Privacy Policies

Last updated: 26 August 2026

This Privacy Policy explains how LAURA AVERY, SIREN 943 375 865, collects and uses personal data when you visit or use lauraavery.com (the “Website”).

LAURA AVERY is the data controller responsible for personal data collected through the Website.

1. What personal data we collect

We only collect personal data that is necessary for the purposes described below.

Contact and commission enquiries

When you contact me through the Website, including through a commission enquiry form, I may collect information such as your name, email address and any information you choose to provide about your enquiry or project.

This information is used only to respond to your enquiry and communicate with you about your request.

Commission enquiries are not retained as a separate database. Information may remain in ordinary correspondence for as long as reasonably necessary to manage the enquiry and any resulting communication.

Purchases

When you purchase an original artwork, print or other product through the Website, Squarespace Commerce may collect information necessary to process your order, such as your name, billing and delivery address, email address, telephone number where required, order details and payment-related information.

Payment information is processed securely by Stripe. LAURA AVERY does not have access to or store your full payment card details.

Order information is used to process and fulfil your purchase, arrange delivery, communicate with you about your order, manage returns or customer service, and comply with applicable legal and accounting obligations.

Newsletter

If you choose to subscribe to my newsletter, your email address and related subscription information are processed through Substack.

Your information is used to send you the newsletter and related communications that you have requested. You can unsubscribe at any time using the unsubscribe link included in each newsletter.

2. How we use your personal data

Your personal data may be processed for the following purposes:

  • responding to enquiries and commission requests;

  • communicating with you about a potential or existing project;

  • processing and fulfilling purchases;

  • arranging delivery of purchased artwork or prints;

  • managing customer service, returns and related requests;

  • meeting legal, tax and accounting obligations;

  • sending the newsletter where you have subscribed to receive it;

  • maintaining the security and functionality of the Website.

We do not sell, rent or otherwise trade your personal information.

3. Legal bases for processing

Depending on the circumstances, your personal data is processed on one or more of the following legal bases under the General Data Protection Regulation (GDPR/RGPD):

  • Performance of a contract — for example, processing and delivering an order you have placed.

  • Steps taken at your request before entering into a contract — for example, responding to a commission enquiry.

  • Legal obligation — where information must be retained to comply with accounting, tax or other legal requirements.

  • Consent — for example, where you voluntarily subscribe to the newsletter or where consent is required for certain cookies or similar technologies.

  • Legitimate interests — where necessary to operate, secure and improve the Website and manage ordinary business communications, provided that these interests do not override your rights and freedoms.

4. Third-party service providers

The Website is hosted and operated using Squarespace. Squarespace may process personal data on our behalf in connection with hosting, website functionality, forms, e-commerce and related services.

Payments are processed by Stripe. Stripe processes payment and transaction information necessary to complete purchases and provide payment services.

Our newsletter is provided through Substack, which processes subscriber information in order to deliver newsletter communications.

These providers may process personal data in accordance with their own privacy policies and applicable data protection obligations.

We do not currently use Google Analytics or other third-party analytics services to track visitors for audience measurement.

5. Cookies and similar technologies

The Website may use cookies and similar technologies provided by Squarespace or required for the Website to function, including to maintain basic website functionality, security and shopping-cart or checkout functionality.

Some cookies or similar technologies may require your consent under applicable French and European law. Where required, consent will be requested before such technologies are used.

You can also manage cookies through your browser settings.

Because the cookies used by a Squarespace website may change depending on the features and integrations enabled on the Website, this policy does not attempt to provide an exhaustive list of individual cookie names.

6. How long we keep your data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

Information relating to purchases may be retained for longer where necessary to comply with legal, tax and accounting obligations.

Newsletter information is retained by Substack for as long as you remain subscribed, unless you unsubscribe or otherwise request deletion where applicable.

Information relating to enquiries is retained only for as long as reasonably necessary to respond to and manage the enquiry and any resulting relationship.

7. Your rights

Under the GDPR and applicable French data protection law, you have rights regarding your personal data, including, where applicable:

  • the right to access your personal data;

  • the right to correct inaccurate or incomplete information;

  • the right to request deletion of your personal data;

  • the right to request restriction of processing;

  • the right to object to certain processing;

  • the right to withdraw consent where processing is based on consent;

  • the right to data portability where applicable.

To exercise your rights, or if you have questions about how your personal data is used, please contact:

LAURA AVERY
Email: [INSERT PRIVACY CONTACT EMAIL]

We will respond to requests in accordance with applicable data protection law. Under the GDPR, organisations generally have one month to respond to a request, subject to the applicable exceptions.

You also have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL), if you believe that your personal data has not been handled in accordance with applicable law.

8. Data security

Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, misuse or disclosure.

Payment transactions are handled through secure payment services provided by Stripe. We do not store full payment card details ourselves.

9. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to the Website, the services used or applicable legal requirements.

The latest version will always be published on this page with the date of the most recent update.

LAURA AVERY
SIREN: 943 375 865
Website: lauraavery.com