PRIVACY POLICY
Last Updated: 16.04.2026
- IMPORTANT INFORMATION AND WHO WE ARE
1.1 Purpose of this Privacy Policy
This Privacy Policy explains how Milton Cordoba (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit https://milhouseart.com/ (“the Website”). This includes when you browse our portfolio, sign up for newsletters, or purchase goods from our shop.
1.2 Controller
Milton Cordoba is the “Data Controller” responsible for your personal data. This means we decide how and why your data is processed.
1.3 Contact Details
If you have any questions about this Privacy Policy or wish to exercise your legal rights, please contact us using the details below:
路 Full name of legal entity: Milton Cordoba
路 Email address: miltonmurales@gmail.com
路 Postal address: 6 Hoopers Walk, Longwell Green, Bristol BS30 9DZ
1.4 Changes to the Privacy Policy
We may update this policy from time to time. We will notify you of significant changes via email or a prominent notice on the Website. Please check back regularly to stay informed.
1.5 Third-Party Links
The Website may include links to third-party websites (e.g., Instagram, payment gateways). Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. Please read the privacy policy of every website you visit.
—
2. THE DATA WE COLLECT ABOUT YOU
We may collect, use, store, and transfer different kinds of personal data about you which we have grouped together as follows:
Category and Examples
Identity Data: First name, last name, username or similar identifier.
Contact Data: Billing address, delivery address, email address, and telephone number.
Financial Data: We do not store your payment card details. Payments are processed securely via third-party providers (e.g., Sumup) who tokenise your information. We only receive confirmation of transaction ID and amount paid.
Transaction Data: Details about products you have purchased from us, order numbers, and fulfilment status.
Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, operating system, and device information.
Usage Data: Information about how you use our Website (pages viewed, time spent on site, navigation paths).
Marketing Data: Your preferences in receiving marketing communications from us.
2.1 Special Categories of Data
We do not collect any “Special Categories of Personal Data” about you (this includes details about your race or ethnicity, religious beliefs, health information, or biometric data).
—
3. HOW IS YOUR PERSONAL DATA COLLECTED?
We use different methods to collect data from and about you:
路 Direct Interactions: You provide Identity, Contact, and Financial Data when you:
路 Create an account on our site (if applicable).
路 Place an order for a T-shirt or other goods.
路 Contact us via email or our contact form regarding a complaint or query.
路 Sign up for our newsletter.
路 Automated Technologies: As you browse the Website, we automatically collect Technical and Usage Data using cookies, server logs, and similar technologies. Please see our Cookie Policy in Section 11 for further details.
路 Third Parties: We may receive Technical Data from analytics providers such as Google Analytics (based outside the UK) and payment confirmation from processors such as PayPal or Sumup.
—
4. HOW WE USE YOUR PERSONAL DATA (LEGAL BASIS)
Under UK GDPR, we must have a lawful basis to process your data. The table below explains what we do, why we do it, and the legal ground we rely on.
Purpose / Activity Type of Data Lawful Basis for Processing
To process and deliver your order (including managing payments, printing labels, and shipping T-shirts) Identity, Contact, Financial, Transaction Performance of a Contract with you.
To manage our relationship with you (notifying you of delivery updates or changes to Terms) Identity, Contact, Marketing Performance of a Contract; Necessary for Legitimate Interests (to keep records updated).
To handle customer service and complaints Identity, Contact, Transaction Performance of a Contract; Necessary for Legitimate Interests (to resolve issues).
To send you marketing emails / newsletters (only where you have opted-in) Identity, Contact, Marketing Consent. (You can withdraw consent at any time via the ‘unsubscribe’ link).
To administer and protect our business and Website (troubleshooting, security, fraud prevention) Identity, Contact, Technical Necessary for Legitimate Interests (running our business safely).
To use data analytics to improve our Website Technical, Usage Necessary for Legitimate Interests (defining types of customers, keeping the site relevant).
4.1 Marketing and Opting Out
We will only send you marketing emails if you have specifically opted in. You have the right to withdraw consent at any time by clicking the “unsubscribe” link at the bottom of any marketing email or by contacting us directly.
—
5. DISCLOSURES OF YOUR PERSONAL DATA
We may share your personal data with the following categories of third parties for the purposes set out in the table above:
路 Service Providers: We use trusted third parties to help us run the Website and fulfil orders. These include:
路 Print-on-Demand / Fulfilment Partners: Shirt Tales, GoCustom, I Dress Myself, 212 Productions to manufacture and ship your T-shirt or art prints.
路 Payment Processors: Sumup (to process secure payments).
路 Courier Services: Royal Mail, Inpost, Evri (to deliver your parcel).
路 Website Hosting & Email: WordPress Host
路 Professional Advisers: Lawyers, bankers, auditors, and insurers where necessary.
路 Legal & Regulatory Authorities: Where we are required by law to report data (e.g., HMRC for tax records).
We require all third parties to respect the security of your personal data and to treat it in accordance with UK law. We do not allow our third-party service providers to use your personal data for their own marketing purposes.
—
6. INTERNATIONAL TRANSFERS
Some of our third-party service providers (e.g., print-on-demand services, email marketing platforms, or analytics providers) may be based outside the United Kingdom. If they transfer data to a country that does not have an “adequacy decision” from the UK Government, we ensure that specific contracts (Standard Contractual Clauses) approved for use in the UK are in place to protect your data.
By placing an order, you acknowledge that your Contact and Transaction Data may be transferred outside the UK for the purpose of fulfilling your order.
—
7. DATA SECURITY
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.
路 Financial Data: We do not store credit/debit card details. All payment pages are secured using industry-standard SSL encryption and handled directly by our payment gateway.
路 Access: Access to your personal data is limited to only those employees, agents, or contractors who have a business need to know (e.g., to print a shipping label).
We have procedures in place to deal with any suspected personal data breach and will notify you and the Information Commissioner’s Office (ICO) where we are legally required to do so.
—
8. DATA RETENTION (HOW LONG WE KEEP YOUR DATA)
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for.
路 Order Information: We retain records of transactions for 6 years from the end of the financial year in which the transaction occurred. This is to comply with UK tax law (HMRC requirements) and to defend against any potential legal claims.
路 Marketing Consent: We retain proof of consent for direct marketing indefinitely until you unsubscribe, after which we will retain a “suppression list” entry to ensure we do not email you again accidentally.
路 Analytics Data: Anonymised usage data may be kept indefinitely for business improvement purposes.
—
9. YOUR LEGAL RIGHTS
Under the UK GDPR, you have important rights regarding your personal data. If you wish to exercise any of these rights, please contact us at miltonmurales@gmail.com.
Your Right and What it means
Right to be Informed: You have the right to know how we use your data (this policy).
Right of Access: You can request a copy of the personal data we hold about you (free of charge in most cases).
Right to Rectification: You can ask us to correct incomplete or inaccurate data.
Right to Erasure: Also known as “The Right to be Forgotten.” You can ask us to delete your data where there is no compelling reason for us to keep it (e.g., we cannot delete order data required by HMRC).
Right to Restrict Processing: You can ask us to suspend the use of your data while we investigate a query.
Right to Data Portability: You can request a copy of your data in a machine-readable format to transfer to another service.
Right to Object: You can object to processing based on “Legitimate Interests” (e.g., direct marketing).
9.1 No Fee Usually Required
We will not charge a fee to exercise your rights unless your request is clearly unfounded or excessive.
9.2 Response Time
We try to respond to all legitimate requests within one month. Occasionally it may take longer if your request is complex; we will keep you notified in this instance.
—
10. COOKIES
Our Website uses cookies to distinguish you from other users and to improve your browsing experience.
路 Strictly Necessary Cookies: Required for the operation of the shopping cart and checkout process. The website cannot function without these.
路 Analytical/Performance Cookies: These allow us to see how visitors move around the site (e.g., Google Analytics). We only use these with your explicit consent.
路 Functionality Cookies: These remember choices you make (e.g., whether you closed a pop-up banner).
10.1 Consent
When you first visit our site, you will see a Cookie Banner allowing you to accept or reject non-essential cookies. You can also change your browser settings to refuse all cookies; however, please note that disabling necessary cookies may prevent you from completing a purchase.
—
11. COMPLAINTS
We are committed to protecting your privacy. If you have any concerns about how we have handled your data, please contact us first at miltonmurales@gmail.com so we can investigate and resolve the issue.
However, you also have the right to lodge a complaint at any time with the UK’s supervisory authority for data protection issues:
The Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113
Thank you for visiting our website
Milton Cordoba