Privacy Policy
This privacy policy explains how Natalie Hardy (trading as Natalie Hardy Printmaking) collects, uses, and protects your personal information when you use this website.
Last updated: June 2026
Who I am
This website is operated by Natalie Hardy, based in Leeds, West Yorkshire, United Kingdom. If you have any questions about this policy, please contact me or email info@nataliehardy.co.uk.
What data I collect
When you make a purchase:
- Name
- Email address
- Shipping address (for delivery orders)
- Your chosen shipping method
I do not collect or store your payment card details. Payment is processed securely by SumUp, who handle all card data in accordance with PCI DSS standards.
When you sign up to my mailing list:
- Email address
- First name (if provided)
The mailing list is managed by Kit (formerly ConvertKit). You can unsubscribe at any time using the link in any email.
When you use the contact form:
- Name
- Email address
- Type of enquiry (if selected)
- Message content
Contact form submissions are protected from spam using Cloudflare Turnstile and delivered directly to me via Resend.
When you browse the site:
This website does not use cookies for analytics or tracking. No third-party analytics tools (such as Google Analytics) are used.
How I use your data
- Order fulfilment: Your name and address are used to post your print and send you order updates.
- Communication: Your email is used to respond to enquiries and send order/delivery confirmations.
- Mailing list: If you opt in, your email is used to send occasional updates about new prints, exhibitions, and studio news. You can unsubscribe at any time.
I will never sell, rent, or share your personal data with third parties for marketing purposes.
Third-party services
Your data may be processed by the following services as part of running this website and fulfilling orders:
| Service | Purpose | Their privacy policy |
|---|---|---|
| SumUp | Payment processing | sumup.com/privacy |
| Kit (ConvertKit) | Mailing list | kit.com/privacy |
| Resend | Transactional email & contact form delivery | resend.com/privacy |
| Cloudflare | Website hosting & Turnstile spam protection | cloudflare.com/privacypolicy |
How long I keep your data
- Order data: Kept for 6 years for tax and accounting purposes, as required by HMRC.
- Mailing list: Until you unsubscribe.
- Contact form messages: Kept only as long as needed to respond to your enquiry.
Your rights
Under UK data protection law (UK GDPR), you have the right to:
- Access the personal data I hold about you
- Ask me to correct inaccurate data
- Ask me to delete your data (where I have no legal obligation to keep it)
- Withdraw consent for mailing list communications at any time
- Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been mishandled
To exercise any of these rights, please contact me.
Changes to this policy
I may update this privacy policy from time to time. The date at the top of this page shows when it was last revised.