Last updated: 5 October 2026
1. Who we are
Bon Arte Photography is a photography business operated as a sole trader in Wales, United Kingdom.
The data controller responsible for your personal data is:
Bon Arte Photography
trading as Bon Arte Photography
United Kingdom
Email: [email protected]
Website: https://bonartephotography.com
This Privacy Policy explains how we collect and use personal data when you visit our website, contact us or purchase a licence.
2. What personal data we collect
Depending on how you use the website, we may collect:
- your name;
- email address;
- billing and contact details;
- business details where provided;
- information relating to your order and licence;
- information you provide when contacting us;
- payment and transaction information;
- technical information about your visit to our website.
Technical information may include information such as your IP address, browser and device information, pages visited, dates and times of visits and information used for website statistics and security.
Where you contact us through a website form, we process the information you choose to provide in your message.
3. How we use your information
We use personal data to:
- process and administer purchases;
- provide and administer photography licences;
- communicate with customers;
- respond to enquiries;
- provide customer support;
- maintain appropriate business, accounting and transaction records;
- operate and secure our website;
- prevent fraud, abuse and other misuse;
- understand general website traffic and usage;
- comply with legal and regulatory obligations; and
- establish, exercise or defend legal claims where necessary.
4. Our lawful bases
Depending on the circumstances, we rely on the following lawful bases under the UK GDPR:
Contract – where processing is necessary to process your purchase, administer your licence or provide services you have requested.
Legal obligation – where we need to retain or process information to comply with legal, tax, accounting or other legal requirements.
Legitimate interests – where processing is necessary for the operation, security and administration of our business, provided that our interests are not overridden by your rights.
Consent – where consent is required, including for certain non-essential cookies and similar technologies.
5. Payments
Payments made through the website are processed using WooPayments, powered by Stripe.
Payment providers receive the information necessary to process your payment, maintain payment security and prevent fraud.
Bon Arte Photography does not store your complete payment-card details.
The payment provider’s own privacy information may also apply to payment processing.
6. Our website and service providers
We use the following services in operating the website and business:
- WooCommerce – online shop, orders and customer information;
- IONOS – website hosting and related infrastructure;
- WooPayments / Stripe – payment processing;
- Google Merchant Centre – management and display of our product information;
- Jetpack Stats – website statistics;
- WP Statistics – website statistics;
- WP Visitor Statistics – website visitor statistics;
- SureCookie – management of cookie consent;
- SureForms – website contact forms;
- CartBounty – management of identifiable abandoned shopping baskets.
We use these services only to the extent necessary for their respective functions.
We do not sell personal data.
7. Website statistics
We use Jetpack Stats, WP Statistics and WP Visitor Statistics to understand general website traffic and usage.
Depending on the particular service and its configuration, statistical information may include information about visits, pages viewed, browser or device information, IP-related information and approximate geographical information.
8. Contact forms
We use SureForms for contact forms on our website.
Information you submit through a contact form is used to respond to your enquiry.
IP logging is not enabled for our SureForms forms.
Administrative notifications are enabled so that we can receive new form submissions.
Technical logs may record failed form-submission events for troubleshooting purposes. Submitted form values are not stored in these technical logs.
9. Abandoned shopping baskets
We use CartBounty in connection with abandoned shopping baskets.
Anonymous carts are excluded.
Where you have provided identifiable information during the purchasing process, information associated with an unfinished basket may be retained for administrative purposes.
10. Google services
We use Google Merchant Centre to manage product information associated with our online shop.
Google Ads is connected to our website’s Google for WooCommerce integration, but we do not currently run active Google advertising campaigns.
If our use of Google services changes and involves additional processing of personal data, we will review and update this Privacy Policy where necessary.
11. Cookies
Our website uses cookies and similar technologies for essential website functionality, shopping and checkout functionality, security, cookie-consent management and website statistics.
Where consent is required for non-essential cookies or similar technologies, we ask for consent through our cookie-consent mechanism.
For more information, please see. our Cookie Policy
12. How long we keep your information
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected.
Information relating to purchases, transactions and licences may be retained for longer where necessary to comply with legal, tax or accounting requirements, administer contractual rights or protect our legitimate interests.
Enquiry and correspondence information is normally retained for as long as reasonably necessary to deal with the enquiry and any resulting transaction or issue.
Technical and statistical information is retained according to the relevant service or plugin’s configuration.
13. Your rights
Under applicable data protection law, you may have the right to:
- access your personal data;
- correct inaccurate or incomplete information;
- request deletion of your personal data;
- request restriction of processing;
- object to certain processing;
- request data portability;
- withdraw consent where processing is based on consent.
These rights are subject to certain legal conditions and exemptions.
For example, we may be required to retain certain information for legal or accounting purposes even if you request its deletion.
To exercise your rights, contact:
We may need to verify your identity before dealing with a request.
14. International transfers
Some of the service providers we use may process personal data outside the United Kingdom.
Where personal data is transferred outside the UK, we will use an appropriate lawful transfer mechanism or other safeguard required by applicable data protection law.
15. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.
No internet transmission or electronic storage system can be guaranteed to be completely secure.
16. Marketing
Bon Arte Photography does not currently operate an active newsletter or marketing mailing list.
If we introduce email marketing in the future, we will ensure that the applicable privacy and electronic-marketing requirements are addressed.
17. Complaints
If you have concerns about how we use your personal data, please contact us first:
You also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office (ICO)
Further information about making a complaint is available from the ICO.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, services or legal requirements.
The latest version will be published on this page.
Last updated: 5 October 2026