Privacy policy
Last updated 17 October 2026. This explains what personal information this website collects, why, who else handles it, how long it is kept, and your rights.
Who I am
This website is run by Kenneth Gould, an artist in Millport, Scotland. I am responsible for the personal information described here. If you have any question about it, email mail@kennethgould.co.uk.
What I collect, and why
- When you order: your name, billing and delivery address, email address, phone number, what you bought and how you paid. I use it to take payment, deliver or arrange collection, keep in touch about your order, and keep the records the law requires. Your card details go to Stripe or PayPal and never reach this website.
- Pet portrait photographs: the photographs you upload are used only to paint your portrait. They are stored privately, outside the public part of the website, and only you and I can view them.
- Messages: when you use the contact form, your name, email address and message are emailed to me and stored on the website so I can reply.
- Accounts: if you create an account, your login details and order history are kept with it.
- Visits: the website counts which pages are viewed and which website a visitor came from, using Koko Analytics. It uses no cookies and does not store your IP address or anything else that identifies you, and the information stays on this website’s own server.
I do not sell your information, and I do not share it with anyone for marketing.
Who else handles it
- IONOS hosts this website and its email.
- Stripe and PayPal take payments. Their payment buttons and fraud checks load on the shop and checkout pages, and they handle your payment details under their own privacy policies.
- Google reCAPTCHA protects the contact form from spam. Google receives information about your browser and how you use the form.
- Google Maps shows where I am on the contact page. When the map loads, Google receives your IP address and information about your browser, and may set its own cookies.
- SiteLock supplies the security badge at the bottom of each page, so your browser loads that image from SiteLock.
- Couriers receive your name and delivery address to deliver your order.
Some of these companies may process information outside the UK, under their own safeguards.
Cookies
The shop uses cookies only to remember your basket and keep you logged in. Stripe and PayPal set cookies to prevent fraud when you pay. The map on the contact page comes from Google, which may set its own cookies. The SiteLock security badge at the bottom of each page may set its own cookie too. The visitor counting uses no cookies.
How long it is kept
- Orders are kept for as long as HMRC requires me to keep business records.
- Photographs: Photographs uploaded for a portrait that is never ordered are deleted automatically after 30 days. Photographs for an order are deleted automatically 6 months after the order is completed (or cancelled).
- Visit counts are kept for three years and then deleted automatically.
- Messages sent through the contact form are kept on the website and in my mailbox until I delete them, or until you ask me to.
- Accounts are kept until you ask me to delete yours.
Keeping it safe
The website uses an encrypted (HTTPS) connection, payments are handled by Stripe and PayPal, and portrait photographs are kept outside the public part of the website and can only be opened through a private link.
Your rights
You have the right to ask for:
- information about how your personal data is processed
- a copy of that personal data
- anything inaccurate in your personal data to be corrected immediately
You can also:
- raise an objection about how your personal data is processed
- request that your personal data is erased if there is no longer a justification for it
- ask that the processing of your personal data is restricted in certain circumstances
To do any of these, email mail@kennethgould.co.uk. If you are unhappy with how I have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.
Children
This website is not designed for, or intentionally targeted at, children 16 years of age or younger. I do not intentionally collect or keep information about anyone under the age of 16.
Changes to this policy
If this policy changes, the date at the top of this page will change too.