Skip to content

Privacy Notice

Last updated: 1 July 2026

1. INTRODUCTION

In this privacy notice, “I”, “Me” and “My” refer to Alison Edridge trading as Alison Edridge Art. I am an independent commission artist based in the United Kingdom. I may also make available for sale my original (non-commission) artwork and printed goods based on my original artwork. This privacy notice provides details of how I collect and process personal information in line with UK data protection law.

2. CONTACT DETAILS

Email: hello@alisonedridge.art

3. WHAT INFORMATION I COLLECT

When you contact me, book a commission or purchase artwork from me you may provide:

  • Your name
  • Your email address
  • Your telephone number
  • Your physical address (for shipping artwork)
  • Payment information (processed securely through a payment provider)
  • Details about your commission request
  • Reference photographs of identifiable people for commissioned artwork

Human portraits and reference images

If you commission a portrait of a living person, the artwork and any reference photos you provide may be considered personal data because the individual can be identified from their likeness.

Sometimes the person depicted is not the person commissioning or paying for the artwork (for example, if the portrait is a gift). In these cases, I still process their image solely to create the artwork.

Information collected through my website

My website does not currently use cookies or tracking technologies. This privacy notice will be updated if I introduce this functionality to the website in the future.

4. HOW I USE YOUR INFORMATION

I use the information you provide to:

  • Respond to your enquiry
  • Discuss and manage your commission or artwork purchase
  • Create commissioned artwork using your reference images
  • Process payments
  • Ship physical artwork to you
  • Keep basic records for administrative or accounting purposes

5. LAWFUL BASES FOR PROCESSING

My lawful bases for collecting or using personal information are:

  • Contract: I have to collect or use the information so I can enter into or carry out a contract with you.
  • Consent: I have permission from you after I gave you all the relevant information. You have the right to withdraw your consent at any time.
  • Legitimate interests: For living individuals depicted in photographs as references for commissioned work, even if they are not aware of the commission. This processing is necessary to create the artwork, is low-risk, and is a reasonable and expected activity in the context of commissioning art. I only use the references images for creating the artwork and delete them afterwards.
  • Legal Obligation: For keeping tax and accounting records.

6. HOW LONG I KEEP INFORMATION

  • Commission records: kept for up to 6 years to meet legal and tax obligations.
  • Emails: kept only as long as needed for administrative or legal reasons.
  • Reference photos depicting a living person: deleted once the commission is completed and delivered.
  • Images files of artworks depicting a living person: kept for as long as they form part of my active and historical professional art portfolio. I will review retained images every 5 years to confirm whether they are still relevant to my portfolio and should be retained for a further period. Images will be deleted where there is no continuing professional need or where there is an overriding objection from the depicted individual to them being retained.

7. WHO I SHARE INFORMATION WITH

I am committed to protecting the privacy of my customers. I do not sell, trade, or share your personal information. I only share the minimum information necessary with:

  • Payment processors (to complete your transaction)
  • Postal or courier services (to deliver your artwork)
  • UK authorities if legally required

Whilst I retain the copyright in all commissioned artwork that I create, I will not share images of commissioned artwork depicting a living person online or in printed form without the written consent of the person depicted.

8. YOUR DATA PROTECTION RIGHTS

Under UK data protection law, you have the right to:

  • Access the personal information I hold about you. You can request other information such as details about where I get personal information from and who I share personal information with. There are some exemptions which means you may not receive all the information you ask for. 
  • Correct or delete personal information you think is inaccurate or incomplete.
  • Delete your personal information.
  • Ask me to limit how I can use your personal information.
  • Object to the processing of your personal data.
  • Ask that I transfer the personal information you gave me to another organisation, or to you.
  • Withdraw your consent at any time when I use consent as the lawful basis

To make a data protection rights request, please email me at hello@alisonedridge.art. I will respond to you within one month.

9. HOW I PROTECT YOUR INFORMATION

I take reasonable steps to keep your information secure, including:

  • Password‑protected devices
  • Reputable email and cloud providers
  • Secure payment processing
  • No storage of card details
  • Deletion of reference photos after use
  • No sharing of images or artwork containing living identifiable people without permission

10. HOW TO COMPLAIN

If you have any concerns about my use of your personal information, you can make a data protection complaint to me at hello@alisonedridge.art. I will acknowledge receipt of your complaint within 30 calendar days. I will take appropriate steps to investigate your complaint and respond without undue delay. Where appropriate, I will keep you informed of the progress of my investigation. The time taken to investigate and respond may vary depending on the complexity, scale and nature of the complaint. I will tell you the outcome of my investigation without undue delay.

If you remain dissatisfied after I have responded to your complaint, you have the right to complain to the Information Commissioner’s Office (ICO). Further information about making a complaint is available on the ICO’s website: https://www.ico.org.uk/make-a-complaint.