Privacy Policy

Last updated: August 2026

Caroline Trotman is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what information I collect when you visit this website, contact me, make a purchase, commission work or subscribe to my mailing list, and how that information is used and protected.

For the purposes of UK data protection law, Caroline Trotman is the data controller of the personal information collected through this website.

If you have any questions about this policy or how your personal information is used, please contact:

Caroline Trotman
Email: hello@carolinetrotman.com
Website: carolinetrotman.com

What information I collect

Depending on how you use this website, I may collect:

Your name
Email address
Telephone number, if provided
Billing and delivery address
Details relating to an order or commission
Information you provide when completing a contact or enquiry form
Your marketing preferences
Correspondence between us
Technical information about how you use the website, such as your IP address, browser, device and pages visited
Information collected through cookies and similar technologies

If you purchase something through the website, payment information will be processed securely by the relevant payment provider. I do not directly store your full card details.

How I collect your information

I may collect information when you:

Contact me through the website or by email
Purchase a print or other product
Enquire about or commission artwork, illustrations or window murals
Subscribe to my mailing list
Interact with the website
Accept optional cookies
Communicate with me through social media or another platform

Some technical information may be collected automatically when you use the website.

How I use your information

I may use your personal information to:

Respond to enquiries
Discuss and manage commissions
Process and fulfil orders
Arrange delivery of products
Provide customer service
Communicate with you about an existing order, enquiry or project
Maintain appropriate business and financial records
Improve the website and understand how visitors use it
Protect the website and prevent fraud or misuse
Send marketing emails where you have chosen to receive them
Meet my legal, tax and regulatory obligations

My lawful basis for processing your information

Under UK data protection law, I must have a lawful reason for using your personal information.

Depending on the circumstances, I may rely on:

Contract – where I need your information to fulfil an order, provide commissioned work or take steps at your request before entering into an agreement.

Legitimate interests – where it is reasonably necessary to operate and improve my business, respond to enquiries, maintain appropriate records or protect the website, provided these interests do not override your rights.

Consent – where you have actively chosen to receive marketing communications or agreed to optional cookies or other processing that requires consent. You can withdraw your consent at any time.

Legal obligation – where I am required to retain or process information to comply with the law, including tax and accounting requirements.

Online purchases and payments

When you purchase a product through this website, I collect the information needed to process and fulfil your order, including your name, contact details, billing and delivery information and details of the products purchased.

The website is built using Wix, and online store functionality and associated services may be provided through Wix and its service providers.

Payments are processed securely through the payment options available at checkout. Payment providers process your payment information according to their own privacy policies and security procedures.

Mailing list and marketing

I will only send you marketing emails where I have an appropriate lawful basis to do so.

If you actively subscribe to my mailing list, I may use your name and email address to send you news about new artwork, print releases, events, exhibitions, commissions, products and other relevant updates.

You can unsubscribe at any time by using the unsubscribe link in an email or by contacting me at hello@carolinetrotman.com.

Unsubscribing from marketing will not prevent me from sending necessary communications relating to an order, commission or enquiry.

Contact forms and enquiries

When you submit a contact form, I will use the information you provide to respond to your enquiry and, where relevant, discuss a potential commission or service.

Submitting an enquiry does not automatically subscribe you to marketing communications. If you would also like to receive marketing emails, you should be given a separate choice to opt in.

Cookies

This website uses cookies and similar technologies.

Some cookies are essential for the website to function correctly, including features such as security, shopping baskets and checkout.

Other cookies may be used for analytics, marketing or to understand how visitors interact with the website. Where required, these cookies will only be placed after you have given your consent through the website's cookie banner.

You can change or withdraw your cookie preferences at any time through the cookie settings available on the website. You can also control cookies through your browser settings.

Website analytics

I may use website analytics tools to understand how visitors use the site. This can include information such as pages viewed, approximate location, device type, browser and how visitors arrived at the website.

Where analytics cookies require consent, this information will only be collected after you have accepted the relevant cookies.

Wix

This website is hosted on the Wix.com platform. Wix provides the technology that allows me to operate the website, online shop, forms and other website functionality.

As part of providing these services, Wix may process certain personal information on my behalf. Wix may store information using servers located in different countries and uses safeguards for international transfers where required by applicable data protection law.

You can find further information about how Wix handles personal information in Wix's own privacy documentation.

Other third parties

I may need to share limited personal information with trusted third parties where necessary to operate my business or provide a service to you. These may include:

Website and hosting providers
Payment processors
Delivery and postal services
Email and mailing-list providers
Analytics providers
Professional advisers, such as accountants
IT and technical service providers

I only share information where necessary and expect service providers processing personal information on my behalf to handle it appropriately and securely.

I do not sell your personal information.

International transfers

Some of the third-party services used by this website may process or store information outside the UK.

Where personal information is transferred internationally, appropriate safeguards will be used where required by UK data protection law. These may include adequacy regulations or approved contractual safeguards.

How long I keep your information

I only keep personal information for as long as reasonably necessary for the purpose for which it was collected and to meet any legal, accounting or regulatory requirements.

For example:

Enquiry information will normally be retained only for as long as it remains relevant.
Order, invoice and transaction records may need to be retained for up to six years for tax and accounting purposes.
Commission and client records may be retained where reasonably necessary to maintain an appropriate record of work undertaken.
Marketing information may be retained until you unsubscribe or withdraw your consent.

Information that is no longer required will be securely deleted or anonymised where appropriate.

Keeping your information secure

I take reasonable steps to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.

However, no internet-based system can be guaranteed to be completely secure.

Your data protection rights

Depending on the circumstances, UK data protection law gives you rights including the right to:

Ask for a copy of the personal information I hold about you
Ask me to correct inaccurate or incomplete information
Ask me to delete your personal information in certain circumstances
Ask me to restrict how your information is used
Object to certain uses of your personal information
Withdraw consent where processing is based on consent
Ask for certain information to be transferred to you or another organisation
Raise a concern about how your personal information is being handled

Not all rights apply in every situation.

To exercise your rights, contact hello@carolinetrotman.com. I may need to confirm your identity before fulfilling a request.

I will respond to valid data protection requests within the timeframe required by law, normally within one month.

How to complain

If you have concerns about how I have collected or used your personal information, please contact me in the first instance at hello@carolinetrotman.com.

You can make a complaint electronically, including by email. I will acknowledge a complaint within 30 days and investigate it without undue delay.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Information about making a data protection complaint is available from the ICO at ico.org.uk.

Links to other websites

This website may contain links to other websites or platforms, including social media sites.

I am not responsible for the privacy practices of third-party websites. If you follow a link to another website, you should read its privacy policy to understand how it handles your information.

Children's information

This website and online shop are not intended to knowingly collect personal information directly from children.

If you believe that a child has provided personal information through the website without appropriate consent, please contact me so that I can take appropriate action.

Changes to this Privacy Policy

I may update this Privacy Policy occasionally to reflect changes to the website, the services I use or applicable legal requirements.

The latest version will always be published on this page, with the date it was last updated shown at the top.