Privacy Policy

Diana Shaul Fine Art

Original Paintings and Drawings

Privacy Policy

Please note that we have ceased trading.

Who we are Diana Shaul Fine Art is the trading name of the partnership Diana N A Shaul & J Samantha Shaul.
Partners' full names: Diana Naomi April Shaul and Jacquie Samantha Shaul.

Our trading address is:
Diana Shaul Fine Art
c/o Market Manager (Arts and Crafts)
Jubilee Market
Jubilee Market Hall
1 Tavistock Court
The Piazza
Covent Garden

Our email address is:
Our website is:

The types of personal information we collect and how we collect it We process personal information that is provided to us directly by you, whether in person, by email or otherwise.

The information you provide to us will depend upon the situation, but typical examples are your name, your contact details, your artwork preferences, and your past, present and prospective purchases from us. You may share other information with us as well.

Where, exceptionally, we have agreed to undertake commissioned work for you, it will sometimes be the case that you will provide us with additional personal information relevant to that, for example, photographs, biographical details and anecdotes.

Very occasionally, your personal information may be provided to us by, for example, one of your friends or a member of your family (e.g. so that commissioned work may be created; so that a personal note or dedication may be added to a piece of work; because they are buying a gift for you; because they are making a purchase jointly with you; to enable the delivery or collection of an artwork; in the course of general correspondence), or someone (such as a market manager) to whom you have provided your name and contact details and requested that they arrange for us to get in touch with you.

Payment information (for example, payment card details), if applicable, is collected and processed securely by our payment service provider. They provide us with receipts for the transactions they process for us, which include limited payment information, such as the last four digits of your card. The receipts may also include other information about your transaction (e.g. artwork title).

In connection with parties such as content creators and suppliers of goods and services, we may sometimes process personal information (for example, name, contact details, business/organisation name, job title) obtained from a business website or similar publicly accessible source, your colleagues, or others who have recommended you to us.

Standard internet log information is automatically collected and analysed when you visit our website, although we do not use this to identify you.

We do not use cookies or similar technologies for storing information.

Our lawful bases for processing personal information Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing personal information are:

* we have a contractual obligation or are taking relevant pre-contractual steps;

* we (or a third party) have a legitimate interest;

* we have a legal obligation.

Why we process personal information We may process personal information:

* to make sales (including taking commissions) and deal with payments;

* to provide customer service;

* to respond to enquiries and comments;

* to create commissioned work;

* to add your personal note or dedication to a piece of work;

* to arrange for reservation, collection and delivery of our products;

* to make purchases of and obtain information about goods and services, and receive customer service, assistance and advice;

* to engage with parties such as content creators;

* to keep records of communications, sales, purchases, and payments received and made;

* to keep a record of our body of work;

* to resolve any (potential) disputes;

* to cooperate with the investigation of a transaction or an audit by our payment service provider or a third party chosen by them;

* to comply with our legal or statutory obligations;

* to establish, exercise or defend legal rights/claims;

* in connection with legal proceedings, including prospective legal proceedings;

* as part of an insurance claim;

* to protect the rights, property or safety of us, our customers or others;

* to assist with the prevention, detection or investigation of crime or fraud, and the prosecution of offenders;

* to comply when required to do so by an appropriate authority.

Please note that we may use standard internet log information to help us improve our website and for statistical purposes (e.g. monitoring levels of traffic to our website). We do not use this information to identify you.

Sharing of your personal information Some information may be processed by our service providers (e.g. website hosting, email hosting).

We may share relevant personal information (e.g. name, address) with providers of postal/courier services.

Payment information (for example, payment card details), if applicable, is collected and processed securely by our payment service provider, Zettle by PayPal. You may read the Zettle by PayPal privacy policy here:

If you request an electronic receipt, we will use the Zettle Go app to send this via email or SMS, and our payment service provider will process your email address or mobile number. You can read about how they process your contact details here:

In the event of an investigation of a transaction or an audit by our payment service provider or a third party chosen by them, it may be necessary for us to share personal information.

In some instances our service providers may transfer your personal information to a country outside the UK. We have ensured that all our service providers have undertaken to process your data securely and in accordance with UK data protection law.

On occasion we may share personal information with others such as regulators; public authorities; governmental bodies; tax authorities; law enforcement agencies; those involved with the provision of security at or in the vicinity of where we trade; legal advisers; accountants; tax advisers; auditors; insurers and insurance brokers and their appointed representatives; and courts/tribunals.

We do not share personal information with any third parties for the purposes of direct marketing.

How we store and how long we keep personal information We have put in place appropriate measures to store your personal information securely.

We retain personal information for as long as required to fulfil our contractual obligations (and/or to take relevant pre-contractual steps), to fulfil our legal or statutory obligations (including tax obligations) and to resolve any (potential) disputes. We may also retain personal information for as long as required to satisfy our legitimate interests (for example, to allow us to provide customer service; in order to keep records of advice we have received). We review this data periodically and delete or destroy that which is no longer needed.

We maintain copies of commissioned work indefinitely, and this sometimes includes personal information.

Please note that our payment service provider allows us access to receipts for the transactions they process for us, and they store these indefinitely.

Your rights UK data protection law grants you certain rights regarding the processing of your personal information including:

* The right to be informed about the processing of your personal information;

* The right of access: this is the right to request copies of your personal information;

* The right of rectification: this is the right to request rectification of personal information that you think is inaccurate and completion of personal information you think is incomplete;

* The right to erasure: this is the right to request erasure of your personal information;

* The right to restrict processing: this is the right to request restriction of the processing of your personal information;

* The right to object: this is the right to object to the processing of your personal information;

* The right to data portability: you have the right to ask that we transfer the personal information you gave us to another data controller, or to you.

Please note that not all these rights are absolute, and some apply only in certain circumstances.

If you have any questions or concerns Please email us at if you have any questions about our privacy policy, or if you are not happy with our processing of your personal information, or if you would like to exercise any of your rights over your personal information processed by us.

How to complain to the Information Commissioner's Office (ICO) We hope to be able to resolve any issue you may have regarding our processing of your personal information directly with you. However, you have the right to lodge a complaint with the ICO if you are unhappy with how we have used your data.

The ICO's address:

Information Commissioner's Office
Wycliffe House
Water Lane
Helpline number: 0303 123 1113
ICO website:

Changes to our privacy policy We regularly review our privacy policy and when necessary will update this web page with any changes.

This web page was last updated on 1 November 2023.