Privacy Policy
Last Updated: 30 August 2026
1. Who controls your personal information
Rachel Ford trading as Rachel Ford in Colour is the controller of personal information processed for the operation of Rachel Ford in Colour.
Business address: 37 Sea Road, Carlyon Bay, St Austell, Cornwall, PL25 3SF
Telephone: 07545 067383
Email: rachel@rachelfordincolour.com
2. Purpose of this Privacy Policy
This Privacy Policy explains:
• what personal information Rachel Ford in Colour collects;
• why it is collected;
• how it is used;
• the lawful basis for processing;
• who it may be shared with;
• how long it may be retained;
• how it is protected; and
• the rights available to individuals.
3. Data protection law
Rachel Ford in Colour processes personal information in accordance with applicable UK data protection and privacy law, including the UK GDPR, Data Protection Act 2018 and Privacy and Electronic Communications Regulations 2003 as amended.
4. Information collected when you place an order
Information may include:
• name;
• email address;
• telephone number;
• billing address;
• delivery address;
• products purchased;
• order value;
• delivery option;
• payment method;
• payment status;
• transaction reference;
• order notes;
• refund information;
• return information; and
• order history.
5. Payment information
Payments may be processed by third-party payment providers such as PayPal, Apple Pay, Google Pay or payment services made available through Wix.
Rachel Ford in Colour may receive information such as:
• payer name;
• confirmation that payment succeeded or failed;
• transaction reference;
• partial payment-card information where supplied by the provider;
• refund status; and
• fraud or risk indicators.
Rachel Ford in Colour does not intend to store complete card security codes or online banking passwords.
6. Customer accounts
If customer accounts are enabled, Rachel Ford in Colour and Wix may process information including:
• account name;
• email address;
• saved addresses;
• order history;
• account preferences;
• login and authentication information;
• account activity; and
• security information.
Saved payment functionality, where available, is provided through payment-platform technology rather than by Rachel Ford manually retaining complete card details.
7. Enquiries and correspondence
If you contact Rachel Ford in Colour, information may include:
• your name;
• contact details;
• enquiry;
• email correspondence;
• telephone notes;
• WhatsApp messages;
• contact-form submissions;
• complaint information;
• return information; and
• other information you choose to provide.
8. Reviews and comments
If you submit a review or comment, information may include:
• display name;
• review text;
• rating;
• date;
• purchase-verification information;
• moderation records;
• technical anti-abuse information; and
• communications concerning the review.
9. Customer photographs
Customers may voluntarily send photographs showing Rachel Ford artwork in their home or another setting.
Rachel Ford in Colour may retain:
• the image;
• accompanying message;
• name;
• contact details;
• date received; and
• the permission record.
A photograph will not be used for the website, social media, advertising or printed marketing merely because it was sent to Rachel Ford in Colour.
Separate permission will be obtained for reuse.
10. Website and technical information
When you use the website, information may be collected automatically by Wix and other enabled services.
This may include:
• IP address;
• browser;
• device;
• operating system;
• approximate location derived from technical information;
• page views;
• referring page;
• session information;
• website interaction information;
• cookie identifiers;
• security logs; and
• error information.
11. Analytics
Rachel Ford in Colour may use Wix Analytics and may use Google Analytics where configured.
Non-essential analytics technologies that require consent will not be deliberately activated before the required consent is obtained.
Analytics may be used to understand:
• visitor numbers;
• popular pages;
• navigation patterns;
• general website performance;
• device categories; and
• technical problems.
12. Marketing technology
Rachel Ford in Colour does not currently intend to use extensive personalised or behavioural advertising.
Meta Pixel, TikTok Pixel, Google Ads conversion tracking or similar tools should not be enabled unless Rachel Ford in Colour decides to use them and updates the privacy and cookie information accordingly.
13. Direct marketing
Rachel Ford in Colour intends to keep marketing communications limited.
Where occasional marketing email is offered, the business will comply with applicable electronic marketing rules.
Where consent is required, it will be obtained through a clear positive choice.
Marketing consent will not be a condition of purchasing artwork.
14. Service communications
Messages necessary to manage an order are not optional marketing.
Rachel Ford in Colour may contact a customer about:
• order confirmation;
• payment;
• delivery;
• collection;
• returns;
• refunds;
• security;
• suspected fraud;
• account issues; and
• customer service matters.
15. WhatsApp
WhatsApp may be used for customer contact.
Customers should not send full card numbers, card security codes, passwords, online banking credentials or unnecessary identity documents through WhatsApp.
WhatsApp and its provider operate under their own privacy arrangements.
16. High-value transaction information
For a high-value or unusual transaction, Rachel Ford in Colour may request proportionate additional information.
This may include:
• proof of identity;
• proof of address;
• source-of-funds information;
• confirmation of the payer;
• explanation of a third-party payment;
• sanctions-screening information; and
• relevant fraud-prevention information.
This information will not be requested routinely where the circumstances do not justify it.
17. Special category information
Rachel Ford in Colour does not normally need information about health, ethnicity, religion, sexual life, political opinions, trade union membership, genetics or biometrics to sell artwork.
Customers should avoid sending unnecessary sensitive information.
Where sensitive information is voluntarily provided, Rachel Ford in Colour will handle it appropriately and will not use it for an unrelated purpose.
18. Lawful basis: contract
Rachel Ford in Colour may process personal information because it is necessary to take steps at your request before entering a contract or to perform a contract.
This applies to activities such as:
• processing an order;
• taking payment;
• arranging delivery;
• arranging collection;
• issuing refunds;
• handling returns; and
• providing order-related customer service.
19. Lawful basis: legal obligation
Rachel Ford in Colour may process information where necessary to comply with legal duties.
This may include:
• tax;
• accounting;
• consumer law;
• court orders;
• regulatory duties;
• fraud reporting;
• sanctions obligations; and
• financial-crime requirements where applicable.
20. Lawful basis: legitimate interests
Rachel Ford in Colour may rely on legitimate interests where appropriate.
Legitimate interests may include:
• operating a secure website;
• preventing fraud;
• protecting artwork and intellectual property;
• keeping appropriate business records;
• responding to customers;
• defending legal claims;
• protecting accounts;
• preventing website abuse; and
• improving business operations.
Rachel Ford in Colour will consider whether those interests are overridden by the rights and interests of the individual.
21. Lawful basis: consent
Consent may be used for processing such as:
• non-essential cookies;
• optional analytics where consent is required;
• occasional marketing;
• publication of customer photographs; and
• other optional uses.
Consent can be withdrawn.
Withdrawal does not make earlier processing unlawful where it was lawful at the time.
22. Wix
The website is built using Wix.
Wix may process information to provide:
• hosting;
• ecommerce;
• accounts;
• forms;
• security;
• site analytics;
• cookie consent management;
• website administration; and
• other enabled Wix features.
Rachel Ford in Colour remains responsible for its own decisions about how customer information is used.
23. Payment providers
Personal information may be shared with payment providers where necessary to process or secure a payment.
Providers may include:
• PayPal;
• Apple Pay;
• Google Pay;
• Wix payment partners;
• card processors; and
• banks involved in bank transfers.
Those providers may act as processors or independent controllers depending on the service.
24. Delivery providers
Information may be shared with postal, courier or specialist art-transport businesses where necessary to deliver an order.
This may include:
• name;
• delivery address;
• telephone number;
• email address;
• parcel reference; and
• delivery instructions.
Only information reasonably required for delivery should be provided.
25. Professional advisers and service providers
Information may be shared where necessary with trusted providers such as:
• accountants;
• bookkeepers;
• legal advisers;
• insurers;
• IT support;
• website support;
• fraud-prevention providers; and
• professional advisers.
Access should be limited to information relevant to the service provided.
26. Public authorities
Rachel Ford in Colour may disclose information where legally required or lawfully permitted to public authorities such as:
• HM Revenue & Customs;
• courts;
• police;
• law-enforcement agencies;
• the Information Commissioner's Office;
• sanctions authorities; and
• other competent regulators.
27. Sale of personal information
Rachel Ford in Colour does not sell customer personal information as a business model.
28. International processing
Rachel Ford in Colour currently sells only within Great Britain.
Some technology and payment providers may nevertheless process personal information outside the United Kingdom.
Where UK data protection law requires safeguards for a restricted international transfer, an appropriate legal mechanism should be used by the relevant organisation.
29. Retention
Rachel Ford in Colour does not intend to keep personal information indefinitely without reason.
Different information will be kept for different periods depending on legal, tax, accounting, fraud, consumer and operational requirements.
30. Order, invoice and accounting records
Order and accounting records may be retained for up to six years or another period required by tax, accounting or legal requirements.
31. Customer accounts
Account information may be retained while the account remains active and for a reasonable period afterwards.
Information required for tax, legal claims or fraud prevention may be retained separately for longer where justified.
32. General enquiries
General enquiries will normally be retained only for as long as reasonably necessary.
As a general working approach, routine closed enquiries may be deleted within 24 months unless there is a reason to retain them.
33. Complaints and disputes
Records relating to significant complaints, disputes or legal claims may be retained for up to six years after resolution where appropriate.
34. Reviews
Published reviews may remain visible while relevant to the website.
Verification and moderation records will be retained only for as long as reasonably necessary for authenticity, legal and fraud-prevention purposes.
35. Cookie consent records
Cookie preference and consent records may be retained for a reasonable period to remember the user's choices and demonstrate how consent was managed.
36. Marketing records
Marketing consent records may be retained while relevant.
Where a person opts out, a minimal suppression record may be retained so that Rachel Ford in Colour can respect the opt-out.
37. High-value verification records
Where formal anti-money laundering record-keeping requirements apply, the statutory retention period will be followed.
Where checks are voluntary, information will be retained only for a proportionate period based on the risk and purpose.
38. Security
Rachel Ford in Colour will use reasonable technical and organisational measures to protect personal information.
Measures may include:
• HTTPS;
• secure Wix administration;
• strong passwords;
• multi-factor authentication where available;
• device security;
• software updates;
• limited administrative access;
• reputable payment providers;
• backups where appropriate;
• fraud monitoring; and
• deletion of information no longer required.
39. Personal data breaches
If a personal data breach occurs, Rachel Ford in Colour will assess what happened and the risk to affected individuals.
Where legally required, Rachel Ford in Colour will notify the Information Commissioner's Office within the applicable period.
Where a breach is likely to result in a high risk to affected individuals and notification is legally required, the affected individuals will also be informed.
40. Your rights
Depending on the circumstances, you may have rights including:
• the right to be informed;
• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restrict processing;
• the right to data portability;
• the right to object;
• rights relating to certain automated decisions; and
• the right to withdraw consent.
These rights are not absolute in every situation.
41. Subject access requests
You may ask Rachel Ford in Colour for access to personal information held about you.
You do not need to use special legal wording.
Rachel Ford in Colour may need enough information to verify your identity before disclosing personal data.
42. Correction
If information is inaccurate or incomplete, you may ask for it to be corrected.
43. Deletion
You may ask Rachel Ford in Colour to erase personal information where the law gives you that right.
Some information may need to be retained despite a deletion request because of tax, accounting, fraud, legal-claim or other legal requirements.
44. Objection to direct marketing
You may object to direct marketing at any time.
Where you object, Rachel Ford in Colour will stop using your personal information for that direct marketing.
45. Children
The shop, customer accounts and purchases are intended for people aged 18 or over.
Rachel Ford in Colour does not knowingly seek children's personal information for ecommerce accounts.
If the business becomes aware that personal information has been provided by a child without an appropriate legal basis, the information will be reviewed and appropriate action taken.
46. Complaints
If you have a privacy concern, contact Rachel Ford in Colour first.
Telephone: 07545 067383
Email: rachel@rachelfordincolour.com
You also have the right to complain to the Information Commissioner's Office.
47. Changes to this Privacy Policy
This Privacy Policy will be reviewed when:
• website functionality changes;
• new tracking tools are introduced;
• payment or delivery providers change;
• marketing changes;
• new products are introduced; or
• data protection law changes.
The latest version will be published on the website.