Privacy Policy — The IndoBrit
Privacy Policy — The IndoBrit Arts
Last updated: 24 August 2026
The IndoBrit Arts ("we", "us", "our") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, submit artwork, purchase artwork from us, communicate with us, or otherwise interact with The IndoBrit.
We process personal data in accordance with applicable UK data protection and privacy laws, including the UK GDPR, the Data Protection Act 2018, and applicable provisions of the Privacy and Electronic Communications Regulations (PECR).
1. Who We Are
Trading name: The IndoBrit
Business status: Sole trader
Business address:
92 Northumberland Street
Derby
UK
Privacy contact email:
connect@theindobritarts.com
The IndoBrit is the data controller for the personal information we collect and use in connection with our website, customers, enquiries, artists and business activities.
If you have any questions about how we use your personal data, please contact us using the email address above.
2. Personal Data We Collect
The information we collect depends on how you interact with us.
A. Website visitors and enquiries
When you contact us through our website, email, WhatsApp or social media, we may collect:
Name
Email address
Telephone or mobile number
Your message or enquiry
Information about the artwork or service you are interested in
Any other information you voluntarily provide
B. Customers and online orders
When you purchase artwork from our website, we may collect:
Name
Billing and delivery address
Email address
Telephone number
Order details
Artwork purchased
Delivery information
Payment-related information necessary to process or verify the transaction
Records of correspondence relating to your order
Refund, return or cancellation information
We do not intentionally store full payment card details on our own systems where payment is processed through a third-party payment provider.
C. Custom artwork and commissions
If you order a custom or personalised artwork, we may collect additional information necessary to complete your order, such as:
Your artwork requirements
Preferred size, colours or subject matter
Personalisation details
Reference images or photographs that you choose to provide
Other information necessary to communicate your requirements to the artist
Please only provide personal information or photographs that are necessary for the commission.
D. Artist submissions and collaborations
If you submit artwork or apply to work with The IndoBrit, we may collect:
Name
City or location
Email address
Telephone number
Artwork images
Artwork titles
Artwork dimensions and medium
Artwork prices
Portfolio information
Website or portfolio links
Social media handles
Information about your artistic practice
Other information you choose to provide
We may use this information to assess submissions, communicate with artists, manage collaborations and promote artwork where appropriate and agreed.
3. How We Collect Personal Data
We may collect information through:
Our website and online forms
Our e-commerce checkout and order system
Email
WhatsApp
Telephone conversations
Social media platforms
Artist submission forms
In-person interactions
Events and exhibitions
Cookies and similar technologies on our website
We may also receive limited information from service providers involved in website hosting, payments, delivery, analytics, marketing or other services necessary to operate our business.
4. How We Use Your Personal Data
We may use personal data to:
Respond to enquiries
Process and fulfil online orders
Arrange delivery of artwork
Process returns, refunds and cancellations
Create and manage custom artwork orders
Communicate with customers about their orders
Communicate with artists and manage collaborations
Assess artist submissions
Maintain business and financial records
Meet accounting and legal obligations
Prevent fraud, misuse or unauthorised activity
Maintain and improve our website
Understand how visitors use our website
Improve our products, services and customer experience
Send marketing communications where we are legally permitted to do so and, where required, you have provided consent
Promote The IndoBrit and artwork through appropriate marketing channels
We will not use your personal data for purposes that are incompatible with the purpose for which it was originally collected without providing appropriate information or obtaining consent where required.
5. Legal Basis for Processing
Depending on the circumstances, we may rely on one or more of the following lawful bases under UK data protection law:
Contract
We may process your personal data where it is necessary to enter into or perform a contract with you.
For example, this includes processing an online artwork order, arranging delivery, handling a return or managing a custom artwork commission.
Legal obligation
We may process personal data where necessary to comply with legal obligations, including accounting, tax, financial and record-keeping requirements.
Legitimate interests
We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
This may include managing our business, maintaining website security, responding to enquiries, maintaining appropriate business records and improving our services.
Consent
Where the law requires consent, we will ask for it.
This may include certain marketing communications and the use of non-essential cookies or tracking technologies.
Where processing is based on consent, you may withdraw your consent at any time.
6. Payments
When you purchase artwork through our website, payment may be processed using a third-party payment service provider.
Depending on the payment methods available at the time of purchase, this may include payment providers, banks or other financial service providers.
We do not intentionally store complete payment card details on our own systems where payment information is processed directly by a third-party payment provider.
Payment providers may process your information under their own privacy policies and terms.
We may retain limited transaction information necessary for order management, accounting, refunds, customer service and legal compliance.
7. Delivery and Other Service Providers
To fulfil your order, we may share relevant information with third parties where necessary.
These may include:
Delivery and courier companies
Payment service providers
Website hosting and technology providers
E-commerce and website service providers
Email and communication providers
Accounting or professional advisers
Analytics and marketing service providers, where applicable and permitted
Government authorities or law-enforcement bodies where legally required
We only provide information that is reasonably necessary for the relevant purpose.
8. Cookies, Analytics and Tracking
Our website may use cookies and similar technologies.
Some cookies are strictly necessary for the operation of the website and services you request, such as essential website functionality, security and shopping-basket functionality.
We may also use non-essential technologies for purposes such as:
Website analytics
Understanding website usage
Measuring advertising performance
Marketing
Improving our website and user experience
Where consent is legally required, we will ask for your consent before using non-essential cookies or tracking technologies.
Our website may use services such as:
Google Analytics
Meta/Facebook Pixel
LinkedIn Insight Tag
Other analytics, advertising or marketing technologies that we may introduce in the future
The specific technologies used on the website may change from time to time.
You can manage your cookie preferences through our cookie consent mechanism where available.
For more information about how cookies and similar technologies are regulated, please see the guidance of the Information Commissioner's Office (ICO).
9. Marketing Communications
We may occasionally send information about:
New artwork
Exhibitions
Events
Offers
The IndoBrit news
Artist collaborations
Other products or activities that may be relevant to our customers
Where consent is required, we will only send electronic marketing communications after obtaining the appropriate consent.
You can unsubscribe or withdraw marketing consent at any time by contacting:
You may also use an unsubscribe option included in a marketing email where available.
UK electronic marketing is subject to PECR as well as data protection law.
10. Sharing Personal Data
We do not sell your personal data.
We may share personal information with trusted third parties where reasonably necessary to operate our business and provide our services.
These may include payment providers, couriers, website and hosting providers, communication providers, accountants, professional advisers, analytics providers and marketing technology providers.
Some third parties may process information on our behalf, while others may have their own legal responsibilities for the information they process.
We will take reasonable steps to ensure that third parties handling personal data provide appropriate security and comply with applicable data protection requirements.
11. International Data Transfers
Some of the service providers we use may process or store personal data outside the United Kingdom.
Where personal data is transferred internationally, we will use appropriate safeguards required by applicable data protection law.
Depending on the circumstances, these safeguards may include an adequacy decision or appropriate contractual or other legal safeguards.
12. How Long We Keep Personal Data
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting and business requirements.
Our retention periods may include:
Customer enquiries: generally up to 24 months after the enquiry has been closed, unless a longer period is reasonably required.
Order and transaction records: retained for the period necessary to meet accounting, tax, legal and business requirements.
Customer service, returns and refund records: retained for as long as reasonably necessary to manage the transaction and any related legal or contractual obligations.
Artist submissions: generally retained while an active collaboration is being considered or maintained and for a reasonable period afterwards.
Marketing consent records: retained for as long as necessary to demonstrate and manage your marketing preferences.
Cookie consent records: retained for an appropriate period to record your consent choices.
Retention periods may vary depending on the nature of the information and our legal obligations.
13. Data Security
We take reasonable technical and organisational measures to protect personal information from:
Unauthorised access
Accidental loss
Destruction
Misuse
Unauthorised disclosure
Unauthorised alteration
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
14. Your Data Protection Rights
Depending on the circumstances, you may have rights under UK data protection law, including the right to:
Request access to the personal data we hold about you
Request correction of inaccurate or incomplete information
Request deletion of your personal data where applicable
Request restriction of processing in certain circumstances
Object to certain processing
Withdraw consent where processing is based on consent
Request data portability where applicable
Object to direct marketing
Some rights are subject to legal conditions and exceptions, so they may not apply in every situation.
To exercise your rights, contact:
We may need to verify your identity before responding to certain requests.
15. Complaints
If you have concerns about how we have handled your personal data, we encourage you to contact us first so that we can try to resolve the issue.
You also have the right to complain to the Information Commissioner's Office (ICO) if you believe your personal data has been handled unlawfully.
The ICO is the UK's independent data protection regulator.
16. Children's Privacy
Our website and services are not specifically directed towards children.
We do not knowingly collect personal data from children where such collection is not appropriate or permitted.
If you believe that a child has provided personal information to us unnecessarily, please contact us so that we can review and, where appropriate, delete the information.
17. Third-Party Websites and Social Media
Our website may contain links to third-party websites, social media platforms or other online services.
We are not responsible for the privacy practices, security or content of those third-party services.
We recommend reviewing the privacy policies of any third-party website or platform you visit.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, website, services, technology or applicable legal requirements.
The latest version will always be published on this page with the date of the most recent update.
19. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
The IndoBrit Arts
92 Northumberland Street
Derby
UK
Email: connect@theindobritarts.com