Privacy Notice for Image Atlas

Andrew Stupple T/as Image Atlas The Rectory, St Stephen’s Green, Canterbury, Kent, UK, CT2 7JU

1. Introduction

This Privacy Notice explains how Image Atlas (“we”, “us”, “our”) collects, uses, stores, and protects personal information when you visit our website or purchase prints. We comply with the UK GDPR, the Data Protection Act 2018, and the EU GDPR for customers in the European Union.

2. Data Controller

Andrew Stupple T/as Image Atlas The Rectory, St Stephen’s Green, Canterbury, Kent, UK, CT2 7JU Email: [insert your preferred privacy contact email]

3. Personal Data We Collect

We collect and process the following categories of personal data:

  • Identity Data – name, email address, postal address (provided during checkout).

  • Transaction Data – purchase details and billing information (processed securely by Squarespace’s commerce system).

  • Technical Data – IP address, browser type, device information, cookies.

  • Usage Data – pages visited, time spent on site, interactions.

We do not collect marketing preferences and do not conduct email marketing.

4. How We Collect Your Data

We collect data through:

  • Direct interactions (placing an order, contacting us).

  • Automated technologies (cookies and analytics).

  • Squarespace’s built‑in commerce and analytics tools.

We do not use any third‑party integrations beyond Squarespace and Google Analytics.

5. Legal Bases for Processing

We process personal data under:

  • Contract – to fulfil your order and deliver purchased products.

  • Consent – for non‑essential cookies and Google Analytics.

  • Legitimate Interests – to maintain site security and improve website performance.

  • Legal Obligation – for accounting, tax, and regulatory compliance.

6. How We Use Your Data

We use personal data to:

  • Process and deliver orders.

  • Communicate with you about purchases or enquiries.

  • Improve website performance and visitor experience.

  • Maintain security and prevent fraud.

We do not use your data for advertising, profiling, or email marketing.

7. Sharing Your Data

We share your data only with:

  • Squarespace (website hosting, commerce, analytics).

  • Payment processors integrated through Squarespace (e.g., Stripe or PayPal, depending on Squarespace’s configuration).

  • Delivery partners (to fulfil your order).

Squarespace places cookies and processes data as part of providing its platform. As Squarespace states:

“Squarespace places two kinds of cookies on visitors’ browsers: necessary cookies… and non‑essential, or analytics and performance cookies.”

All third parties are required to handle your data securely and in accordance with data protection laws.

8. International Transfers

Squarespace may transfer data outside the UK or EEA. Where this occurs, appropriate safeguards such as Standard Contractual Clauses or adequacy decisions are used.

9. Data Retention

We retain personal data only as long as necessary for:

  • fulfilling orders

  • legal and accounting obligations

  • fraud prevention

Technical and analytics data may be retained for up to two years, depending on cookie settings.

10. Your Rights

You have the right to:

  • Access your personal data

  • Request correction or deletion

  • Object to processing

  • Request restriction of processing

  • Request data portability

  • Withdraw consent for non‑essential cookies

To exercise these rights, contact us at [insert email].

Cookie Notice

1. About Cookies

Our website uses cookies placed by Squarespace to ensure the site functions properly and to understand how visitors use it.

“Cookies are small pieces of data that websites store on a device… Necessary cookies so visitors can navigate and use key features on your site.”

Some cookies are necessary and always active. Others are non‑essential and used only with your consent.

2. Necessary Cookies (Always Active)

These cookies support essential site functions such as security, checkout, customer accounts, and fraud prevention.

Examples include:

  • Crumb – prevents cross‑site request forgery (CSRF).

  • CART / hasCart – shows when a visitor adds a product to their cart.

  • CHECKOUT_WEBSITE – identifies the correct site for checkout.

  • SiteUserInfo / SiteUserSecureAuthToken – authenticates customer accounts.

  • orderStatusSessionToken – authenticates visitors checking order status.

  • _ssid – remembers devices for anti‑fraud purposes.

Squarespace explains:

“Necessary and required cookies help these features work: customer accounts, shopping cart and checkout, URL redirects.”

These cookies cannot be disabled through our cookie banner.

3. Analytics Cookies (Require Consent)

We use Google Analytics through Squarespace’s official integration. These cookies help us understand visitor behaviour and improve the website.

Squarespace analytics cookies include:

  • ss_cid – identifies unique visitors (2 years).

  • ss_cpvisit – identifies unique visitors (2 years).

  • ss_cvisit – session identification (30 minutes).

  • ss_cvr – identifies unique visitors (2 years).

  • ss_cvt – session identification (30 minutes).

Squarespace states:

“We use analytics and performance cookies to collect information… such as traffic sources, unique visitors, and cart abandonment.”

These cookies are only placed if you accept non‑essential cookies.

4. No Third‑Party Integrations

You will not encounter cookies from:

  • social media embeds

  • advertising networks

  • booking systems

  • external widgets

  • email marketing platforms

Squarespace notes:

“The following integrations place necessary cookies… Weglot, and Acuity.”

We do not use any of these integrations.

5. Managing Cookies

You can manage cookie preferences through:

  • our cookie banner

  • your browser settings

Squarespace explains:

“Disabling non‑essential cookies doesn’t disable all cookies placed by third-party services connected to your site.”

Since we use no third‑party integrations, only Squarespace cookies apply.

6. Impact of Disabling Cookies

If you decline analytics cookies:

  • visitor counts may appear higher

  • returning visitors may be counted as new

  • conversion tracking may be incomplete

Squarespace states:

“After you disable analytics cookies, some data… won’t be a complete or accurate representation of visitor behavior.”

7. Updates

We may update this notice to reflect changes in technology, law, or our website features.