LEGAL INFORMATION

Privacy Policy

Mechelle Tebbs Art respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how I collect, use, store and protect your information when you visit this website, contact me, join my mailing list or purchase an artwork or print.

Data controller: Mechelle Tebbs, trading as Mechelle Tebbs Art
Last updated: 15 September 2026

Information I Collect

The information collected depends on how you interact with my website and may include the following:

Information You Provide

  • Your name, email address and telephone number

  • Your billing and delivery address

  • Details of the artwork or print you purchase

  • Messages submitted through the contact form or sent by email

  • Your mailing-list preferences

  • Any information you provide when requesting a delivery quotation or support with an order

Information Collected Automatically

When you visit the website, certain technical information may be collected automatically through Squarespace and cookies, including:

  • Your IP address

  • Browser and device type

  • Pages visited and time spent on the website

  • Referring website or link

  • General location information

  • Information about how you interact with the website

Payment information

Payments are processed securely by third-party payment providers. I do not receive or store your complete debit or credit card details, although I may receive limited transaction information such as the payment status, amount and method used.

How I Use Your Information

I only use personal information when I have a lawful reason to do so. The way I use it and the relevant lawful basis are explained below.

  • use your information to process payments, prepare and deliver orders, provide order updates and handle returns or delivery issues.

    Lawful basis: Necessary to fulfil my contract with you.

  • use the information you provide to respond to questions, provide shipping quotations and assist with existing or potential orders.

    Lawful basis: Necessary to take steps at your request before entering into a contract, or my legitimate interest in providing customer service.

  • If you choose to join my mailing list, I use your name and email address to send collection news, studio updates and information about available artwork.

    Lawful basis: Your consent. You may unsubscribe at any time using the link included in each email.

  • I may use technical and usage information to maintain website security, understand how the website is used and improve the visitor experience.

    Lawful basis: My legitimate interests in operating and improving my website. Where non-essential cookies are involved, they will only be used with your consent.

  • I may retain order, payment and correspondence records where necessary for accounting, tax, fraud prevention or other legal requirements.

    Lawful basis: Compliance with a legal obligation and, where appropriate, my legitimate interests in protecting my business.

Sharing Your Information

I do not sell or rent your personal information. I only share it when necessary to operate my website, fulfil orders, communicate with you or meet legal obligations.

Service Providers

Your information may be shared with the following providers where necessary:

  • Squarespace, including Squarespace Email Campaigns, for website hosting, online-shop features, contact forms, subscriber lists, website analytics and email communications

  • Stripe, which processes card payments when Squarespace Payments or Stripe is enabled

  • PayPal, if you choose to offer PayPal at checkout

  • Google reCAPTCHA, where used by Squarespace to protect forms and mailing-list sign-ups from spam

  • The courier or postal provider selected for your order, for delivery and tracking

  • Professional advisers, such as an accountant, where reasonably necessary

  • A fine-art printing provider only if customer information must be supplied to fulfil or deliver an order

Legal and Business Requirements

I may also disclose information where reasonably necessary to:

  • Comply with a legal or regulatory obligation

  • Respond to a lawful request from a court, regulator or public authority

  • Prevent or investigate fraud, misuse or security incidents

  • Establish, exercise or defend legal claims

  • Protect the rights, property or safety of my customers or business

Only the information reasonably necessary for the relevant purpose will be shared.

International Transfers and Data Retention

Some service providers operate internationally, and different types of personal information need to be retained for different periods.

International Data Transfers

Some providers used by this website, including Squarespace and payment services, may process or store personal information outside the United Kingdom.

Where information is transferred internationally, I rely on the safeguards used by those providers in accordance with UK data-protection law. These may include UK adequacy regulations, approved contractual protections or another lawful transfer mechanism.

How Long I Keep Information

I retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including:

  • Order, payment and invoice records are normally retained for approximately six years to meet tax, accounting and legal requirements.

  • General enquiries are normally retained for up to 12 months after the enquiry has been resolved, unless they relate to an order or legal matter.

  • Mailing-list information is retained until you unsubscribe or ask for it to be removed. A minimal suppression record may be kept to ensure you are not contacted again.

  • Delivery information is retained only for as long as necessary to fulfil the order and maintain required business records.

  • Technical and cookie information is retained according to the settings and retention periods of the relevant website provider.

Information may be retained for longer where required by law, necessary to resolve a dispute or needed to establish or defend a legal claim.

Cookies and Analytics

This website uses cookies and similar technologies to operate correctly, remember preferences and understand how visitors use the website.

  • Essential cookies are required for core website functions such as security, navigation, shopping-cart operation and checkout. Because the website cannot function properly without them, they do not require consent.

  • Analytics cookies help provide information about how visitors find and use the website, such as which pages are viewed and how visitors move through the site.

    These cookies will only be used where you have given consent through the cookie banner.

  • Where enabled, these cookies may remember visitor choices or help measure the effectiveness of marketing and email campaigns.

    Non-essential marketing and preference cookies will only be used with your consent.

  • When you first visit the website, you can accept or reject non-essential cookies through the cookie banner. You can also change your choices later through the cookie settings available on the website.

    You may also control or delete cookies through your browser settings, although blocking essential cookies may affect how the website functions.

For more detailed information about individual cookies, please refer to the Cookie Policy or cookie settings provided on this website.

Your Data Protection Rights

Depending on the circumstances, UK data-protection law gives you rights over how your personal information is used.

  • You may request a copy of the personal information I hold about you and information about how it is being used.

  • You may ask me to correct personal information that is inaccurate or complete information that is incomplete.

  • You may ask me to delete your personal information in certain circumstances. This right may not apply where information must be retained for legal, tax or accounting purposes.

  • In certain circumstances, you may ask me to restrict how your information is used or object to its processing, including processing based on legitimate interests.

  • Where applicable, you may request that information you provided be supplied in a structured, commonly used and machine-readable format.

  • Where I rely on your consent, such as for mailing-list communications or non-essential cookies, you may withdraw it at any time. Withdrawing consent does not affect processing carried out before it was withdrawn.

  • Making a Request

    To exercise any of these rights, please contact me using the details at the end of this policy. I may need to request reasonable information to confirm your identity.

    There is normally no charge for making a request. I will respond without undue delay and generally within one month, subject to any lawful extension.

These rights are not absolute and may depend on the circumstances and the lawful reason for processing your information.

Protecting Your Information

I take reasonable technical and organisational measures to help protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

Secure Services

This website uses Squarespace’s secure hosting and SSL encryption. Payments are handled by established payment processors rather than stored directly by me.

Limited Access

Access to customer and subscriber information is limited to the accounts, systems and service providers needed to operate the website, fulfil orders and communicate with you.

Ongoing Care

Accounts and devices used to manage the business are protected using appropriate passwords and security measures. Information that is no longer required is deleted or securely disposed of where appropriate.

Although reasonable precautions are taken, no method of online transmission or electronic storage can be guaranteed to be completely secure. If a personal-data breach occurs, I will take appropriate action in accordance with applicable data-protection law.

Contact and Data-Protection Complaints

If you have a question, wish to exercise one of your rights or are concerned about how your personal information has been handled, please contact me.

Contact Me

CONTACT ME

Making a Data-Protection Complaint

Please state that your message concerns a data-protection complaint and explain what has happened. Include any relevant dates, correspondence or order number where appropriate, but do not send payment-card details.

I will acknowledge your complaint within 30 days, take appropriate steps to investigate it, keep you informed and explain the outcome without undue delay.

Complaining to the ICO

You also have the right to complain to the Information Commissioner’s Office:

Website: Make a complaint to the ICO
Telephone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

This Privacy Policy may be updated when my services, providers or legal obligations change. The latest revision date will always appear at the top of this page.