Privacy Policy
Last updated: 07-01-2026
This Privacy Policy explains how Ian Millen Art (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit or make a purchase from ianmillenart.com.
We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Name: Ian Millen
Business name: Ian Millen Art
Country: United Kingdom
Email: ian@ianmillenart.com
Website: ianmillenart.com
If you have any questions about this Privacy Policy or how your data is handled, you can contact us using the details above.
2. What Personal Data We Collect
We may collect the following personal data:
a) Information you provide directly
Your name
Billing and delivery address
Email address
Telephone number (if provided)
Payment information
(processed securely by third-party payment providers; we do not store card details)Messages sent via contact forms or email
b) Information collected automatically
IP address
Browser and device information
Pages visited on our website
Cookies and similar technologies
3. How We Use Your Personal Data
We use your personal data to:
Process and fulfil orders for original artworks
Arrange delivery of purchased paintings
Send order confirmations and updates
Respond to enquiries and correspondence
Maintain business and tax records
Improve our website and customer experience
We only collect data that is necessary for these purposes.
4. Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases to process your data:
Contract – to fulfil orders and deliver purchased artwork
Legal obligation – to comply with accounting and tax requirements
Legitimate interests – to operate and improve our business and website
Consent – for marketing communications and non-essential cookies (where applicable)
5. Sharing Your Data
We may share your personal data only where necessary, including with:
Payment processors (such as PayPal or Stripe)
Delivery and courier services
Website hosting and technical service providers
All third parties are required to handle your data securely and in accordance with
data protection law. We do not sell or rent your personal data.
6. International Data Transfers
Some third-party services we use may process data outside the UK. Where this occurs, appropriate safeguards are in place to ensure your data remains protected in line with UK GDPR requirements.
7. How Long We Keep Your Data
We retain personal data only for as long as necessary:
Order and transaction records: up to 6 years (for tax and legal purposes)
Contact form enquiries: up to 12 months
Marketing data: until you unsubscribe or withdraw consent
8. Your Data Protection Rights
You have the right to:
Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion of your data (where legally possible)
Restrict or object to certain types of processing
Withdraw consent at any time for marketing communications
Lodge a complaint with the Information Commissioner’s Office (ICO)
ICO website: https://www.ico.org.uk
To exercise your rights, please contact ian@ianmillenart.com.
9. Cookies
Our website uses cookies to ensure it functions correctly and to analyse website traffic. Where non-essential cookies are used, your consent will be requested.
You can control or disable cookies through your browser settings. Further information is provided in our Cookie Policy.
10. Data Security
We take appropriate technical and organisational measures to protect your personal data, including secure hosting, encryption, and limited access to information.
While we take reasonable steps to protect your data, no method of transmission over the internet is completely secure.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.