Privacy Policy

Rhiannon Cackett ("the Artist") is committed to protecting your personal data and being transparent about how it is used. This Privacy Policy explains what data is collected through https://www.rhiannoncackettartist.com, why it is collected, and how it is handled, in accordance with the EU General Data Protection Regulation (GDPR) and Organic Law 3/2018 (LOPDGDD).


1. Who Is Responsible for Your Data?

Data Controller: Rhiannon Cackett

Website: https://www.rhiannoncackettartist.com

Email: hello@rhiannoncackettartist.com

Location: Barcelona, Spain


2. What Personal Data Is Collected?

Depending on how you interact with this website, the following data may be collected:

  • Identification data: first name, last name.

  • Contact data: email address.

  • Transaction data: purchase details, shipping address, order history.

  • Navigation data: IP address, browser type, pages visited, time on site (via analytics).

  • Communication data: messages sent through the contact form.


3. Legal Basis for Processing

Your data is processed on the following legal bases:

  • Contract performance: to process and fulfil your order, including shipping and payment.

  • Consent: to send newsletter emails with updates, new work, and offers. You can withdraw consent at any time.

  • Legitimate interest: to protect the website from fraud and abuse.

  • Legal obligation: to retain financial records as required by applicable law.


4. How Your Data Is Used

Contact Form

Data submitted via the contact form is used solely to respond to your enquiry. It is not used for marketing without your explicit consent.

Newsletter Subscription

If you subscribe to the mailing list, your name and email address will be used to send you the newsletter, new work announcements, exhibition news, and your welcome discount code. Your data is processed via MailerLite. You can unsubscribe at any time using the link in any email.

Purchase / E-commerce

When you place an order, your name, email, and shipping address are used to process and deliver your purchase. Payment is handled securely by SquareSpace payment platform, the Artist does not store card details.

Analytics

If you consent, Google Analytics collects anonymous data about how visitors use the site (pages visited, time on site, traffic source). This helps improve the website. No personally identifiable data is sent to Google.


5. How Long Is Your Data Kept?

  • Customer purchase data: kept for 4 years (in accordance with Spanish tax law).

  • Newsletter subscribers: until you unsubscribe.

  • Contact form enquiries: up to 1 year, unless an ongoing relationship is established.

  • Analytics data: as configured in Google Analytics (standard retention: 14 months).


6. Is Your Data Shared?

Your data is never sold. It may be shared with:

  • Squarespace (website platform and e-commerce), acting as data processor.

  • Squarespace payment processing, secure, PCI-DSS compliant.

  • Shipping carriers, only the name and address needed for delivery.

  • Google Analytics, anonymous usage data only.

  • Email marketing platform (MailerLite), newsletter subscribers only.


All third-party processors are GDPR-compliant. Where data is transferred outside the EU/EEA (e.g. Google, Squarespace), appropriate safeguards are in place (Standard Contractual Clauses).


7. Your Rights

Under the GDPR, you have the right to:

  • Access: request a copy of the personal data held about you.

  • Rectification: request correction of inaccurate data.

  • Erasure ('right to be forgotten'): request deletion of your data, subject to legal obligations.

  • Restriction: request that processing of your data is restricted.

  • Portability: receive your data in a structured, machine-readable format.

  • Object: object to processing based on legitimate interest.

  • Withdraw consent: at any time, where consent is the legal basis (e.g. newsletter).


To exercise any of these rights, contact: hello@rhiannoncackettartist.com. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD): www.aepd.es


8. Cookies

Please refer to the separate Cookie Policy for full information on how cookies are used on this website.


9. Security

This website uses HTTPS encryption. The Artist takes appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure.


10. Changes to This Policy

This Privacy Policy may be updated from time to time. Any changes will be posted on this page with the updated date. Continued use of the website after changes are posted constitutes your acceptance.