Last Updated: August 2026
Henrietta Graham (“we”, “our”, or “us”) is committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains what information we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Website: https://henriettagraham.com
This website is operated by Henrietta Graham, an artist based in the United Kingdom.
If you have any questions regarding this Privacy Policy or your personal information, please contact us using the details provided on the Contact page of this website.
2. Information We Collect
Depending on how you use our website, we may collect:
-
Your name
-
Email address
-
Postal address
-
Telephone number
-
Billing and delivery information
-
Order history
-
Messages submitted through our contact form
-
Account information (if you create an account)
-
Technical information such as your IP address, browser type and device information
We only collect personal information that you choose to provide or that is necessary for the operation of our website.
3. How We Use Your Information
We use your personal information to:
-
Process and fulfil orders
-
Deliver purchased artwork
-
Respond to enquiries
-
Provide customer support
-
Improve our website and services
-
Prevent fraud and maintain website security
-
Send newsletters or marketing emails where you have given your consent
We do not sell your personal information to third parties.
4. Comments
If comments are enabled on this website and you leave a comment, we collect the information shown in the comments form together with your IP address and browser information to help detect spam.
If you use the Gravatar service, an anonymised version (hash) of your email address may be sent to Gravatar to determine whether you have an account. Once your comment is approved, your profile picture (if applicable) may appear alongside your comment.
5. Images Uploaded by Users
If you upload images to the website, we recommend removing embedded location data (EXIF GPS) before uploading, as visitors may be able to download and view this information.
6. Cookies
Our website uses cookies to improve your browsing experience and help the website function correctly.
Cookies may be used to:
-
remember your login details;
-
remember your display preferences;
-
keep items in your shopping basket;
-
improve website performance;
-
analyse visitor traffic;
-
support security and fraud prevention.
If you leave a comment, you may choose to save your name, email address and website in cookies for your convenience. These cookies normally remain for one year.
You can control or delete cookies through your web browser settings. Please note that disabling some cookies may affect how the website functions.
7. Embedded Content
Pages on this website may include embedded content from third-party websites such as YouTube, Vimeo or Instagram.
Embedded content behaves exactly as if you had visited those websites directly. They may collect information about you, use cookies and monitor your interaction with their content in accordance with their own privacy policies.
8. Who We Share Your Information With
We only share your information where necessary to operate our business.
This may include:
-
payment providers;
-
delivery companies and couriers;
-
website hosting providers;
-
email marketing services (where you have subscribed);
-
website security and spam prevention services.
These providers only receive the information necessary to perform their services.
If you request a password reset, your IP address may be included in the password reset email.
9. How Long We Keep Your Information
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected.
Comments and their associated information may be retained indefinitely to allow future comments to be recognised automatically.
If you create an account on this website, we retain your account information until you delete your account or request its removal, unless we are legally required to retain certain information.
Order records may be retained for accounting and tax purposes as required by UK law.
10. Your Rights
Under UK data protection law, you have the right to:
-
request access to your personal information;
-
request correction of inaccurate information;
-
request deletion of your personal information where applicable;
-
object to certain processing;
-
request restriction of processing;
-
request transfer of your personal information where appropriate;
-
withdraw consent where processing is based on consent.
To exercise any of these rights, please contact us using the details on our Contact page.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your information has been handled improperly.
11. Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration or destruction.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
12. International Transfers
Some of the third-party services we use may store or process data outside the United Kingdom.
Where this occurs, appropriate safeguards are used to ensure your personal information remains protected in accordance with UK data protection legislation.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
Any changes will be published on this page with an updated revision date.
14. Contact
If you have any questions regarding this Privacy Policy or how your personal information is handled, please contact Henrietta Graham using the Contact page at: