Privacy & Responsible AI Policy

Last Updated: 29 July 2026

Business Name: Artini UK

Data Controller: Francesca Di-Lella

1. Introduction

Artini UK operates this website and provides creative experiences including Sip & Paint events, private workshops, children's art classes and online purchases (the "Services"). Our website is powered by Shopify, which enables us to provide our online store and related services.

We are committed to protecting your privacy and using your personal information responsibly. This Privacy & Responsible AI Policy explains how we collect, use, store and share your personal information, as well as how we use artificial intelligence (AI) within our business.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our Services, you acknowledge that you have read and understood this policy.

2. Personal Information We Collect

We collect personal information that identifies, or can reasonably be linked to, you.

Information you provide directly

This may include:

• Parent or guardian name
• Child's name and age (for Kids Creative Club participation)
• Email address
• Telephone number
• Billing and delivery address
• Emergency contact details
• Medical information or allergies where relevant to your safety
• Account information, including usernames and passwords
• Communications you send to us

Transaction and payment information

This may include:

• Booking information
• Purchase history
• Payment confirmations
• Transaction details

Payments are processed securely through trusted third-party providers such as Shopify Payments, Stripe and PayPal. We do not store your full payment card details.

Information collected automatically

When you visit our website, we may automatically collect:

• IP address
• Browser type
• Device information
• Website usage information
• Cookies and similar technologies

Photographs and videos

During workshops or events we may occasionally take photographs or videos for promotional purposes, including use on our website and social media.

Where children are identifiable, we will always obtain parental or guardian consent before using images.

3. Where We Collect Your Information From

We collect personal information:

• Directly from you through bookings, enquiries and contact forms
• Automatically through cookies and website analytics
• From payment providers and booking platforms
• From trusted service providers where necessary

4. How We Use Your Personal Information

We use your information to:

Provide our services

• Process bookings and payments
• Deliver workshops and events
• Manage customer accounts
• Fulfil online orders

Keep participants safe

• Record medical information where necessary
• Respond appropriately in emergencies
• Meet safeguarding responsibilities

Communicate with you

• Confirm bookings
• Respond to enquiries
• Notify you of important updates
• Provide customer support

Marketing (where you have given consent)

We may send:

• Newsletters
• Event announcements
• Special offers
• Marketing emails

You can unsubscribe at any time.

Improve our business

We use information to:

• Analyse website usage
• Improve customer experience
• Develop new workshops and services

Legal and security purposes

We may process information to:

• Prevent fraud
• Protect our business
• Meet legal obligations

5. How We Use Artificial Intelligence (AI)

Artini UK uses artificial intelligence (AI) as a business tool to improve efficiency and reduce administrative work. AI allows us to spend more time delivering creative experiences and supporting our customers.

AI supports our work but does not replace our judgement, creativity or responsibility.

How AI may be used

AI may assist with tasks such as:

• Brainstorming ideas
• Planning workshops and events
• Developing marketing campaigns
• Drafting emails and website content
• Improving spelling and grammar
• Creating templates
• Researching general business topics
• Summarising information
• Organising business processes

Every important piece of AI-generated content is reviewed by Francesca Di-Lella before it is published or used.

Protecting your information

When using AI tools we aim to follow these principles:

• Only the minimum information necessary is shared.
• Names and identifying information are removed wherever possible.
• Customer situations are anonymised before being discussed with AI.
• Temporary or non-persistent AI chats may be used for more sensitive work where available.
• Files containing personal information are removed from AI platforms once they are no longer needed, where possible.
• We only use reputable AI providers and continue to comply with UK data protection law.

What we will not use AI for

We will not use AI to:

• Make important decisions on behalf of customers.
• Replace personal teaching or customer service.
• Replace the creative experiences we deliver.
• Share confidential customer information unnecessarily.
• Present AI-generated information as fact without checking it.
• Create misleading content or deceptive imagery.
• Generate or edit images of children in ways that could compromise their privacy, dignity or safety.

Human oversight

Artificial intelligence can make mistakes or produce inaccurate information.

For this reason, anything relating to customers, bookings, safeguarding, pricing, legal policies or business decisions is reviewed by a human before being relied upon.

Final responsibility always remains with Artini UK.

Transparency

If customers ask whether AI has helped prepare written content or business documents, we will answer honestly.

However, all artwork, workshops, teaching, customer service and creative experiences are designed, delivered and reviewed by a real person.

6. Legal Basis for Processing

We process personal information under one or more of the following lawful bases:

• Contractual necessity
• Legal obligation
• Legitimate interests
• Consent

Where consent is required, you may withdraw it at any time.

7. Sharing Your Information

We never sell your personal information.

We may share information with trusted organisations including:

• Shopify
• Payment providers
• Email and marketing platforms
• Booking systems
• IT service providers
• Professional advisers where necessary
• Legal or regulatory authorities where required by law

All organisations handling personal information on our behalf are expected to process it securely and lawfully.

8. Shopify and Third-Party Services

Our website and online shop are hosted by Shopify.

Shopify processes certain information in order to provide secure hosting, payment processing, analytics and other services necessary for operating our online store.

Some of your information may be transferred or processed outside the UK. Where this happens, appropriate safeguards are used in accordance with UK data protection law.

For more information, please see Shopify's own Privacy Policy.

9. Children's Data

Artini UK operates children's art classes and therefore collects limited information relating to children.

This may include:

• Name
• Age
• Emergency contact information
• Relevant medical information

We collect this information only from parents or legal guardians.

Children's information is used solely for participation, safeguarding and safety purposes.

We take extra care to protect children's personal information.

Our website is not intended for independent use by children.

10. Data Retention

We only keep personal information for as long as necessary.

Typical retention periods include:

• Customer records for as long as required to provide our services.
• Financial and accounting records for at least six years to meet legal and tax requirements.
• Safeguarding and incident records for as long as required by law or safeguarding guidance.
• Marketing information until consent is withdrawn or you unsubscribe.

11. Keeping Your Information Secure

We use appropriate technical and organisational measures to protect personal information, including:

• Password-protected systems
• Restricted access to information
• Secure third-party providers
• Secure payment processing

Although we take reasonable precautions, no online system can guarantee complete security.

12. Your Rights

Under UK data protection law, you have the right to:

• Access your personal information.
• Correct inaccurate information.
• Request deletion of your information where appropriate.
• Restrict or object to processing.
• Withdraw consent.
• Request a copy of your information in a portable format.

We aim to respond to requests within one month.

You also have the right to complain to the Information Commissioner's Office (ICO).

13. Cookies

Our website uses cookies to:

• Keep the website functioning correctly.
• Analyse website traffic.
• Improve user experience.
• Support marketing and advertising where consent has been provided.

You can manage cookies through your browser settings and, where available, through our cookie consent banner.

14. Third-Party Links

Our website may contain links to other websites.

We are not responsible for the privacy practices of those websites and recommend reading their own privacy policies.

15. International Transfers

Some of the organisations we use may process information outside the United Kingdom.

Where this happens, we ensure appropriate safeguards are in place, including approved contractual protections or transfers to countries recognised as providing adequate levels of data protection.

16. Changes to This Policy

We may update this policy from time to time to reflect changes in our business, technology or legal requirements.

The latest version will always be available on this page together with the date it was last updated.

17. Contact Us

If you have any questions about this policy or wish to exercise your data protection rights, please contact:

Francesca Di-Lella

Artini UK

Email: francesca@artini.uk

Telephone: 07444 636473