Privacy Policy

Last updated: 14 October 2026

Who we are

This website is operated by Mike Mills, trading as Artyfactor (“we”, “us”, “our”), a sole trader business trading at artyfactor.com from The Studio, 37D Heol Llanishen Fach, Rhiwbina, Cardiff, CF14 6LA, United Kingdom. If you have any questions about this policy or how we handle your personal data, contact us at mike@artyfactor.com.

What personal data we collect

When you buy original artwork, we collect the information needed to fulfil your order: your name, billing and shipping address, email address, phone number, and details of the items ordered. This is handled through WooCommerce, the store platform running this part of the site.

When you join a paid course, we collect your name, email address, and course purchase/access history through Restrict Content Pro, our membership platform, so that we can give you access to the right course content.

When you pay, your card details are entered directly into a secure form provided by Stripe, our payment processor. We do not see or store your full card number on our servers. Stripe’s own privacy policy covers how they handle payment data: https://stripe.com/gb/privacy

When you use a contact or enquiry form on this site, we collect whatever information you submit (typically your name, email address, and message) so we can reply to you. The contact form uses Cloudflare Turnstile to block spam, which checks that a visitor is a person and may process your IP address.

When you sign up for our email newsletter, we collect your email address through MailerLite so we can send you news about new courses and tutorials. You can unsubscribe at any time using the link in any email.

When you browse the site, some technical and usage data is collected automatically, described under Cookies and Analytics below.

Cookies

This site uses cookies for the following purposes:

  • Shopping cart and checkout – WooCommerce uses cookies to remember what’s in your basket and to keep you logged in during checkout.
  • Course login and access – if you have a course membership account, WordPress and Restrict Content Pro set cookies to keep you signed in and confirm which courses you can access.
  • Analytics – Google Analytics sets cookies to help us understand how visitors use the site. Only if you accept (see Analytics and advertising below).
  • Advertising performance – Pinterest sets a cookie to measure how our Pinterest content and ads perform. Only if you accept (see Analytics and advertising below).
  • Performance – our caching plugin (WP Fastest Cache) may use a cookie to serve you the correct version of a page; this does not identify you personally.
  • Order source – WooCommerce can record which link brought you to the site when you buy artwork, using cookies beginning sbjs_. Only if you accept.
  • Payment security – Stripe sets cookies on pages that take payments, to keep payments secure and help detect fraud.
  • Your cookie choice – a cookie called afy_consent remembers whether you accepted or declined, for 6 months.

If you decline the cookie banner, no analytics, Pinterest or order source cookies are set. You can change your choice at any time using Cookie settings. The fonts on this site are served from our own website, so your browser does not contact Google to load them.

Analytics and advertising

Google Analytics and the Pinterest tag run only if you click Accept on the cookie banner. If you decline, they do not load, and any cookies they set are removed.

We use Google Analytics to understand how visitors use this site (for example, which pages are popular). Google’s privacy policy is available here: https://policy.google.com/privacy

We use the official Pinterest for WooCommerce integration to publish our products as Pins and to measure the performance of our Pinterest content and ads. This means Pinterest may receive information about actions taken on this site (such as viewing a product or completing a purchase) so that we can see how our Pinterest activity is performing. This information is used for measurement and advertising purposes, not to identify you personally. Pinterest’s own privacy policy covers this: https://policy.pinterest.com/privacy-policy

We also publish our own marketing content (images and posts) to our Facebook, Instagram, and Pinterest business accounts via their official APIs. This is one-directional: we post our own content there, we do not send your personal data to those platforms beyond the measurement described above. If you interact with our content on those platforms, that interaction is subject to their own privacy policies.

Embedded course and video content

Course videos are hosted on Vimeo (paid courses) and free tutorials may be embedded from YouTube. When you watch an embedded video, that platform may collect data about your interaction with it in the same way as if you had visited their site directly. Their privacy policies apply to that data: https://vimeo.com/privacy and https://policy.google.com/privacy

Who we share your data with

We share personal data only with the service providers needed to run this site and never sell your data to third parties:

  • Stripe – to process payments
  • Amazon Web Services (AWS) – to host this website and, via Amazon SES, to send order, account, and course-access emails
  • Google – for site analytics
  • Pinterest – for advertising measurement, as described above
  • MailerLite – to send our email newsletter, if you sign up. The sign-up form in the page footer loads from MailerLite, so your browser connects to its servers when a page loads
  • Cloudflare – to block spam on the contact form (Turnstile)
  • Delivery/courier providers – to fulfil and deliver artwork orders

Where your data is stored

This site is hosted on Amazon Web Services in London, UK (eu-west-2). Some of our service providers may process data outside the UK; where they do, they maintain their own appropriate safeguards under UK data protection law.

How long we keep your data

We keep order and payment records for as long as required by UK tax and accounting law (normally 6 years). Course membership data is kept for as long as your account is active. If you have an account with us, you can ask us to delete your personal data at any time, except for information we are legally required to retain.

Your rights

Under UK data protection law, you have the right to:

  • Ask what personal data we hold about you, and get a copy of it
  • Ask us to correct inaccurate data
  • Ask us to delete your data, where we are not required to keep it
  • Object to how we use your data, including for analytics or advertising measurement

To exercise any of these rights, email mike@artyfactor.com. If you are not satisfied with our response, you have the right to complain to the UK Information Commissioner’s Office (ico.org.uk).

Security

This site uses HTTPS encryption, two-factor authentication and login-attempt limiting on admin accounts, and does not store full payment card details.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.