Privacy Policy

Last updated: 8 October 2026

Pencil Ink Visions is operated by Corina Barbu. In this Privacy Policy, “I”, “me” and “my” refer to Corina Barbu, trading as Pencil Ink Visions.

This Privacy Policy explains how I collect, use, store and share personal information when you visit my website, browse my products, place an order, contact me or otherwise interact with my online store.

My store is hosted by Shopify, which provides the e-commerce platform that allows me to sell my artwork and products online.

Please read this policy carefully to understand how your personal information is handled.

1. Personal Information I Collect

The personal information I collect depends on how you interact with my website and the services you use. This may include the following categories.

Contact information: Your name, email address, telephone number, billing address and delivery address.

Order and transaction information: The products you view or purchase, your order history, payment status, delivery details, and any returns, cancellations or refund requests.

Payment information: Information needed to process your payment. Payments are processed through the payment providers available at checkout. I may receive transaction confirmations and relevant payment details, but I do not necessarily receive or store your full payment card details.

Communications: Information you provide when contacting me through email, my website contact form or other communication channels.

Account information: If you create an account, information associated with that account, such as your login details and preferences, may be collected.

Device and usage information: Depending on your settings and the technologies used on my website, information such as your IP address, browser type, device information, pages visited and interactions with the website may be collected through cookies and similar technologies.

Please avoid sending sensitive personal information unless it is necessary for your enquiry.

2. How I Collect Personal Information

I may collect personal information in the following ways:

• Directly from you: When you place an order, create an account, subscribe to communications, complete a contact form or contact me.

• Automatically through my website: Through cookies, server logs and similar technologies, depending on your privacy settings and the features enabled on the store.

• Through service providers: When Shopify and other providers process information to support payments, website functionality, order fulfilment, delivery, security or other services.

• From other sources: Where appropriate, information may be received from payment providers or other third parties involved in completing a transaction or providing a service.

3. How I Use Your Personal Information

I use personal information where necessary to operate my business and provide my products and services. This may include the following purposes.

Processing and fulfilling orders

To process payments, confirm orders, prepare and dispatch purchases, arrange delivery, handle cancellations and returns, issue refunds and provide customer support.

Communicating with you

To respond to enquiries, provide order updates, resolve issues and communicate information relevant to your purchase.

Operating and improving my website

To maintain my online store, understand how visitors use it, improve the shopping experience and manage products and services.

Marketing and promotional communications

If you choose to subscribe to marketing communications, I may use your contact details to send relevant updates, product news and promotions, subject to applicable law. You can unsubscribe from marketing emails at any time using the unsubscribe link or by contacting me.

I will not assume that placing an order automatically gives me permission to send every type of marketing communication.

Security and fraud prevention

To protect my store, identify suspicious transactions, prevent fraud and help maintain the security of customer accounts and payments.

Legal and administrative purposes

To maintain appropriate business records, comply with legal obligations, respond to lawful requests and establish or defend legal claims where necessary.

4. Legal Grounds for Processing

Where UK data protection law requires a lawful basis for processing personal information, I generally rely on one or more of the following:

• Contract: To process and fulfil your order or take steps requested by you before entering into a contract.

• Legal obligation: To comply with legal, accounting, tax or other applicable requirements.

• Legitimate interests: To operate, secure and improve my business, respond to enquiries and maintain appropriate records, where these interests do not override your rights and freedoms.

• Consent: Where consent is required, such as for certain marketing communications or non-essential cookies.

Where processing relies on consent, you can withdraw your consent at any time. This does not affect the lawfulness of processing carried out before consent was withdrawn.

5. How I Share Personal Information

I do not sell your personal information as a standalone product. However, I may share information with third parties where necessary to operate my store, fulfil orders or comply with legal obligations.

These third parties may include:

Shopify: My online store is hosted by Shopify, which processes personal information to provide the e-commerce platform and related services.

Payment providers: Payment information is processed by the payment services available at checkout to complete transactions and help prevent fraud.

Delivery and fulfilment providers: Relevant information, such as your name and delivery address, may be shared with postal services or couriers so that your order can be delivered.

Technology and service providers: Depending on the services I use, information may be processed by providers that support website functionality, security, analytics, customer communications or business administration.

Marketing providers: If I use email marketing or advertising services, relevant information may be shared with those providers where necessary and lawful.

Legal and regulatory authorities: Information may be disclosed where required by law or where necessary to protect legal rights, investigate fraud or respond to lawful requests.

Third-party providers may process personal information in accordance with their own privacy policies and applicable data protection requirements.

6. Shopify and Third-Party Services

My store is hosted by Shopify. Shopify processes personal information about your use of my store to provide and improve its services.

Information submitted through my store may be processed by Shopify and other service providers, including providers located outside the United Kingdom.

Shopify may also process information in connection with features that it provides to merchants. The purposes and responsibilities associated with those features depend on which services are enabled.

You can read more about Shopify's privacy practices here:

Shopify Consumer Privacy Policy

You can also visit Shopify's privacy portal:

Shopify Privacy Portal

If you follow a link to a third-party website, such as Instagram or TikTok, that website will handle your information according to its own privacy policy. I am not responsible for the privacy practices of websites I do not operate.

7. Cookies and Similar Technologies

My website may use cookies and similar technologies to support essential store functions, remember preferences, understand website usage and, where enabled, support analytics or advertising.

Some cookies are necessary for the website and checkout to function. Other cookies may require your consent, depending on their purpose and the applicable law.

You can review the cookie and privacy choices available on my website and adjust your browser settings to manage cookies. Disabling certain cookies may affect how parts of the website function.

For more information about the technologies used by my store, please review the cookie and customer privacy settings provided through Shopify.

8. International Transfers

Some service providers used to operate my store may process personal information outside the United Kingdom.

Where personal information is transferred internationally, I will rely on an appropriate legal transfer mechanism where required by applicable data protection law. Depending on the destination and circumstances, this may include an adequacy decision or appropriate contractual safeguards.

Further information about Shopify's international data practices is available through its privacy policy.

9. How Long I Keep Personal Information

I keep personal information only for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, providing customer support, maintaining business records, complying with legal obligations and resolving disputes.

The retention period depends on the type of information and why it was collected. For example, some transaction and accounting records may need to be retained for a period required by law.

When personal information is no longer needed, I will take appropriate steps to delete it or otherwise handle it securely, subject to any applicable legal requirements.

10. Security of Personal Information

I take reasonable steps to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no online transmission or electronic storage method can be guaranteed to be completely secure. Please avoid sending payment card details or other sensitive information through ordinary email or website contact forms.

11. Your Data Protection Rights

Under UK data protection law, you may have the right to:

• Access: Request a copy of the personal information I hold about you.

• Correction: Ask me to correct inaccurate or incomplete information.

• Erasure: Ask me to delete personal information in certain circumstances.

• Restriction: Ask me to restrict the processing of your personal information in certain circumstances.

• Objection: Object to certain types of processing, including processing based on legitimate interests and direct marketing.

• Data portability: Request a copy of certain information in a commonly used format or ask for it to be transferred to another organisation, where the legal conditions apply.

• Withdraw consent: Withdraw consent where processing relies on your consent.

These rights are subject to legal conditions and exceptions. I may need to verify your identity before responding to a request.

To exercise your rights, please contact me using the details in the Contact section below.

You can unsubscribe from marketing emails at any time by using the unsubscribe link provided in the email. This will not stop essential communications about an order you have placed.

12. Children's Privacy

My website is intended for people who are able to use its services lawfully. I do not knowingly collect personal information from children where doing so would be unlawful.

If you believe a child has provided personal information to me in circumstances where it should not have been collected, please contact me so I can review the situation and take appropriate action.

13. Complaints

If you have a concern about how I handle your personal information, please contact me first using the details below so I can try to resolve it.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

You can find information about making a complaint at:

Information Commissioner's Office

14. Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to my business, website, service providers or legal requirements.

The latest version will be published on this page, together with the date it was last updated. Where required by law, I will provide additional notice of material changes.

15. Contact

If you have questions about this Privacy Policy, how your personal information is used, or wish to exercise your data protection rights, you can contact me at:

Business: Pencil Ink Visions
Business owner: Corina Barbu
Email: pencilinkvisions@gmail.com
Website: https://pencilinkvisions.com/

For the purposes of applicable UK data protection law, Corina Barbu, trading as Pencil Ink Visions, is responsible for the personal information processed in connection with this store, subject to the separate responsibilities of Shopify and other service providers where applicable.