Privacy Policy

Last updated: 13 October 2026

This policy explains what personal information oneartstudio.uk collects, why, and what you can do about it. I’ve kept it as plain as I can.

Who I am
This website is run by Csaba Tibor Palotas, trading as One Art Studio, 18 Newlyn Place, Milton Keynes UK, MK62LP. I’m responsible for your personal data, which makes me the “data controller” under UK data protection law. If you have any questions, email me at oneart.stu@gmail.com.

What I collect and why

If you sign up to my newsletter
I collect your email address, and your name if you give it, so I can send you news about new artworks, prints, workshops and mindfulness events. I only do this with your consent. You can unsubscribe at any time using the link in every email.

If you buy an original painting from this site
I collect your name, email address, delivery address and phone number, so I can process your order, deliver it and keep the records the law requires. Payments are handled by Stripe or PayPal. I never see or store your card details.

If you contact me
When you use the contact form or email me, I receive your name, email address and your message, and I use them only to reply to you.

If you leave a comment
If you comment on a blog post, your name, email address, comment and the time you posted are stored, so the comment can be shown and managed.

When you browse the site
With your consent, Google Analytics collects anonymous information about how people use the site, such as the pages visited and roughly where visitors are. It helps me see which artworks and pages people find useful. Google Analytics anonymises IP addresses. It only runs if you click Accept on the cookie banner.

My legal reasons for using your data

  • Consent: for the newsletter, Google Analytics and embedded YouTube and Instagram content. You can withdraw consent at any time.
  • Contract: for processing and delivering your orders.
  • Legal obligation: for keeping sales records for tax purposes.
  • Legitimate interests: for replying to your messages, managing comments and keeping the site secure, for example with Google reCAPTCHA to block spam.

Who I share it with
I never sell your data. I only share it with the services that help me run this site:

  • MailerLite: sends my newsletter
  • SureCart: manages orders on this site
  • Stripe and PayPal: process payments
  • Google: Analytics (with your consent) and reCAPTCHA (spam protection)
  • YouTube and Instagram: only if you accept embedded content
  • My web host: stores the website and its data
  • Delivery companies: receive your name and address when I post a painting

Some of these companies are based in, or store data in, the United States and other countries outside the UK. When that happens, they use approved safeguards, such as the UK International Data Transfer Agreement or the UK Extension to the EU–US Data Privacy Framework, to protect your data.

Buying on Etsy
My prints, cards and sketchbook are sold through my Etsy shop, Pulse of the Paradox. Purchases there are handled by Etsy under Etsy’s own privacy policy. I only receive the details Etsy shares with me to complete your order.

How long I keep it

  • Newsletter: until you unsubscribe
  • Orders: six years, as HMRC requires for tax records
  • Messages: up to two years, unless we’re still in touch
  • Comments: for as long as the comment is on the site
  • Analytics: up to 14 months, then deleted automatically by Google

Cookies
This site uses a few essential cookies so it can work, and other cookies only with your consent. You can change your choice at any time with the Manage consent tab. Full details are in my Cookie Policy.

Your rights
Under UK data protection law, you have the right to:

  • ask for a copy of the data I hold about you
  • ask me to correct anything inaccurate
  • ask me to delete your data
  • object to, or ask me to limit, how I use it
  • receive your data in a format you can take elsewhere
  • withdraw your consent at any time

To use any of these rights, email oneart.stu@gmail.com. I’ll reply within one month. It’s free.

Complaints
If you’re unhappy with how I’ve handled your data, please tell me first, and I’ll do my best to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy
If anything changes, I’ll update this page and the date at the top.