Privacy Policy

Last updated: 14 July 2026

Joanna Potepa Studio respects your privacy and only collects personal information where it is necessary to operate this website, respond to enquiries, process orders and meet legal obligations.

For the purposes of UK data protection law, the data controller is:

Joanna Potepa, trading as Joanna Potepa Studio

Email: bepotepa@gmail.com

Business address: 6 Rhodes Avenue, Telford, TF42EE

Information I collect

Depending on how you use this website, I may collect:

* your name and email address;

* billing and delivery addresses;

* information about products you order;

* payment and transaction status;

* messages you send through the contact form or by email;

* technical information about how the website is used, including browser, device and general location data;

* cookie and analytics information, according to your cookie preferences.

Full payment card details are handled securely by the payment provider and are not provided to me.

How I use your information

I use personal information to:

* process, fulfil and deliver orders;

* communicate with you about an order or enquiry;

* provide customer service;

* manage returns, refunds or delivery problems;

* maintain business, accounting and tax records;

* protect the website and prevent fraud or misuse;

* understand how visitors use the website and improve it;

* send marketing communications only where you have chosen to receive them.

Lawful bases

I process personal information under one or more of the following lawful bases:

* Contract, where the information is needed to process and fulfil an order;

* Legal obligation, where records must be kept for tax, accounting or other legal purposes;

* Legitimate interests, where information is needed to respond to enquiries, operate and protect the website or improve the service;

* Consent, for optional marketing communications and non-essential cookies.

You may withdraw your consent at any time.

Who receives your information

I may share information only where necessary with service providers involved in operating the website and fulfilling orders, including:

* Squarespace, which hosts and operates this website and online shop;

* STRIPE / PAYPAL / SQUARESPACE PAYMENTS, which processes payments;

* delivery and postal services used to send orders;

* professional advisers such as my accountant, where required;

* public authorities where disclosure is required by law.

These providers may only use the information needed to perform their services.

I do not sell or rent personal information.

International data transfers

Some website and payment service providers may process information outside the United Kingdom. Where this happens, appropriate safeguards are used, such as an adequacy decision or recognised contractual protections.

How long I keep information

Order and accounting records are retained for as long as required under UK tax and business-record laws.

Messages and enquiries are kept only for as long as they remain relevant, normally no longer than twelve months after the last contact, unless they relate to an order, dispute or continuing business relationship.

Marketing information is retained until you unsubscribe or withdraw your consent.

Information that is no longer required is deleted or anonymised. UK data-protection rules require personal data not to be kept longer than necessary, while HMRC requires self-employed business records to be kept for at least five years after the relevant Self Assessment filing deadline.

Cookies

This website uses necessary cookies to operate correctly and may use optional analytics or performance cookies according to your choices.

You can accept, reject or manage non-essential cookies through the cookie controls available on the website.

More information is available in the Cookie Policy.

Your rights

Depending on the circumstances, you may have the right to:

* request access to your personal information;

* ask for inaccurate information to be corrected;

* request deletion of your information;

* restrict or object to its use;

* request a portable copy of information you provided;

* withdraw consent at any time.

To exercise any of these rights, contact:

bepotepa@gmail.com

You also have the right to complain to the UK Information Commissioner’s Office if you believe your information has been handled improperly.

Changes to this policy

This policy may be updated occasionally to reflect changes to the website, services or legal requirements. The latest version will always appear on this page.