What we collect, why, and what we do not do with it. Controller: Humax Global Ltd (14920614), 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Contact: info@humaxart.com.
What we collect
To fulfil an order: name, delivery address, email, phone, what you bought, and the personalisation text you supplied. Payment is processed by Stripe or PayPal; we never see your card number. To reply to a message: whatever you send us. To run the site: server logs and, with your consent, analytics.
Why (legal bases)
Performing the contract with you (orders, delivery, returns); our legitimate interest in running and protecting the site and in asking you for a review after delivery; your consent for analytics and marketing cookies; legal obligations (tax records, seven years).
Who receives it
Our carrier (name, address, phone — to deliver), Stripe and PayPal (payment), our email provider, and our hosting provider. Personalisation text goes to the studio that cuts it. We do not sell personal data.
International transfers
Order data is processed in the UK, the EU and Türkiye (our studio). Transfers outside the UK/EEA rely on standard contractual clauses.
Cookies
Essential cookies run the cart and checkout. Analytics and advertising cookies load only after you accept them in the banner; you can change your choice at any time via the cookie settings link in the footer.
Your rights
Access, correction, deletion, restriction, portability and objection, and withdrawal of consent — email info@humaxart.com. You may complain to the UK ICO or your local EU authority. California residents have the rights described in the CCPA; we do not sell personal information.
Retention
Order records: 7 years (tax). Messages: 2 years. Analytics: 14 months.
Last updated 13 September 2026.
