This Privacy Policy explains how DeFoRa Art (“we”, “us”, “our”) collects, uses and protects your personal data when you visit or make a purchase from defora.co.uk. We are registered in England & Wales and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy, please contact us at sales@defora.co.uk.
1. Information We Collect
When you place an order or contact us, we may collect the following information:
- Name and delivery address
- Email address and phone number
- Payment information (processed securely by Stripe or PayPal — we never store card details)
- Order details and personalisation instructions
- IP address and browser information (collected automatically via cookies)
2. How We Use Your Information
We use your personal data to:
- Process and fulfil your orders
- Send order confirmations and shipping updates
- Respond to your enquiries and provide customer support
- Send marketing emails if you have opted in (you can unsubscribe at any time)
- Improve our website and product offerings
- Comply with legal obligations
3. Legal Basis for Processing
We process your data on the following legal bases:
- Contract: To fulfil your order and provide our services
- Legitimate interests: To improve our business and communicate with customers
- Consent: For marketing emails where you have opted in
- Legal obligation: To comply with tax, accounting and legal requirements
4. Sharing Your Information
We do not sell your personal data. We may share it with trusted third parties only where necessary:
- Royal Mail — to deliver your order
- Stripe / PayPal — to process payments securely
- Mailchimp — to send newsletters (only if you have subscribed)
- WooCommerce / WordPress — our e-commerce and website platform
All third parties are required to handle your data in accordance with UK GDPR.
5. Cookies
Our website uses cookies to improve your browsing experience. These include:
- Essential cookies: Required for the website and shopping cart to function
- Analytics cookies: To understand how visitors use our site (Google Analytics)
- Marketing cookies: Used by platforms such as Meta and TikTok if you have consented
You can control cookies through your browser settings at any time.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy. Order data is kept for 7 years to comply with HMRC requirements. Marketing data is retained until you unsubscribe.
7. Your Rights
Under UK GDPR, you have the following rights:
- Right to access — request a copy of your personal data
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your data
- Right to restrict processing — request we limit how we use your data
- Right to data portability — request your data in a portable format
- Right to object — object to processing based on legitimate interests
To exercise any of these rights, please contact us at sales@defora.co.uk. We will respond within 30 days.
8. Security
We take reasonable technical and organisational measures to protect your personal data. Our website uses SSL encryption and payments are processed by PCI-compliant providers. We never store your full card details.
9. Third-Party Links
Our website may contain links to third-party websites such as Etsy and eBay. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We recommend checking this page periodically.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us:
DeFoRa Art
Email: sales@defora.co.uk
Website: defora.co.uk
Registered in England & Wales
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
Last updated: June 2026
