art.
17. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in the website, our business practices, service providers or applicable law.
The date at the top of this page will indicate when the Privacy Policy was most recently updated. We recommend checking this page periodically for changes.
18. CONTACT
For questions concerning this Privacy Policy, the use of your personal information or the exercise of your data-protection rights, please contact:
Christopher Andrew Jones
at the email address or postal address provided above in Section 1.