Privacy Policy

Privacy Policy

Last updated: 7/10-2025

This Privacy Policy explains how Commission It Limited (“CommissionIt”, “we”, “our”, or “us”) collects, uses, stores, and protects personal information of clients, artists, and website visitors (“Users”) through our website commissionit.co.uk and related services (collectively, the “Site”).

By using our Site or engaging our services, you agree to this Privacy Policy.

1. Information We Collect

Personal Identification Information

We collect personal information when Users interact with our Site or services, including when they:

  • Visit our website, create an account, or complete a commission enquiry or order form.
  • Provide details to commission or supply artwork.
  • Communicate with us by phone, email, or chat.
  • Subscribe to our newsletters or marketing updates.

We may collect the following types of information:

  • Name, address, phone number, and email address.
  • Payment information (processed via our authorised payment partners).
  • Commission details, artwork specifications, and correspondence.
  • Account credentials and communication preferences.

Non-Personal Information

We may collect non-identifying information such as browser type, operating system, device type, referral source, and website usage statistics to help improve our Site and user experience.

2. Cookies

Our Site uses cookies and similar technologies to enhance user experience, track usage, and support site functionality. Users can choose to block or delete cookies through their browser settings, though this may affect certain features or performance of the Site.

3. How We Use Your Information

We use collected data for the following purposes:

  • To manage and fulfil commissions, including communication between clients, artists, and subcontractors.
  • To process payments and issue invoices through our authorised payment partners.
  • To verify identity, prevent fraud, and comply with financial and legal obligations.
  • To send service updates, order confirmations, or important notifications.
  • To improve our Site, products, and customer experience.
  • To send marketing or promotional materials (only where you have consented or where we have a legitimate interest).

4. Sharing Your Information

We do not sell or rent your personal information. However, we may share data with the following trusted parties to provide our services:

  • Artists and subcontractors: limited information (e.g., commission details, first name, delivery address) necessary to fulfil your order.
  • Payment partners: such as GoCardless, Stripe, or other processors for Direct Debit and card payments.
  • Couriers and logistics partners: for safe delivery of artwork.
  • Professional advisers: such as accountants or legal advisers where required.
  • Regulators or law enforcement: where legally required or to protect our rights.

All third parties are required to handle data securely and only use it for legitimate business purposes consistent with this Policy.

5. Lawful Basis for Processing

We process your data under the following legal bases:

  • Contract performance — to deliver the services you request.
  • Legal obligation — to comply with accounting, tax, or regulatory duties.
  • Legitimate interest — to maintain our relationship and improve our services.
  • Consent — for marketing or promotional communications.

6. Data Storage and Security

We implement appropriate technical and organisational measures to safeguard personal data against loss, misuse, or unauthorised access.

  • All sensitive data is encrypted during transmission (SSL/TLS).
  • Access is restricted to authorised personnel only.
  • Data is stored securely within the UK or EEA where possible.

If we transfer personal data outside the UK/EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).

7. Data Retention

We retain personal information only as long as necessary for:

  • Fulfilling commissions and maintaining client relationships.
  • Meeting legal, accounting, and tax requirements.
  • Resolving disputes and enforcing agreements.

Typically, we keep client and commission data for up to six years after completion, unless required longer by law.

8. Your Rights

Under the UK GDPR, you have the right to:

  • Access your personal data.
  • Request correction or deletion.
  • Object to or restrict processing.
  • Withdraw consent for marketing communications.
  • Request data portability.

To exercise any of these rights, contact us at info@commissionit.com.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

9. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for their content or privacy practices. Please review the privacy policies of those sites before providing personal information.

For our image search and mood board services powered by Microsoft Bing, users should refer to the Microsoft Privacy Statement for details on how their data is processed by Microsoft.

10. Updates to This Policy

We may update this Privacy Policy periodically. The revised version will be posted on our Site with the updated date. Continued use of our Site or services after changes are posted constitutes acceptance of those changes.

11. Contact

If you have questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:

Commission It Limited
Email: info@commissionit.com
Website: www.commissionit.co.uk