Privacy Policy
How Em Curri Art collects and uses personal information when you browse the website, request a commission quote, accept a commission or make a payment.
Who is responsible for your information?
Em Curri Art is operated by Em Currigan in the United Kingdom. For questions about personal information, contact em.curri.art@gmail.com.
What information is collected?
The commission enquiry form asks for information needed to assess and respond to an enquiry, including your name, email address, commission type, preferred size, number of subjects, optional desired completion date, framing preference, delivery or collection preference, a description of the commission, and a reference image. If you choose delivery or say you are not sure yet, the form also asks for your postal / billing address so Em can prepare delivery, invoicing and fulfilment correctly. A hidden anti-spam field is also used.
If a commission proceeds, Em Curri Art may also keep the quotation, agreed price, deposit and balance amounts, payment status, Stripe transaction or Checkout references, invoice number, receipt status, commission progress, correspondence, delivery information and records needed to administer the order.
The Em Curri Art enquiry form does not collect card details. When you choose to pay by Stripe, payment-card information is entered into Stripe’s secure Checkout service and processed by Stripe. Em Curri Art may receive limited payment information such as whether payment succeeded, the amount, payment method type and transaction identifiers, but does not receive or store your full card number or card security code.
Please avoid including unnecessary sensitive personal information in the enquiry description, correspondence or reference image.
Why is it used, and what is the lawful basis?
- To review your enquiry, prepare a quotation and take steps you request before entering a contract.
- To administer an accepted commission, take and record payments, issue invoices and receipts, arrange collection or delivery, and provide customer service where processing is necessary for the contract.
- To keep records where necessary to comply with legal, accounting, tax or dispute-resolution obligations.
- To maintain website, account and transaction security, prevent misuse and keep proportionate business records where Em Curri Art has a legitimate interest and that interest is not overridden by your rights.
- Where Em asks for permission to use a customer reference image or finished commission for portfolio, social-media or other promotional use, that use will be based on the permission given and can be managed separately from the commission itself.
Enquiry details and reference images are not used for third-party behavioural advertising.
Who receives the information?
Em Curri Art uses service providers to operate the website and commission workflow. Supabase is used for the enquiry and commission database, authentication, server-side functions and private reference-image storage. Resend is used to send transactional emails such as enquiry confirmations, quotations, payment requests, invoice messages and receipts. The website hosting provider may process ordinary technical server logs.
Stripe is used to process card payments and related payment events. When you follow a Stripe payment link, Stripe receives information needed to process the transaction under its own services and privacy arrangements. Em Curri Art receives the information needed to reconcile the payment with the relevant commission.
Service providers are given only the information reasonably needed for their role. Some providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, appropriate transfer mechanisms should apply.
How long is it kept?
Enquiry information that does not become a commission is normally reviewed for deletion within 12 months of the last meaningful contact. Reference images should be deleted sooner where they are no longer needed.
Where a commission proceeds, core quotation, invoice, payment and correspondence records may be kept for up to 6 years where reasonably necessary for tax, accounting, legal or dispute purposes. Reference images are not intended to be retained for that full period unless they are still needed for the commission, a dispute, or you have separately agreed another use.
Your rights
Depending on the circumstances, UK data-protection law may give you rights to ask for access to your personal information, correction, deletion, restriction, portability or to object to certain uses. To make a request, email em.curri.art@gmail.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO).
Reference images and other people
A photograph may contain personal information about people other than the person submitting it. Only provide a reference image where you have a legitimate reason and the right or permission to provide it for the requested commission. Do not submit intimate, unlawful or unnecessarily sensitive images.
Security
Reasonable technical and organisational measures are used to limit access to enquiry and commission information. Reference images are stored in a private storage area rather than intentionally published as public website files. Payment-card entry is handled by Stripe rather than by the Em Curri Art website. No internet service can be guaranteed to be completely secure.
Cookies and device storage
The website uses a cookie-preference control and stores your selected privacy categories locally on your device. Optional analytics and marketing technologies are not currently configured. See the Cookie Policy for details and to understand how to change your choice.
Changes to this policy
This policy will be reviewed when the website, payment flow, service providers or uses of personal information change.