Legal

Privacy Policy

Last updated: 24 September 2026

This page is maintained by Alex Cuthberston trading as So Laid Back to explain how we collect, use and look after personal data on this website. It is provided as editable studio information and should not be taken as independent legal advice.

Who we are

For data protection purposes, the data controller is Alex Cuthberston trading as So Laid Back. You can contact us about privacy matters at alex@solaidbackuk.com.

What personal data we collect

We may collect the following information about you:

  • Enquiry details: name, email address, phone number (if provided), and the contents of your message when you contact us or submit a commission brief.
  • Commission information: project specifications, preferred medium, budget range, space details and any reference images you upload.
  • Technical data: IP address, browser type and version, device information, operating system, and the pages you view on the site.
  • Cookies and usage data: information collected through cookies and similar technologies to help us assess how the website performs and where we can improve the experience.

How we use your data

We use your personal data for the following purposes:

  • To respond to your enquiry and discuss potential commissions.
  • To prepare concepts, quotes and contracts for commissioned work.
  • To process purchases and deliver artwork.
  • To analyse website traffic and behaviour so we can improve the site’s performance, content and usability.
  • To keep records required for tax, accounting and legal obligations.

Legal basis for processing

Under UK data protection law, we rely on the following lawful bases:

  • Contract: processing necessary to enter into or perform a contract with you, such as fulfilling a commission or sale.
  • Legitimate interests: responding to enquiries, running the studio, and improving the security and performance of the website.
  • Consent: where you have agreed, for example to non-essential analytics cookies.
  • Legal obligation: keeping records for tax and accounting purposes.

Cookies and analytics

We use cookies and similar technologies to understand how visitors use the site, which pages are most useful, and how we can improve performance. Some cookies are essential for the site to function, while others help us analyse behaviour and are only set with your consent.

The types of cookies we use include:

  • Essential cookies: required for the website to work, such as security and session management.
  • Performance and analytics cookies: help us measure traffic, understand user journeys and identify areas for improvement. These cookies collect information in an aggregated or pseudonymised form.

You can manage your cookie preferences at any time. Where non-essential cookies are used, we will ask for your consent before placing them on your device.

Payments

Purchases of prints, originals and commission deposits are processed by Stripe. Your card details never touch our servers and are handled entirely by Stripe under its own privacy and security terms. We only receive confirmation that the payment has been made.

Who we share data with

We do not sell your personal data. We only share it with trusted service providers who help us run the website and the studio, such as:

  • Our hosting and infrastructure providers.
  • Our payment processor, Stripe.
  • Analytics providers that help us assess website performance.

These providers are contractually required to keep your data secure and only process it for the purposes we specify.

International transfers

Some of our service providers may process data outside the United Kingdom. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved under UK data protection law, to protect your information.

How long we keep your data

We keep personal data only for as long as necessary:

  • Enquiry records are kept for up to 12 months after our last contact, unless you ask us to delete them sooner.
  • Commission and sales records are kept for up to six years after a project is completed to meet tax and accounting requirements.
  • Analytics and cookie data are retained in line with the policies of the analytics providers we use, typically no longer than 26 months.

Your data protection rights

Under UK data protection law, you have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct inaccurate or incomplete information.
  • Request erasure of your personal data in certain circumstances.
  • Request restriction of processing or object to processing.
  • Receive your data in a structured, commonly used format.
  • Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, please email us at alex@solaidbackuk.com. We will respond within one month.

Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss or misuse. Reference images and commission briefs are stored in private, access-controlled storage and are only visible to the studio.

Complaints

If you are unhappy with how we handle your personal data, please contact us first at alex@solaidbackuk.com. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practice or legal requirements. The latest version will always be available on this page.

Contact us

For any privacy questions, data requests or cookie concerns, please write to alex@solaidbackuk.com.