top of page

Privacy Policy

Last updated: 13 August 2026

Andrew Raven respects your privacy and takes the protection of personal information seriously.

This Privacy Policy explains what information I collect, why I use it, who I may share it with, how long I may keep it and the rights you have in relation to it.

1. Who Is Responsible for Your Personal Information?

The Andrew Raven website and store are operated by:

Andrew Richardson trading as Andrew Raven

45 Fitzroy Street
Fitzrovia
London W1T 6EB
United Kingdom

Email: andrew@andrewraven.com

For the purposes of UK data protection law, Andrew Richardson trading as Andrew Raven is the data controller for the personal information described in this policy.

2. Personal Information I May Collect

Depending on how you interact with Andrew Raven, I may collect:

  • your name;

  • email address;

  • telephone number where provided;

  • billing address;

  • delivery address;

  • information provided through the contact form;

  • information relating to an order or requested commission;

  • order history;

  • transaction and payment status information;

  • correspondence between us;

  • information relating to a return, refund, damaged item or complaint;

  • trade or stockist information where you contact me in a business capacity;

  • marketing preferences where applicable;

  • account information if customer account facilities are made available and you choose to use them;

  • website and device information such as IP address, browser type, device type, pages visited and cookie or similar technology information.

I do not ordinarily receive or retain your complete payment card details. Payments are handled through the payment services made available at checkout.

3. How I Collect Your Information

I may receive information directly from you when you:

  • place an order;

  • contact me;

  • complete the website contact form;

  • request information about an artwork;

  • make a trade or stockist enquiry;

  • request a commission;

  • arrange a return or refund;

  • make a complaint;

  • communicate with me by email or another channel;

  • join a mailing list if one is offered;

  • exercise a data protection right.

Some technical information may also be generated automatically when you browse or interact with the website.

The website is built and hosted using Wix, and website functions may involve processing by Wix and other technology providers used to operate the store.

4. Why I Use Personal Information

I only use personal information where I have an appropriate lawful basis.

Orders and contracts

I use your information to:

  • process and administer your order;

  • take payment;

  • prepare your artwork;

  • arrange delivery;

  • communicate with you about your purchase;

  • provide Certificates of Authenticity and maintain appropriate edition and transaction records;

  • manage returns, refunds and customer service.

The lawful basis will usually be that processing is necessary to enter into or perform a contract with you.

Enquiries and commissions

If you contact me about an artwork, commission, trade relationship or another service, I use the information you provide to respond and take steps at your request before entering into a contract.

Accounting and legal obligations

I may retain order, payment, invoice and transaction information where necessary for tax, accounting, regulatory or other legal requirements.

The lawful basis is compliance with a legal obligation and, where relevant, legitimate interests in maintaining appropriate business records.

Protecting the business and resolving disputes

I may use information where reasonably necessary to:

  • prevent or investigate fraud;

  • establish, exercise or defend legal rights;

  • resolve complaints;

  • investigate damaged or missing deliveries;

  • protect the website and business from misuse.

The lawful basis may include legitimate interests and compliance with legal obligations.

Marketing

If I offer a mailing list and you choose to join it, I may use your contact details to send Andrew Raven news, new collection releases or related information.

Where required, I will rely on your consent.

In circumstances where applicable electronic marketing rules permit communication with an existing customer about similar products, I may rely on the lawful route permitted by those rules.

You can opt out of direct marketing at any time.

5. Edition and Provenance Records

As part of maintaining the integrity and provenance of limited editions, I may keep records relating to artwork issued and sold.

These records may include:

  • artwork title;

  • print size;

  • edition number;

  • date of issue or sale;

  • purchaser or original orderer;

  • Certificate of Authenticity information.

These records help maintain an accurate history of each limited edition and protect the integrity of the collection.

Where personal information is retained for this purpose, I will limit it to what is reasonably necessary.

6. Payment Information

Payments made through the website are processed by the payment services available through the Andrew Raven ecommerce platform.

Payment providers may process information including your name, billing details, transaction amount and payment credentials in accordance with their own legal obligations and privacy practices.

Andrew Raven will ordinarily receive confirmation that payment has succeeded or failed together with transaction information needed to administer the order.

I do not ordinarily store complete debit or credit card numbers.

7. Delivery Information

To send your order, I may provide relevant information to postal services, couriers or fulfilment partners.

This may include:

  • your name;

  • delivery address;

  • telephone number where required for delivery;

  • email address where required for tracking or delivery notifications;

  • limited information describing the shipment where required for customs.

For international deliveries, information may also need to be supplied to customs authorities or their agents.

8. Who I May Share Personal Information With

I do not sell your personal information.

Where reasonably necessary, personal information may be shared with service providers including:

  • Wix and website or ecommerce service providers;

  • payment processors;

  • email and cloud service providers;

  • couriers and postal services;

  • print, production or fulfilment suppliers where required;

  • accountants and bookkeeping services;

  • IT and security providers;

  • professional advisers such as legal or insurance advisers;

  • customs and public authorities where required for international deliveries;

  • law enforcement, courts, regulators or public authorities where disclosure is required or permitted by law.

Only information reasonably necessary for the relevant purpose will be shared.

9. International Transfers of Personal Information

Some website, ecommerce, payment, cloud or technology providers may process information outside the United Kingdom.

Where the transfer of personal information is subject to UK restrictions on international transfers, appropriate measures will be used as required by law.

These may include UK adequacy regulations, approved contractual safeguards or another lawful transfer mechanism.

10. How Long I Keep Personal Information

I do not keep personal information for longer than reasonably necessary for the purposes for which it is used.

As a general guide:

Order, accounting and transaction records may ordinarily be retained for approximately six years, or for another period required for tax, accounting, legal or dispute purposes.

Edition and provenance records may be retained for considerably longer where this is reasonably necessary to preserve the integrity and history of a limited edition. The amount of personal information retained for this purpose will be kept to a minimum.

General enquiries that do not become an order or ongoing relationship may ordinarily be retained for up to two years after the last meaningful contact.

Customer service, complaint and return correspondence may be retained for a reasonable period after the matter is resolved where needed for record keeping or legal protection.

Marketing information may be retained while you remain subscribed. If you opt out, I may keep a minimal suppression record so that your preference continues to be respected.

Technical and website information will be retained according to the purpose for which it was collected and the settings of the relevant website or technology service.

Information contained in backups may remain for a limited additional period before being overwritten or securely deleted.

11. Cookies and Similar Technologies

The Andrew Raven website may use cookies and similar technologies to:

  • provide essential website functions;

  • operate the shopping basket and checkout;

  • maintain security;

  • remember preferences;

  • understand website performance;

  • measure how visitors interact with the site;

  • provide other features enabled through the website.

Where consent is legally required before a technology is stored or accessed on your device, you will be given an appropriate opportunity to make a choice.

Some technologies may operate without consent where they are necessary for a service you have requested or where another statutory exception applies.

Where available, you can use the website's cookie controls to manage your choices.

You can also manage cookies through your browser, although disabling some technologies may affect website functionality.

12. Direct Marketing

You have the right to object to the use of your personal information for direct marketing at any time.

If you receive a marketing message from Andrew Raven, you can use the unsubscribe method provided or contact:

andrew@andrewraven.com

Opting out of marketing will not prevent me from sending messages that are necessary to administer an existing order, respond to an enquiry or fulfil a contract.

13. Your Data Protection Rights

Depending upon the circumstances and the lawful basis used, you may have rights including:

  • the right to be informed about how your information is used;

  • the right to ask for access to personal information held about you;

  • the right to ask for inaccurate information to be corrected;

  • the right to ask for information to be erased in certain circumstances;

  • the right to ask for processing to be restricted in certain circumstances;

  • the right to object to certain processing;

  • the right to data portability where it applies;

  • the right to withdraw consent where processing is based on consent.

These rights are not absolute and exemptions may apply in some circumstances.

I may need to take reasonable steps to confirm your identity before fulfilling a request.

You will not ordinarily be charged for exercising your data protection rights, subject to the limited circumstances in which the law permits otherwise.

Requests can be sent to:

andrew@andrewraven.com

14. Your Right to Object

You have an absolute right to object at any time to the use of your personal information for direct marketing.

You may also have the right to object where personal information is being processed on the basis of legitimate interests.

To object, contact:

andrew@andrewraven.com

15. Data Protection Complaints

If you are concerned about how Andrew Raven has collected, used, retained or shared your personal information, please contact me.

Data protection complaints can be made by email to:

andrew@andrewraven.com

or in writing to:

Andrew Raven
45 Fitzroy Street
Fitzrovia
London W1T 6EB
United Kingdom

I will provide a clear route for making a complaint, acknowledge a data protection complaint within 30 days, take appropriate steps to investigate it and communicate the outcome without undue delay.

You also have the right to raise a concern with the Information Commissioner's Office, the independent UK data protection regulator.

16. Security

I take reasonable technical and organisational measures to protect personal information from accidental loss, unauthorised access, alteration, disclosure or misuse.

Access to personal information is limited to what is reasonably required to operate the business and provide its services.

No method of online transmission or electronic storage can be guaranteed to be completely secure.

17. Children

The Andrew Raven store is not directed specifically at children and I do not knowingly seek to collect personal information directly from children for ecommerce purposes.

Orders should be placed by an adult with legal capacity to enter into the purchase.

18. Automated Decision Making

Andrew Raven does not currently use personal information to make solely automated decisions that produce legal or similarly significant effects about you.

19. Third Party Websites

The Andrew Raven website may contain links to other websites.

A third party website will have its own privacy practices and Andrew Raven is not responsible for the way an independent third party collects or uses information after you leave this website.

20. Changes to This Privacy Policy

I may update this Privacy Policy when the business, website, technology or applicable law changes.

The latest version will be published on this page and the date at the top will be updated where appropriate.

21. Contact

Questions about this Privacy Policy, requests relating to your personal information and data protection complaints can be sent to:

Andrew Raven Richardson trading as Andrew Raven

45 Fitzroy Street
Fitzrovia
London W1T 6EB
United Kingdom

Email: andrew@andrewraven.com

bottom of page