Privacy Policy

Last updated: May 2026

This privacy policy explains how Terra & Bloom ("we", "us", "our") collects, uses, and protects your personal data when you visit this website or contact us. We are committed to handling your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Terra & Bloom is an independent fine art studio based in York, England.

For any privacy-related queries, you can contact us at: info@terraandbloom.com

What Data We Collect

We may collect the following personal data:

  • Contact information — your name, email address, and any details you provide when sending an enquiry or commission request

  • Transaction data — details of purchases you make through this website

  • Usage data — anonymised information about how you use the site (via Squarespace's built-in analytics)

  • Communications — records of correspondence if you contact us

How We Use Your Data

We use your data to:

  • Respond to enquiries and commission requests

  • Process and fulfil orders

  • Send updates about your order or commission

  • Improve the website experience

  • Comply with our legal obligations

We will only contact you for marketing purposes if you have given us explicit consent to do so.

Our Legal Basis for Processing

Under UK GDPR, we process your data on the following grounds:

  • Contract — to fulfil an order or commission you have placed

  • Legitimate interests — to respond to enquiries and improve our services

  • Legal obligation — where required by law

  • Consent — for any optional communications such as newsletters

Cookies

This website is built on Squarespace, which uses cookies to operate and improve the site. These may include functional, analytical, and performance cookies. You will be asked for your consent before non-essential cookies are set.

For full details of Squarespace's cookie practices, please refer to Squarespace's Cookie Policy.

Sharing Your Data

We do not sell your personal data. We may share it with trusted third parties only where necessary, including:

  • Squarespace — our website and e-commerce platform

  • Payment processors — to handle transactions securely

  • Shipping providers — to fulfil and deliver orders

  • HMRC or other authorities — where required by law

All third parties are required to handle your data securely and in accordance with applicable law.

Data Retention

We retain your personal data only for as long as necessary:

  • Enquiry and contact records: up to 2 years

  • Order and transaction records: up to 7 years (as required by HMRC)

Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Correct inaccurate or incomplete data

  • Erase your data (the "right to be forgotten")

  • Restrict or object to how we process your data

  • Data portability — receive your data in a portable format

  • Withdraw consent at any time, where consent is the basis for processing

To exercise any of these rights, please contact us at [your email address]. We will respond within 30 days.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk — 0303 123 1113.

Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. Your payment information is processed securely by our payment provider and is never stored on this website.

External Links

This website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the website after changes are posted constitutes acceptance of the updated policy.