​Last updated: March 2026

1. Who We Are
Business name: Leaf Fine Art
Contact email: info@leaffineart.com

We are the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR)

and the Data Protection Act 2018.

2. What Personal Data We Collect
We may collect, use, store, and transfer the following types of personal data:
a) Identity & Contact Data
•        Name
•        Email address
•        Telephone number
•        Any information you provide via forms or correspondence

b) Technical Data
•        IP address
•        Browser type and version
•        Time zone and location
•        Device and operating system information

c) Usage Data
•        Pages visited
•        Time spent on pages
•        Interaction with website features

​

3. How We Use Your Personal Data
We use your personal data to:

•        Provide and manage our website and services
•        Communicate with you and respond to enquiries
•        Improve our website and user experience
•        Send marketing communications (only with your consent)
•        Comply with legal and regulatory obligations

​

4. Lawful Basis for Processing (UK GDPR Article 6)
We process personal data under one or more of the following lawful bases:

•        Consent – where you have given clear permission
•        Contract – where processing is necessary to fulfil a contract
•        Legal obligation – where required by law
•        Legitimate interests – to operate and improve our website (balanced against your rights.

5. Sharing Your Personal Data
We do not sell your personal data.

We may share data with:

•        IT, hosting, and analytics service providers
•        Professional advisers (lawyers, accountants)
•        UK authorities where legally required
All third parties must process data in accordance with UK GDPR.

6. International Data Transfers
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

•        UK adequacy regulations
•        International Data Transfer Agreements (IDTA)

​

7. Data Security
We use appropriate technical and organisational measures to protect personal data from:

•        Unauthorised access
•        Loss or destruction
•        Misuse or disclosure

​

8. Data Retention
We retain personal data only for as long as necessary for the purposes it was collected, including legal and regulatory requirements.

9. Your Rights Under UK GDPR
You have the right to:

•        Access your personal data
•        Request correction or deletion
•        Restrict or object to processing
•        Withdraw consent at any time
•        Data portability (where applicable)

You also have the right to complain to the Information Commissioner’s Office (ICO):
www.ico.org.uk

10. Children’s Data
Our website is not intended for children under 13, and we do not knowingly collect personal data from children.

11. Changes to This Policy
We may update this Privacy and Cookies Policy from time to time. Changes will be published on this page with a revised date.

12. Contact Information
If you have any questions or wish to exercise your data protection rights, please contact:

Email: info@leaffineart.com
Business name: Leaf Fine Art