Privacy Policy

Last updated: June 2026

True Royalty ('we', 'us', 'our') is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and store your personal information when you visit or make a purchase from our website, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

True Royalty is an independent limited edition art business based in England. Our website is operated via Shopify Inc., which acts as our data processor. For the purposes of data protection law, True Royalty is the data controller.

Contact: david@trueroyaltyart.com

2. What Data We Collect

We collect the following categories of personal data:

Identity data: name, billing name
Contact data: email address, telephone number, delivery and billing address
Financial data: payment card details (processed and stored by our payment providers — we do not store full card details)
Transaction data: details of purchases made through our website
Technical data: IP address, browser type and version, time zone, operating system, and browsing behaviour on our site
Marketing preferences: whether you have opted in to receive marketing communications from us

3. How We Collect Your Data

We collect personal data:

Directly from you, when you place an order, create an account, subscribe to our mailing list, or contact us
Automatically, via cookies and analytics tools when you browse our website (see Section 7 — Cookies)
From third parties, including payment processors and delivery carriers, in the course of fulfilling your order

4. How We Use Your Data

We use your personal data for the following purposes and on the following legal bases:

Fulfilment of your order: processing payment, producing your artwork, and arranging delivery — legal basis: performance of a contract
Customer service: responding to queries, complaints, and claims — legal basis: legitimate interests
Legal compliance: retaining transaction records, fulfilling tax obligations — legal basis: legal obligation
Marketing communications: sending promotional emails, new release announcements, and exclusive offers — legal basis: consent (opt-in only)
Website improvement: analysing how visitors use our site to improve performance and user experience — legal basis: legitimate interests

5. Data Sharing

We do not sell your personal data to any third party. We share your data only where necessary with the following:

Shopify Inc.: as our e-commerce platform and data processor, Shopify stores and processes order data on our behalf. Shopify's privacy policy is available at shopify.com/legal/privacy
Payment processors: including PayPal, Stripe, Klarna, and card schemes — solely for the purpose of processing your payment
Delivery carriers: your name and delivery address are shared with our shipping partners for the purpose of delivering your order
Legal authorities: where required by law, court order, or regulatory requirement

6. International Data Transfers

As Shopify is a US-based company, your data may be transferred to and processed in countries outside the UK. Where this occurs, Shopify relies on approved transfer mechanisms (including Standard Contractual Clauses) to ensure your data is protected to UK GDPR standards.

7. Cookies

Our website uses cookies — small text files placed on your device — for the following purposes:

Strictly necessary cookies: required for the website to function (e.g. your shopping cart, checkout session). These cannot be disabled.
Analytics cookies: help us understand how visitors interact with our site (e.g. Google Analytics). These are only set with your consent.
Marketing cookies: used to deliver relevant advertising and track campaign performance. These are only set with your consent.

You can manage your cookie preferences at any time via the cookie settings banner on our website, or through your browser settings. Disabling non-essential cookies will not affect your ability to place an order.

8. Marketing Communications

We will only send you marketing emails if you have explicitly opted in. You may withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any marketing email, or by emailing us at david@trueroyaltyart.com. Unsubscribing will not affect the processing of your order or your statutory rights.

9. Data Retention

We retain your personal data for the following periods:

Order and transaction records: 7 years from the date of purchase, in compliance with HMRC requirements
Customer account data: for the duration your account is active, plus 2 years following last activity
Marketing preferences: until you withdraw consent
Correspondence and claims records: 3 years from the date of resolution

10. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

Right of access: to request a copy of the data we hold about you
Right to rectification: to request correction of inaccurate or incomplete data
Right to erasure: to request deletion of your data, subject to legal retention obligations
Right to portability: to receive your data in a structured, machine-readable format
Right to object: to object to processing based on legitimate interests, including direct marketing
Right to restrict processing: to request that we limit how we use your data in certain circumstances

To exercise any of these rights, email us at david@trueroyaltyart.com. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are dissatisfied with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. The current version will always be available on this page with the date last updated. We will notify you of material changes by email where we hold your contact details.