Privacy & Cookie Policy

For www.kellyanne.studio and connected domains

​

Last updated: 18 August 2026

​

1. About 

Kellyanne Studio is the main public-facing name used for the work of artist and illustrator Kellyanne Pugh. Other public-facing names may be used for particular collections or services, including Seasons Greetings for seasonal letters and personalised products. The websites and services are operated by WHERE FOR ART NOW? LTD.

​

For this notice, "the website" collectively means www.kellyanne.studio and, while they redirect to, display or provide services operated by WHERE FOR ART NOW? LTD, the following domains: www.whereforartnow.com, www.whereforartnow.co.uk, www.kellyannewalker.co.uk and www.seasons-greetings.co.uk. They may be alternative web addresses or brand-specific routes, but they are not separate data controllers.

​

This notice explains how WHERE FOR ART NOW? LTD ("we", "us" or "our") collects, uses, stores and shares personal information when you visit the website, contact us, join a mailing list, place an order, provide personalisation details, commission artwork, make a booking or attend a class or event.

​

Some shopping, payment, download, newsletter and booking features described below may not yet be live. The relevant section applies when that feature is made available. We will update this notice and our cookie settings before starting any materially different use of personal information.

​

We process personal information under applicable UK data protection law, including the UK GDPR, the Data Protection Act 2018 as amended (including by the Data (Use and Access) Act 2025), and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended.

​

2. Who is responsible for your information

The data controller is:

WHERE FOR ART NOW? LTD

Company number: 10729075

Registered in England and Wales

Registered office: Office Suite 12, 168B Saron Road, Saron, Ammanford, Carmarthenshire, Wales, SA18 3LN

To ask a privacy question, exercise a data protection right or make a data protection complaint:

•  Use the contact form at https://www.kellyanne.studio/contact and begin your message with the word "Privacy"; or

• Write to the registered office above, marking the envelope "Private - Data Protection".  Please do not send sensitive information or identity documents through the general contact form. If wevneed proof of identity, we will explain how to provide it securely.

 

3. Personal information we may collect

Depending on how you use the website and services, we may collect:

•  Identity and contact details, such as your name, email address, telephone number, billing address and delivery address.

•  Enquiry and project details, including your message, quote request, commission brief, booking information and correspondence.

•  Order and transaction details, including products or services ordered, amounts paid, payment status, delivery information, refunds and records needed for accounting.

•  Personalisation information, such as a name, age, message, interests, wishes, achievements, gift-recipient details or an alternative delivery address supplied by the adult placing the order.

•  Images and files, such as customer photographs, artwork references, logos, documents or other material uploaded for a commission or personalised product.

•  Class and event details, such as the name of the booking adult, school or organisation, attendee numbers and practical booking information.

• Marketing preferences, including whether and when you choose to receive or stop receiving emails.

•  Technical and usage information, such as IP address, browser and device type, approximate location, pages viewed, referring website, cookie identifiers and consent choices.

•  Publicity information, such as a testimonial, social-media tag or permission to display identifiable work.

​

We normally receive information directly from you. We may also receive information from an adult ordering for another person, a parent or guardian, a school or organisation, a payment provider, a delivery provider, or when you contact or tag us through social media.

 

4. Information we do not ask you to provide

Please do not send medical information, disability information, school details, religious information, identification documents or other sensitive or special-category information through a general form, order personalisation field or email unless we have specifically asked for it and explained why it is needed.

​

If an event genuinely requires accessibility or health information, we will request the minimum needed separately, explain how it will be used, and identify an appropriate legal basis and additional condition before collecting it.

​

5. Why we use personal information and our lawful bases

We use personal information only where we have a lawful basis.

​

Enquiries, quotations and commissions

We use contact and project information to reply to enquiries, prepare quotations, discuss commissions and take steps requested before entering into a contract. Our lawful bases are taking steps at your request before a contract, performing a contract and our legitimate  interests in responding to genuine business enquiries and administering the studio.

​

Orders, payments, downloads, delivery and bookings

We use identity, contact, order, payment-status, delivery and booking information to accept and fulfil orders; supply physical or digital products; take deposits or payments; arrange UK delivery; administer commissions; and manage classes or events. Our lawful bases are taking steps before a contract and performing a contract.

We also keep records where necessary to comply with tax, accounting, fraud-prevention and other legal obligations, and to establish, exercise or defend legal claims.

​

Personalised products and gifts

We use personalisation details only to create, check, fulfil and deliver the requested product, deal with questions or complaints and maintain an accurate transaction record. Our lawful bases are performance of the contract with the adult purchaser, compliance with legal obligations, and our legitimate interestsin maintaining accurate records and resolving disputes.

​

Classes and events

We use booking information to organise and deliver the class or event, communicate practical information and meet reasonable safety and administration needs. The lawful bases are contract, legal obligation where applicable, and legitimate interests in running safe and well-administered activities.

 

Website operation, security and essential cookies

We use limited technical information and essential cookies to operate the site, remember privacy choices, prevent fraud and attacks, diagnose faults and keep the service secure. Our lawful bases are legitimate interests in providing a secure, reliable website and compliance with legal obligations. Essential cookies do not require consent under PECR.

 

Analytics and non-essential cookies

If you choose to accept analytics cookies, we use Wix Analytics and Google Analytics to understand how visitors use the website and improve its content and performance. The lawful basis for storing or accessing these cookies is consent. Where personal information is subsequently processed, we rely on consent and, where applicable, legitimate interests in improving the website. Analytics does not load

before the relevant cookie consent is given.

 

Email newsletters and marketing

We use your email address to send newsletters or marketing only where you have actively opted in, or where another lawful PECR exception clearly applies. For the planned newsletter, we intend to use consent. Marketing consent is separate from an enquiry, order or booking and is not a condition of purchase. You can unsubscribe at any time.

 

Portfolio, social media and promotion

Completed artwork that does not identify an individual may be photographed and displayed in Kellyanne Pugh's portfolio, website, social media, exhibitions and promotional material on the basis of our legitimate interests in showing and promoting the artist's work, unless confidentiality was agreed in writing before work began. We will not publish a customer's name, private reference photograph, identifiable image of a person, child's information, testimonial or other identifying detail without express permission or another clear lawful basis. Personalised Santa-letter examples will be fictional or anonymised. Film, television and other confidential work will be handled in accordance with the relevant contract or non-disclosure agreement.

 

Legal and business administration

We may use information to prevent and investigate fraud, protect legal rights, comply with law, respond to regulators or authorities, obtain professional advice and manage insurance or disputes. The lawful bases are legal obligation and legitimate interests in protecting the company and others.

​

6. Personalised products and information about other people

Only a person aged 18 or over may place an order, make a payment, submit product personalisation or make a booking.

When you order a personalised product, you may provide information about another person, including a child. You confirm that you are their parent or legal guardian, or that you have permission or another lawful authority from the parent or guardian to provide the information.

​

Please provide only the information needed to create and deliver the product. Where possible, provide a child's age rather than their full date of birth. Do not include medical or disability information, school details, religious information or other sensitive information in a personalisation field. Information entered in Wix personalisation fields forms part of the Wix order record and may appear on an order confirmation, receipt or invoice. It is used to create, process, fulfil and deliver the order.

​

Where Wix embeds personalisation information in the order or transaction record, that information may remain within the retained record even though every personalisation detail is not itself required for accounting. The record may be kept for six years from the end of the company's financial year to which it relates, or longer where law, an HMRC enquiry or a legal dispute requires it. Separate working copies

and uploads are deleted sooner where they are no longer needed.

Access is restricted and information is shared only with service providers who need it to fulfil the order or meet legal obligations.

 

7. Children and young people

The website may be viewed by people of any age. A person under 18 may send a basic enquiry, but must not place an order, make a payment, submit personalisation or make a booking. An adult, parent or guardian, school or organisation must make purchases and bookings involving children.

​

Our email newsletter is intended for people aged 16 or over. We do not knowingly send direct marketing to children under 16.

If a school or organisation books a group containing children, it is responsible for having the necessary authority and permissions to provide participant information. We ask it to provide only the minimum information needed.

If we learn that information has been submitted by a child inappropriately, we may delete it and ask an adult to contact us.

​

8. Payments

When online payments are enabled, payment information will be processed by the payment option shown at checkout. Depending on the options actually enabled, providers may include Wix Payments, PayPal, Stripe, Apple Pay, Google Pay and the relevant card networks or banks.

These providers process payment information under their own privacy terms and security requirements. We normally receive confirmation, payment status, amount, limited payer details and a transaction reference, but not your complete card number or card security code. Only the payment providers displayed at checkout apply. We will review this notice when payment methods change.

​

9. Who we share information with

We may share the minimum information necessary with:

•  Wix.com, which hosts the website and may provide forms, contacts, inbox, store, order, invoice, booking, email-marketing, analytics, security and customer-management functions.

•  Google, where Google Analytics, Search Console, Gmail or Google Drive is used.

•  Adobe and other software used to create, store or deliver artwork and design files.

•  The payment provider, bank and card network selected at checkout.

•  Royal Mail or another delivery provider used to send a physical product in the United Kingdom.

•  Our accountant, bookkeeper, insurer, IT support, legal advisers and other professional advisers where needed.

•  A school, organisation or venue where necessary to administer its booking.

•  HMRC, Companies House, regulators, courts, law-enforcement bodies or other authorities where required or permitted by law.

​

We do not sell personal information or provide it to unrelated organisations for their own marketing.

Service providers must use information only for the agreed service or under their own stated legal responsibuilities.

​

10. Wix and international processing

WHERE FOR ART NOW? LTD is the controller of information collected for Kellyanne Studio. Wix.com generally acts as a processor when it handles website-visitor and customer information on our instructions.

Information may be stored or processed through Wix Forms, Contacts, Inbox, Stores, Orders, Invoices, Bookings, Email Marketing, Analytics and related features when those features are used.

Wix and its approved sub-processors may process information in the United Kingdom, European Economic Area and other locations, including the United States, Israel, South Korea and Taiwan. Google, Adobe, payment providers and other technology suppliers may also process information internationally.

Where information is transferred outside the United Kingdom, we use providers that rely on a lawful transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, approved contractual clauses, or another safeguard permitted by UK data protection law.

More information is available in the Wix Privacy Policy at https://www.wix.com/about/privac and Wix Data Processing Agreement at https://www.wix.com/about/privacy-dpa-users.

​

11. Email marketing

Newsletter and “keep me updated” sign-ups use a separate, optional and unticked choice. The wording shown at the point of sign-up explains whether the person is agreeing to general email marketing or updates about a particular product, service or launch. We keep a record of when and how consent was given and what the person was told at the time.

​

Every marketing email will identify the sender and provide an unsubscribe method. If you unsubscribe, we will stop the relevant marketing and may keep the minimum information needed on a suppression list so that we do not contact you again by mistake. We do not add someone to a marketing list merely because they sent an enquiry, placed an order or made a booking.

​

​​​​​​​