Privacy Policy
1. Who we are
Circulus Art is an online platform that curates and sells artworks created by independent artists.
At Circulus Art, we respect your privacy and only collect the information needed to provide our services and operate our website.
Website: CirculusArt.com
Contact: hello@circulusart.com
For the purposes of data protection law, Circulus Art is the data controller of the personal information collected through this website.
2. What information we collect
When you use our website, we may collect the following information:
Information you provide directly
• Name
• Email address
• Billing and shipping address
• Payment information (processed securely by third-party payment providers; Circulus Art does not store full payment card details)
Information collected automatically
• IP address
• Browser type
• Device information
• Pages visited and browsing behaviour on our site
This information helps us operate the website, process orders, and improve the experience for visitors.
3. How we use your information
We process personal information for the following purposes:
• to process and deliver orders placed through our website
• to respond to enquiries or messages submitted through our contact form
• to provide customer support
• to manage our website and improve its performance
• to comply with legal and accounting obligations
We do not sell personal data to third parties.
4. Legal basis for processing
Under UK data protection law, we must have a lawful basis to process personal data. We rely on the following legal bases:
• Contract – to process and fulfil orders placed through our website
• Legitimate interests – to operate, maintain, and improve our website and services
• Legal obligation – to comply with applicable tax, accounting, and regulatory requirements
• Consent – where you choose to subscribe to marketing communications or accept optional cookies
5. Sharing information
We only share personal data when necessary to run the business, including with:
• payment processors
• delivery services
• website hosting providers
• analytics providers
These service providers only receive the personal data necessary to perform their services and are required to handle it securely and in accordance with applicable data protection laws.
Our website is hosted by Squarespace, which provides the platform that allows us to operate our online store.
We may use analytics tools such as Squarespace Analytics or Google Analytics to understand how visitors use our website.
Payments are processed securely by third-party providers such as Stripe or PayPal.
6. International data transfers
Some of the service providers we use to operate our website (such as website hosting, payment processors or analytics providers) may process personal data outside the United Kingdom or European Economic Area.
When this occurs, we ensure appropriate safeguards are in place to protect your personal data, such as using providers that rely on recognised legal transfer mechanisms.
7. How long we keep your data
We retain personal information only for as long as necessary for the purposes for which it was collected.
• Order information: retained for up to 6 years for accounting and tax purposes, as required by UK law.
• Customer enquiries: retained for up to 12 months after the enquiry is resolved.
• Email newsletter subscriptions: retained until you unsubscribe or request deletion.
• Analytics data: typically retained for 14–26 months, depending on the analytics provider settings.
After this period, the information is securely deleted.
8. Your rights
Under UK data protection law, you have the right to:
• request access to your personal data
• request correction of inaccurate data
• request deletion of your data
• object to certain processing
• request restriction of processing
If you wish to exercise any of these rights, please contact us at: hello@circulusart.com
If you have concerns about how we handle your personal data, please contact us first so we can resolve the issue.
You also have the right to lodge a complaint with the UK Information Commissioner's Office if you believe your data protection rights have been breached.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any updates will be published on this page.
Last updated: March 2026