Privacy Policy

Umber ("we", "us") runs umber.art and sells numbered, embroidered editions of historic artworks. [Legal entity name, registered address and company number.] You can reach us at studio@umber.art.

This policy explains what personal data we collect, why, and what rights you have under the UK General Data Protection Regulation and the Data Protection Act 2018.

Waitlist: your email address and, if you give it, your first name. We use these to send the artletter and early access to drops. Basis: your consent. You can unsubscribe at any time from any email or at umber.art/unsubscribe.

Orders: your name, email address and delivery address, with the pieces you ordered. We use these to reserve your edition, take payment, deliver it and keep the records the law requires. Basis: performing our contract with you.

Contact form: your name, email address, the subject you choose and your message, so that we can reply. Basis: our legitimate interest in answering you.

Reviews: your name, the email address you give for verification (never shown) and your review. Basis: your consent.

Account registration: your name and email address. Basis: your consent. No password is stored at this stage.

Analytics: pages viewed, clicks, device and browser type, and an approximate location derived from your IP address. We use this to understand how the site is used and to improve it. Basis: our legitimate interest in running the site well. See the cookie notice.

Netlify hosts the site and stores form submissions (waitlist, orders, contact, reviews, accounts). PostHog provides analytics, on servers in the European Union. Resend sends our transactional emails, such as the waitlist welcome. Each acts under a contract that restricts them to processing data on our instructions.

We do not sell personal data, and we do not share it with advertisers. Some of these providers process data outside the UK; where they do, transfers rest on the UK International Data Transfer Agreement or an adequacy decision.

Waitlist details until you unsubscribe or ask us to delete them. Order records for six years, as tax law requires. Contact messages for twelve months after the matter is closed. Analytics data for twelve months.

You can ask to see the data we hold about you, correct it, delete it, restrict how we use it, receive a copy in a portable form, or object to our use of it. Where we rely on consent you can withdraw it at any time. Write to studio@umber.art and we will reply within one month.

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk. We would rather hear from you first.

The site is not aimed at anyone under 16 and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.

We will post any changes to this policy here and update the date at the top. Where a change matters, we will tell waitlist members by email.