Privacy policy

Last updated Sept 2026


Gavin Burnett Studio respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how Gavin Burnett Studio collects, uses and protects personal information when you visit or purchase from gavinburnettstudio.co.uk, contact the studio, or otherwise interact with the business.

1. Who we are

Gavin Burnett Studio is the data controller responsible for your personal information.

If you have any questions about this Privacy Policy or how your personal information is used, please contact:

Gavin Burnett Studio
Email: gavin_burnett@hotmail.com
Website: gavinburnettstudio.co.uk

2. What information we collect

When you purchase from Gavin Burnett Studio or contact us, we may collect some or all of the following information:

  • Your name
  • Billing address
  • Delivery address
  • Email address
  • Telephone number, if you provide one
  • Details of the products you purchase
  • Order and transaction information
  • Information contained in correspondence you send to us


We may also collect limited technical information when you visit our website, such as your IP address, browser type, device information and information about how you use the website. This may depend on the cookies and technologies used by Big Cartel and other services connected to the website.

3. How we use your information

We use your personal information to:

  • Process and fulfil orders
  • Arrange payment for purchases
  • Arrange delivery of your purchases
  • Contact you about an order
  • Respond to enquiries and customer-service requests
  • Deal with returns, refunds or complaints
  • Maintain appropriate business and transaction records
  • Comply with legal, tax and accounting obligations
  • Protect our website and business against fraud or other unlawful activity

We do not use your customer information to operate a newsletter or regular marketing mailing list.

We do not sell or rent your personal information to third parties.

4. Our lawful basis for processing your information

Under UK data protection law, we need a lawful basis for processing your personal information.

Depending on the circumstances, we may rely on:

Contract

We process information that is necessary to accept, process and fulfil your order and provide the products you have purchased.

Legal obligation

We may need to retain or process certain information to comply with legal, tax, accounting or other regulatory requirements.

Legitimate interests

We may process information where it is necessary for legitimate business purposes, such as responding to enquiries, maintaining business records, protecting our website and preventing fraud, provided that your rights and interests are not overridden.

Consent

Where consent is required, we will ask for it before processing your information for that particular purpose. Where we rely on consent, you can withdraw it at any time.

5. Who we share your information with

We only share personal information where necessary to provide our services, fulfil your order, operate our business or comply with the law.

Big Cartel

Our online shop is operated using Big Cartel, which provides the e-commerce platform and technology used to operate our online store.

Big Cartel processes customer information on behalf of merchants in connection with their online stores. Gavin Burnett Studio remains responsible for the personal information processed in connection with our store.

Stripe

We use Stripe to process certain payments.

When you choose a payment method processed by Stripe, relevant information is securely transferred to Stripe so that the payment can be authorised and processed.

We do not store your full payment card details ourselves.

Stripe processes personal information in accordance with its own privacy policy.

PayPal

We also offer PayPal as a payment method.

Where you choose PayPal, relevant information is provided to PayPal so that your payment can be authorised and processed.

PayPal processes personal information in accordance with its own privacy policy.

Royal Mail

We may provide your name, delivery address and relevant contact details to Royal Mail where necessary to deliver your order.

Legal and regulatory authorities

We may disclose personal information where required by law, regulation, court order or other lawful authority, or where necessary to establish, exercise or defend our legal rights.

6. Social media

Gavin Burnett Studio operates business pages on Instagram and Facebook.

If you choose to interact with us through Instagram or Facebook, such as by commenting on a post, sending a message or otherwise contacting us through those platforms, the relevant social media company may process your personal information in accordance with its own privacy policy and terms.

We may receive and use information that you voluntarily provide to us through these platforms in order to respond to you or deal with your enquiry.

We do not operate a customer marketing mailing list through Instagram or Facebook.

The use of Instagram and Facebook is separate from the processing of information required to purchase products through our online shop.

7. Cookies

Our website may use cookies and similar technologies.

Some cookies may be necessary for the website and online shop to function correctly, including features associated with shopping baskets, checkout and security.

Other cookies or similar technologies may be used by Big Cartel or third-party services connected to the website.

Where applicable, non-essential cookies will only be used in accordance with applicable legal requirements and, where required, with your consent.

You can also manage or restrict cookies through your web browser settings.

The specific cookies used by the website may change as Big Cartel or the services connected to the website are updated.

8. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected.

Order and transaction information may be retained for as long as necessary to:

  • Complete and administer your order
  • Deal with returns, refunds or complaints
  • Maintain appropriate business records
  • Meet legal, tax and accounting requirements

Information contained in customer correspondence may be retained for as long as necessary to deal with the enquiry and maintain appropriate business records.

We do not retain customer information for marketing-list purposes because Gavin Burnett Studio does not operate a newsletter or marketing mailing list.

When personal information is no longer required, we will take reasonable steps to securely delete it or otherwise dispose of it.

9. International transfers

Some of the third-party services used to operate our website or process payments may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, appropriate safeguards will be used where required by applicable data protection law.

10. Keeping your information secure

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure.

Payment information is processed by the relevant payment provider rather than being stored by Gavin Burnett Studio.

However, no transmission or storage of information over the internet can be guaranteed to be completely secure.

11. Your rights

Under UK data protection law, you may have the right to:

  • Request access to the personal information we hold about you
  • Ask us to correct inaccurate or incomplete information
  • Ask us to delete your personal information in certain circumstances
  • Ask us to restrict how we process your information in certain circumstances
  • Object to certain types of processing
  • Request the transfer of certain personal information to another organisation
  • Withdraw consent where we rely on consent as the lawful basis for processing

These rights are subject to certain legal exceptions and limitations.

If you would like to exercise any of these rights, please contact:

gavin_burnett@hotmail.com

We may need to verify your identity before responding to certain requests.

12. Complaints

If you have concerns about how Gavin Burnett Studio has handled your personal information, please contact us first using the details above so that we can try to resolve the matter.

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)

Website: ico.org.uk

The ICO provides information about data protection rights and how to make a complaint.

13. Third-party websites

Our website and social media pages may contain links to third-party websites or services.

Those websites and services have their own privacy policies and terms. Gavin Burnett Studio is not responsible for the privacy practices of third-party websites that we do not operate.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services or legal requirements.

The latest version will be published on gavinburnettstudio.co.uk and will show the date on which it was last updated.

We recommend checking this page occasionally for any changes.

15. Contact us

If you have any questions about this Privacy Policy, how we use your personal information, or wish to exercise your data protection rights, please contact:

Gavin Burnett Studio
Email: gavin_burnett@hotmail.com
Website: gavinburnettstudio.co.uk