Privacy policy

Privacy Policy

Kerto Art

Last updated: 18 July 2026 

Privacy and online safety matter to us. This policy explains what personal information Kerto Art collects about you, why we collect it, and how we use, store and protect it. It also sets out your rights and how to contact us if you have any questions or concerns.

Kerto Art is a business based in and operated from the United Kingdom. This policy, and our processing of your personal data, is governed by United Kingdom law, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Data (Use and Access) Act 2025 (which is amending UK data protection law on a phased basis through 2025 and 2026), and the Privacy and Electronic Communications Regulations 2003 as amended (“PECR”). The United Kingdom left the European Union, and the EU General Data Protection Regulation (“EU GDPR”) does not apply to Kerto Art. Where we refer to data protection law in this policy, we mean UK data protection law.

1. Purpose, lawful basis and consent for collection

Kerto Art collects, stores, processes and, where necessary, transmits personal data in order to provide our products and services to customers. This includes marketing our products, processing customer orders, providing customer support, and carrying out related business activities such as dealing with suppliers, job applicants and general administration.

We only process your personal data where we have a lawful basis to do so under the UK GDPR. Depending on the circumstances, this may be because processing is necessary to perform a contract with you (for example, to fulfil an order), because you have given your consent (for example, to receive marketing emails), because we have a legitimate business interest in doing so (for example, preventing fraud), or because we are required to by law (for example, for tax and accounting purposes).

By providing personal information to Kerto Art in any of the ways described in this policy, you confirm that you are authorised to provide that information and that you accept this privacy policy.

Kerto Art collects a range of information about you through your activity on our website, by email, over the telephone, through customer support, in person, or at trade shows. This information may include:

  • Name
  • Organisation
  • Address
  • Phone number
  • Email address
  • IP address
  • Username
  • Credit or debit card details

We will not collect special category (sensitive) data about you without your explicit consent.

Kerto Art does not carry out any automated decision-making in relation to our services, other than the use of third-party fraud-checking services, which may automatically decline a credit or debit card transaction.

Kerto Art does not knowingly collect data relating to minors, as defined under UK law. Minors are not permitted to use Kerto Art’s services or to interact with us as a corporate entity.

Kerto Art may contact you from time to time by email about service-related matters, such as billing, product support and delivery logistics.

2. Data retention

We will keep your personal information for as long as you remain a customer of Kerto Art.

After you stop being a customer, we may keep your data for a further period so that we can respond to any questions or complaints and comply with our legal and accounting obligations. We do not keep personal data for longer than is necessary for these purposes.

3. International data transfers and the use of data processors

Kerto Art will not share your data with a third party that is not directly associated with the provision of our services, without your explicit consent.

Since the United Kingdom left the European Union, transfers of personal data outside the UK are governed by the UK’s own international data transfer regime rather than EU law. Kerto Art will not transfer your personal data outside the United Kingdom unless an adequate level of protection is in place, for example because the destination country benefits from UK adequacy regulations, because appropriate safeguards are used (such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses), because Binding Corporate Rules apply, or because another mechanism recognised by the Information Commissioner’s Office (ICO) is in place. Where none of these apply, we will only make the transfer with your explicit consent.

We use several third-party organisations to help us deliver our services to customers. The following list is not exhaustive, but sets out the main third parties (data processors) to which we typically transfer personal data, where necessary for the purposes described:

  • Signed For Couriers – delivery and logistics
  • Mailchimp – email marketing:
  • Google – email, internal document management, analytics, advertising and marketing
  • PayPal, Inc. – payment processing and fraud prevention
  • Meta Platforms, Inc. (Facebook) – marketing

By interacting with Kerto Art as described in this policy, you consent to this transfer and use of our data processors and their sub-processors, and to transfer to any other appropriate third-party data processor for the purposes of delivering our services and managing our customer relationships.

4. Confidentiality and security of processing

Kerto Art uses appropriate technical and organisational security measures, within our sphere of responsibility, to maintain an appropriate level of confidentiality and integrity for your personal data.

If you have a concern about a possible security incident or data breach, please email info@kerto.art.

5. Cookies

Cookies are small text files stored in your web browser’s memory. They help website providers understand how people use a website, remember a user’s login details, and store website preferences. We use cookies and similar technologies to help ensure our services function properly, prevent fraud and other harm, and analyse and improve our services, in accordance with this policy and with PECR.

Where cookies are not strictly necessary for the operation of our website, we will ask for your consent before placing them on your device, and you can withdraw that consent at any time. Some cookies used purely for first-party statistical or research purposes to improve the website may be used without consent, where permitted under PECR as amended by the Data (Use and Access) Act 2025.

5a. How we use cookies

We review our use of cookies periodically as we improve or add to our services, but we generally use cookies for the following purposes:

  1. To operate our services. Some cookies are essential to the operation of our website and services. We use these cookies in a number of ways, including:
  • Authentication – to remember your login state so you do not have to log in again as you navigate our site.
  • Fraud prevention and detection – to help monitor for and detect potentially harmful or illegal use of our services.
  • Site features and services – to remember what products are in your basket during your shopping experience.
  1. To analyse and improve our services. Cookies help us understand how to make our website and customer service work better for you, including how visitors reach our website and where improvements are needed.

iii. For better advertising. Cookies help us provide more effective advertising on our website, for example by limiting how many times you see the same advertisement or by measuring how adverts are viewed and clicked.

5b. How we use other technologies

  1. Pixel tags. Pixel tags (also known as web beacons or clear GIFs) may be used with some services to track user actions (such as email opens), measure the success of marketing campaigns, and compile statistics on usage and response rates.
  2. Third-party analytics. We use Google Analytics, which uses cookies and similar technologies, to collect and analyse information about the use of our services and to report on activity and trends. This service may also collect information about the use of other websites, apps and online resources. To help protect your privacy, IP addresses and other personally identifiable information are anonymised.

5c. How to manage cookies

Your web browser may allow you to change your cookie preferences. Please consult your browser’s help section, or follow the links below, to understand your options. Please note that if you disable cookies, some features of our website or services may not work as intended.

 6. Advertising

We may use third-party advertising companies to serve advertisements for goods and services that may interest you when you access our website, based on data relating to your access to and use of our website on any of your devices. These companies may place or recognise a unique cookie, or similar tracking technology, on your browser (including through the use of pixel tags). They may also use these technologies, together with data collected about your online use, to recognise you across devices, such as a mobile phone and a laptop, and to make decisions about the advertisements you see. For more information about this practice, and to learn how to opt out of behavioural advertising delivered by Network Advertising Initiative member companies on desktop and mobile browsers, please visit the Network Advertising Initiative and Digital Advertising Alliance websites.

You may also download the AppChoices app to opt out of behavioural advertising in mobile apps. To understand and improve the effectiveness of our advertising, we may use web beacons, cookies and other technologies to identify that you have visited our website or seen one of our advertisements, and we may share that data with one or more third-party advertising networks.

The data we share may include the time and date of your visit, pages viewed, links clicked, and other information that does not disclose your real-world identity. Those advertising networks may recognise the web beacon or cookie associated with your visit to our website when you visit other websites on which they serve advertising, and may make decisions about the advertisements you see based on this information.

7. Email marketing

Our newsletters contain news, offers and details of new product launches from Kerto Art. We send newsletters no more than once or twice a month, and you can unsubscribe at any time using the unsubscribe link in the footer of each newsletter. If you have any questions, please email info@kerto.art.

8. Your rights

Under UK data protection law, you have a number of rights in relation to your personal data. These include the right to:

  • Be informed about how your data is collected and used
  • Access a copy of the personal data we hold about you
  • Request that inaccurate personal data be corrected
  • Request that your personal data be erased, in certain circumstances
  • Restrict how we use your personal data, in certain circumstances
  • Receive your personal data in a portable format, in certain circumstances
  • Object to our use of your personal data, including for direct marketing
  • Ask us not to process your personal data for marketing purposes

You have the right to ask us not to process your personal data for marketing purposes. We will usually tell you, before we collect your data, if we intend to use it for marketing or to disclose it to a third party for marketing purposes. You can exercise your right to prevent this by checking the relevant boxes on the forms we use to collect your data, or at any time by contacting us using the details in section 10 below.

If you are unhappy with how we have handled your personal data, you also have the right to complain to the UK’s independent data protection regulator, the Information Commissioner’s Office (ICO). The ICO can be contacted at ico.org.uk or by telephone on 0303 123 1113. We would, however, welcome the opportunity to address your concerns directly before you approach the ICO, so please contact us first using the details below

9. Online sales and your consumer rights

Where you purchase goods from us through our website, your order is also governed by the Consumer Rights Act 2015 and the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013, which set out your rights regarding the quality and description of goods, pre-contract information, and your right to cancel certain orders within a cooling-off period. Full details of these rights, including our delivery, returns and cancellation arrangements, are set out in our Terms and Conditions, Delivery and Returns pages.

10. Get in touch

If you have any questions about this policy, wish to exercise any of the rights described above, or wish to raise any other data protection matter, such as a subject access request or a concern about the accuracy of the data we hold, please contact us at info@kerto.art or by post at Kerto Studio, 356 Reading Road, Winnersh, Wokingham, Berkshire, RG41 5EJ, United Kingdom.

We monitor this email address during working hours and aim to reply within 7 working days.