Privacy Policy
Last updated: 25 July 2026
Introduction
Welcome to the Privacy Policy for Nathaly Ellen Celia (“I”, “me”, “my”).
I am committed to protecting your privacy and handling your personal information lawfully, fairly and transparently. This Privacy Policy explains what personal information I collect, how I use it, who it may be shared with and the rights you have under UK data protection law.
This policy applies to visitors to nathalyellencelia.art, customers who purchase artwork, people who make enquiries and anyone who otherwise communicates with me through this website.
Please read this Privacy Policy carefully so that you understand how personal information is collected, used and protected.
Who I Am
For the purposes of UK data protection legislation, the data controller responsible for the personal information collected through this website is:
Nathaly Ellen Celia
Aberystwyth,
Ceredigion.
SY23 3TP
United Kingdom
Email: NECarts@outlook.com
This website showcases original artwork by Nathaly Ellen Celia and provides information about available artworks, exhibitions and collecting original paintings. Visitors may also submit enquiries or purchase artwork directly through this website.
If you have any questions regarding this Privacy Policy or the way your personal information is handled, please contact me using the email address above.
Information I Collect
Depending on how you use this website, I may collect the following types of personal information:
Your name.
Your email address.
Your telephone number (if provided).
Your billing and delivery address when purchasing artwork.
Payment confirmation information supplied by my payment provider (I do not receive or store your full payment card details).
Details contained within any enquiry or message you choose to send.
Information relating to your purchases, including artwork ordered, order history and delivery information.
Technical information collected automatically through cookies and website analytics, such as your IP address, browser type, device information and pages visited.
I only collect personal information that is necessary to provide my services, process purchases, respond to enquiries, improve this website and comply with my legal obligations.
How I Use Your Information
I use your personal information only for where necessary for the following purposes:
Respond to your enquiries and provide customer support.
Process and fulfil artwork purchases.
Arrange payment, packaging and delivery of artwork.
Communicate with you about your order or enquiry.
Maintain accurate business and financial records.
Improve the performance, functionality and security of this website.
Comply with legal and regulatory obligations.
Prevent fraud and protect the security of my business and customers.
I will only use your personal information where I have a lawful basis to do so under applicable data protection legislation.
Lawful Basis for Processing
Under UK data protection legislation, I process personal information only where I have a lawful basis to do so. Depending on the circumstances, this may include one or more of the following:
Performance of a contract – to take steps at your request before entering into a contract and, once a contract has been formed, to process and fulfil your artwork purchase, arrange delivery, provide customer support and meet my contractual obligations to you.
Legitimate interests – to respond to enquiries, improve this website, maintain the security of my business, prevent fraud and administer my business effectively, provided that these interests do not override your rights and freedoms.
Legal obligation – where I am required to retain or disclose information to comply with legal, accounting or regulatory requirements.
Consent – where you have chosen to receive marketing communications or where your consent is otherwise required by law. You may withdraw your consent at any time without affecting the lawfulness of any processing carried out before it was withdrawn.
Where personal information is required in order to enter into or perform a contract with you, failure to provide that information may mean that I am unable to fulfil your order or respond to your request.
Under UK data protection legislation, I process personal information only where I have a lawful basis to do so. Depending on the circumstances, this may include one or more of the following:
Performance of a contract – to process and fulfil your artwork purchase, arrange delivery, provide customer support and fulfil my contractual obligations to you.
Legitimate interests – to respond to enquiries, improve this website, maintain the security of my business, prevent fraud and administer my business effectively, provided that these interests do not override your rights and freedoms.
Legal obligation – where I am required to retain or disclose information to comply with legal, accounting or regulatory requirements.
Consent – where you have chosen to receive marketing communications or where your consent is otherwise required by law. You may withdraw your consent at any time without affecting the lawfulness of any processing carried out before it was withdrawn.
Where personal information is required in order to enter into or perform a contract with you, failure to provide that information may mean that I am unable to fulfil your order or respond to your request.
Payment Providers
Payments made through this website are processed securely by Stripe, a trusted third-party payment provider. I do not collect, store or have access to your full payment card details.
When you make a purchase, your payment information is transmitted directly to Stripe and processed in accordance with Stripe’s own Privacy Policy, security standards and legal obligations. I receive only the information necessary to confirm your payment, process your order and maintain accurate business records.
For further information about how Stripe processes and protects your payment information, please refer to Stripe’s Privacy Policy.
Sharing Your Information
I only share your personal information where it is necessary to provide my services, fulfil your order or comply with legal obligations. I do not sell, rent or trade your personal information to third parties for marketing purposes.
Your information may be shared with trusted third parties including:
Stripe – to process secure online payments.
Delivery providers – to package, ship and deliver your artwork.
Professional advisers – such as accountants or legal advisers where reasonably necessary.
Government or regulatory authorities – where disclosure is required by law.
How I Protect Your Information
I take the security of your personal information seriously and use appropriate technical and organisational measures to help protect it from unauthorised access, accidental loss, misuse, alteration or disclosure.
Personal information is stored using secure systems provided by trusted service providers where appropriate. Access to personal information is limited to those who require it for legitimate business purposes.
Although I take reasonable steps to protect your personal information, no method of transmitting information over the internet or storing electronic data can be guaranteed to be completely secure. For this reason, I cannot guarantee absolute security, but I continually seek to maintain appropriate safeguards to protect the information entrusted to me.
Data Retention
I retain personal information only for as long as it is reasonably necessary to fulfil the purposes for which it was collected, including processing purchases, responding to enquiries, complying with legal obligations and resolving any disputes.
The length of time I retain personal information depends on the nature of the information and the purpose for which it was collected. Where personal information is no longer required, I will securely delete or anonymise it unless I am required by law to retain it for a longer period.
Certain financial and transaction records may be retained for longer where necessary to comply with legal, tax or accounting obligations.
Cookies and Website Analytics
This website uses cookies and similar technologies to help it function correctly, improve your browsing experience and understand how visitors use the website.
Some cookies are essential for the operation of the website and cannot be disabled. Other cookies, including performance, analytics and advertising cookies, are optional and will only be used where you have given your consent through the cookie banner.
You can accept, decline or manage your cookie preferences at any time using the Cookie Preferences option available on this website.
I also use website analytics provided through Squarespace to help me understand how visitors interact with my website. Analytics information is used to improve the website, monitor its performance and better understand visitor behaviour. Where required by law, analytics cookies are only used with your consent.
For more detailed information about the cookies used on this website, please refer to my Cookie Policy.
Your Privacy Rights
Under UK data protection legislation, you have a number of rights regarding your personal information. Depending on the circumstances, these rights may include:
The right to request access to the personal information I hold about you.
The right to request that inaccurate or incomplete personal information is corrected.
The right to request the deletion of your personal information where I am no longer legally required to retain it.
The right to request that the processing of your personal information is restricted in certain circumstances.
The right to object to the processing of your personal information where permitted by law.
The right to withdraw your consent at any time where I rely on your consent as the lawful basis for processing. This will not affect the lawfulness of any processing carried out before your consent was withdrawn.
The right to request a copy of certain personal information in a portable format where required by law.
If you wish to exercise any of these rights, please contact me using the details provided in this Privacy Policy. I will respond to your request in accordance with applicable data protection legislation.
International Transfers
Your personal information is primarily processed in the United Kingdom. However, some trusted third-party service providers used to operate this website or process payments may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, I will take reasonable steps to ensure that appropriate safeguards are in place to protect your personal information in accordance with applicable UK data protection legislation.
Children’s Privacy
This website is intended for a general audience and is not directed at children under the age of 13.
I do not knowingly collect personal information from children under the age of 13. If I become aware that personal information has been collected from a child without appropriate consent where required, I will take reasonable steps to delete that information as soon as practicable.
If you believe that a child has provided personal information through this website, please contact me so that the matter can be investigated.
Changes to this Privacy Policy
I may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, website functionality or the services I provide.
Any updates will be published on this page together with the revised “Last updated” date at the beginning of this Privacy Policy. I encourage you to review this page periodically to remain informed about how your personal information is collected, used and protected.
Contact Information
If you have any questions about this Privacy Policy, your personal information or the way your information is processed, please contact me:
Nathaly Ellen Celia
12 Lon Llewelyn,
Waunfawr,
Aberystwyth,
Ceredigion.
SY23 3TP
United Kingdom
Email: NECarts@outlook.com
I will respond to privacy-related enquiries as soon as reasonably practicable.
Complaints to the Information Commissioner’s Office (ICO)
If you have concerns about the way I have collected, used or handled your personal information, I would appreciate the opportunity to address your concerns in the first instance. Please contact me using the details provided in this Privacy Policy so that I can investigate and respond appropriately.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent authority responsible for upholding information rights and data protection legislation.
Further information about the ICO, including how to make a complaint, is available https://ico.org.uk.