Privacy Policy
Last updated: 23 March 2026
1. Data Controller
AurelArt — Art Consulting agency — 128 City Road, London, EC1V 2NX — aurelart.com — info@aurelart.com
2. Data collected and purposes
Browsing data — Technical data collected automatically (IP address, browser, pages visited) via Google Analytics 4. Purpose: statistical traffic analysis and site improvement.
Contact form — Name, email address, message content submitted via Contact Form 7. Purpose: responding to user enquiries.
Purchases — Billing and payment data collected via WooCommerce and PayPal. Purpose: order management and fulfilment.
Cookie preferences — Consent and cookie preference data managed via Complianz. Purpose: recording and managing consent.
3. Legal basis
Browsing data: consent (art. 6.1.a GDPR) Contact form: legitimate interest (art. 6.1.f GDPR) Purchases: performance of a contract (art. 6.1.b GDPR) Cookie preferences: legal obligation (art. 6.1.c GDPR)
4. Data retention
Browsing data (Google Analytics): up to 14 months Contact form data: up to 12 months from the handling of the request Purchase data: up to 10 years, as required by tax regulations Cookie consent data: up to 12 months
5. Transfer of data outside the EU
The use of Google Analytics 4 may involve the transfer of data to the United States. Such transfers are carried out on the basis of appropriate safeguards, including the Standard Contractual Clauses approved by the European Commission.
6. Rights of the data subject
Users may exercise the following rights at any time: access, rectification, erasure, restriction of processing, objection, data portability, withdrawal of consent. Requests may be sent to: info@aurelart.com
7. Policy updates
This Privacy Policy may be updated following regulatory or technical changes. Users are encouraged to consult it periodically.
Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.