Privacy Policy

Last updated: 2 September 2026

1. Who we are

Artmoop is the operator of the Artmoop digital personalised greeting-card service at artmoop.com. For the personal information described in this policy, Artmoop is generally the data controller. You can contact us about privacy or data-protection matters through our Contact page.

2. Information we collect

Depending on how you use Artmoop, we may process your name, email address, account details, billing and order information, transaction references, card selections, personalisation text, sender details, recipient details supplied for delivery, messages you send to us, and technical information such as IP address, browser/device information, security logs and cookie identifiers.

When a customer asks us to deliver a greeting card to another person, we may receive that recipient's name, email address and other delivery information from the customer rather than directly from the recipient. Customers should only provide recipient information they are entitled to use for sending the greeting.

3. Why we use personal information

We use personal information to operate the website; create and manage accounts; process purchases; create, personalise and deliver digital greeting cards; provide private card links; send service and order communications; provide customer support; prevent fraud, spam and misuse; diagnose technical problems; maintain security; administer refunds or disputes; and meet legal, tax and accounting obligations.

4. Our lawful bases

Where UK data-protection law applies, we rely on the lawful basis appropriate to each activity. This will commonly be contract where information is needed to provide a product or service you request; legal obligation where records must be kept or disclosed by law; and legitimate interests where reasonably necessary to secure, operate and improve Artmoop, prevent abuse, handle enquiries and protect our business and users, provided those interests are not overridden by your rights. Where an activity requires consent, we will ask for it and you may withdraw that consent for future processing.

5. Payments

Payments may be handled by third-party payment providers. Payment providers may collect and process payment-card and authentication information under their own privacy terms. Artmoop may receive transaction identifiers, payment status and limited billing information needed to administer an order, but we do not need to receive or store your complete payment-card number when the payment provider handles it.

6. Greeting-card recipients

If you receive an Artmoop greeting card, your delivery details may have been supplied by the person sending the card. We use those details to deliver and operate the greeting-card service, protect the service from misuse and deal with support or security issues. We do not treat a recipient's email address as permission to send unrelated marketing.

7. Cookies and similar technologies

Artmoop may use cookies and similar storage technologies for essential functions such as accounts, sessions, shopping baskets, preferences, security and fraud prevention. Where non-essential cookies or similar technologies are used and consent is legally required, they should not be set until the required choice has been obtained. Browser settings can also be used to control cookies, although blocking essential cookies may prevent parts of the site from working correctly.

8. Who we share information with

We may share only the information reasonably necessary with service providers that support hosting and website infrastructure, payment processing, email or message delivery, security, backups, analytics where enabled, and professional or technical support. We may also disclose information where required by law, to establish or defend legal rights, or to investigate fraud, abuse or security incidents.

We do not sell personal information to advertisers.

9. International processing

Some suppliers may process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we take reasonable steps to use an appropriate lawful transfer mechanism or another permitted safeguard.

10. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, fraud-prevention and dispute-resolution requirements. Different records have different retention periods. Account information may be retained while an account remains active; order and transaction records may be retained for the period needed for tax, accounting and legal obligations; security logs are normally kept for a shorter operational period; and contact enquiries are retained only as long as reasonably needed to resolve and document the enquiry.

Personalised card and delivery information may be retained while needed to provide the card experience and associated customer support, after which it may be deleted or anonymised subject to legitimate legal or security requirements.

11. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No internet service can guarantee absolute security, so customers should use a strong unique password and keep private card links and account credentials secure.

12. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you rights to ask for access to your personal information, correction of inaccurate information, deletion, restriction of processing, portability of certain information, or to object to certain processing. Where processing is based on consent, you may withdraw consent without affecting processing that was lawful before withdrawal.

To exercise a right, use our Contact page. We may need to verify your identity before acting on a request.

13. Complaints

Please contact us first if you have a privacy concern so we have an opportunity to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO) if you believe your personal information has been handled unlawfully.

14. Children

Artmoop is not intended to knowingly collect personal information from children for account or purchasing purposes without an appropriate lawful basis. If you believe a child has provided personal information inappropriately, please contact us.

15. Links and third-party services

The website may contain links to third-party websites or services. Their handling of personal information is governed by their own privacy notices, and Artmoop is not responsible for the privacy practices of independent third parties.

16. Changes to this policy

We may update this Privacy Policy when our services, suppliers or legal obligations change. The current version will be published on this page with its updated date. Where a change materially affects how we use personal information, we will take reasonable steps to bring it to users' attention where required.

17. Contact us

For privacy questions, requests or complaints, please use the Artmoop Contact page.