Cracked Tooth Studio – Privacy Policy
Last updated: 5 August 2025
1. Who we are
Cracked Tooth Studio is an art studio based in the United Kingdom. We design and sell original artwork, run workshops, and occasionally offer custom commissions.
Data controller contact:
Cracked Tooth Studio
[info@CrackedToothStudio.com]
2. What personal data we collect and why
We collect personal data in different ways, depending on how you interact with us:
When purchasing artwork or booking workshops:
Name, email, billing and shipping address, payment details.
Health/allergy info, if needed for onsite sessions.
We process this data to fulfil orders and schedule your sessions under contractual necessity.
When you contact us (e.g. enquiry or commission):
Name, email, optional phone number, message contents.
We rely on legitimate interests and/or consent to respond and process your enquiry.
Website analytics/cookies:
IP address, browser type, pages visited.
To improve our site and user experience; lawful basis: legitimate interests.
3. Lawful basis for processing
Under the UK GDPR, our lawful bases include:
Contract (performing your order or booking).
Consent, when subscribing to email or marketing (you may withdraw consent at any time).
Legitimate interests, such as improving our offerings and responding to queries not covered under contract or consent
Studio 24
+15
LegalVision UK
+15
Visual Art Studio
+15
Studio 24
Reddit
+3
Information Commissioner's Office
+3
Information Commissioner's Office
+3
.
4. Data retention
We retain personal data only as long as necessary:
Order, payment, workshop booking information: up to 7 years (UK tax law compliance).
Email marketing lists: if you opt‑in, deleted upon unsubscribe or inactivity.
Website analytics logs: retained for up to 12 months, then anonymised or deleted
Visual Art Studio
+2
Reddit
+2
Artspace
+1
Leamington Studio Artists
.
5. Who we share your data with
Etsy platform, to process orders and comply with platform obligations.
Service providers, e.g., courier/shipping companies, email/web hosting services—only when needed and under contractual confidentiality terms.
Legal or regulatory authorities, if required by law or to protect rights in legal claims.
Business transfers, only in case of sale or merger—and only where permitted by law
The Seasons Art Class
Reddit
+1
.
6. International data transfers
Data may be processed or stored outside the UK (e.g., web hosting, email services). We ensure appropriate safeguards—such as EU‑UK adequacy or approved contractual clauses—are in place to protect your information
The Seasons Art Class
+1
.
7. Your rights
You have rights under data protection law:
Right Explanation
Access Request a copy of your personal data.
Rectification Ask us to correct inaccurate or incomplete data.
Erasure Request deletion of your data, unless legal reasons require retention.
Restriction or objection Ask us to limit or stop processing under certain conditions.
Data portability Receive your data in a standard format.
Withdraw consent Withdraw consent for marketing emails at any time.
Lodge a complaint Contact the ICO if you’re unhappy about our data practices.
To exercise any of these rights, contact us at [email@example.com]. We will respond within one month
Reddit
+8
The Seasons Art Class
+8
artuk.org
+8
Reddit
LegalVision UK
.
8. Cookies and tracking technologies
We use cookies and similar tools to:
Authenticate visitors and secure sessions.
Analyse site traffic so we can improve usability.
We display a cookie banner and you can manage your preferences via browser settings. Detailed cookie info is in our separate Cookie Policy
websitebuilderexpert.com
+2
en.wikipedia.org
+2
.
9. Children’s data
We do not knowingly collect data from individuals under 16. Parental consent is required for any child under 16. Our privacy information is written clearly and plainly, suitable for all ages
Studio 24
websitebuilderexpert.com
.
10. Data security measures
We protect personal data using:
Secure HTTPS/SSL encryption for website and data transmissions.
Restricted access protocols and password-protected systems.
Regular backups, secure deletion, and internal security policies.
Only authorised personnel have access and we conduct periodic reviews to ensure compliance
websitebuilderexpert.com
+2
The Seasons Art Class
+2
.
11. Policy changes
We review our Privacy Policy regularly. Any substantive updates will be posted here with a new “Last updated” date. For significant changes, we may notify you by email.
12. How to contact us
If you have any questions or concerns about your data or this policy, please contact:
Cracked Tooth Studio
Email: [info@CrackedToothStudio.com]
For unresolved issues, you may lodge a complaint with the ICO (Information Commissioner’s Office) in the UK
Information Commissioner's Office
LegalVision UK
.
Thank you for trusting Cracked Tooth Studio—your privacy matters!
This draft aligns with Etsy’s expectations for seller privacy policies and ensures compliance with UK GDPR and ICO guidance. Feel free to customise names, email, address, retention timelines, or add other data-processing activities (like newsletter platforms or analytics services).