Last updated: 18 April 2026
This privacy policy explains how Oliver Saunders ("O. Saunders", "we", "us", or "our") collects, uses, and protects your personal information when you use this website (osaunders.art).
1. Information We Collect
We collect the following types of personal information:
- Commission enquiry information: When you submit a commission enquiry form, we collect your name, email address, project description, budget preferences, timeline, and any reference links you provide.
- Order information: When you make a purchase, payment processing is handled securely by Stripe. We do not store your payment card details.
- Browser storage: We use localStorage and sessionStorage in your browser to maintain your shopping cart. This information is stored locally on your device and is not transmitted to our servers unless you complete a purchase.
2. How We Use Your Information
We use your personal information for the following purposes:
- Commission enquiries: To respond to your commission requests, discuss project details, and provide quotes.
- Order fulfilment: To process and fulfil your orders, send order confirmations, and provide shipping updates.
- Customer service: To respond to your enquiries and provide support.
- Legal obligations: To comply with applicable laws and regulations, including tax and accounting requirements.
We will not use your information for marketing purposes without your explicit consent.
3. Legal Basis for Processing (UK GDPR)
We process your personal data under the following legal bases:
- Consent: When you submit a commission enquiry form, you consent to us using your information to respond to your request.
- Contract performance: When you place an order, we process your information to fulfil our contract with you.
- Legal obligation: We retain certain information to comply with tax, accounting, and other legal requirements.
4. How We Share Your Information
We share your information only in the following limited circumstances:
- Payment processing: We use Stripe to process payments securely. Stripe's privacy policy is available at stripe.com/privacy.
- Form submissions: Commission enquiry forms are submitted via Formspree. Formspree's privacy policy is available at formspree.io/legal/privacy-policy.
- Email delivery: We use Mailgun to send order confirmation and dispatch emails. Mailgun's privacy policy is available at mailgun.com/legal/privacy-policy.
- Legal requirements: We may disclose your information if required by law or to protect our legal rights.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
5. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy:
- Commission enquiries: We retain enquiry information for up to 2 years or until you request deletion.
- Order records: We retain order information for 7 years to comply with UK tax and accounting requirements.
- Cart data: Shopping cart information stored in your browser remains until you clear it or complete your purchase.
6. Your Rights
Under UK GDPR, you have the following rights regarding your personal information:
- Right of access: You can request a copy of the personal information we hold about you.
- Right to rectification: You can request that we correct any inaccurate or incomplete information.
- Right to erasure: You can request that we delete your personal information, subject to certain legal exceptions (e.g., accounting records).
- Right to restrict processing: You can request that we limit how we use your information in certain circumstances.
- Right to data portability: You can request a copy of your information in a structured, machine-readable format.
- Right to object: You can object to our processing of your information in certain circumstances.
- Right to withdraw consent: Where we rely on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us using the details below.
7. Cookies and Tracking
This website does not use cookies for tracking or analytics purposes. We only use browser storage (localStorage and sessionStorage) to maintain your shopping cart functionality, which is considered strictly necessary for the operation of the website.
8. Security
We take reasonable measures to protect your personal information from unauthorised access, alteration, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
9. International Transfers
Some of our service providers (Stripe, Formspree, Mailgun) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR requirements.
10. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.
11. Contact Us
If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact:
Oliver Saunders
Email: contact@osaunders.art
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.