Privacy notice
This notice explains what personal data Loutre et Lys handles, why, and your rights. It covers this website, email to [email protected], commissions and shop orders.
Who is responsible
The data controller is Elise Humphries, trading as Loutre et Lys.
Our geographic address is given in every quote and on request from [email protected].
Contact: [email protected].
What we collect and why
| When | What | Why, and the legal basis | How long we keep it |
|---|---|---|---|
| You visit the site | Aggregated statistics (pages viewed, referring site, country, device type) through Cloudflare Web Analytics. No cookies, no cross-site tracking, no profile of you. Cloudflare also processes your IP address briefly to deliver and protect the site. | To run and improve the site and keep it secure: our legitimate interests | Statistics are aggregated; Cloudflare's security logs are kept for short periods under its own policy |
| You email us or use the enquiry form | Your name, email address and anything you choose to send, such as photographs of a wall or the town you live in. The form does not store anything: it opens your own email app. | To reply to you: our legitimate interests. If you go ahead with a commission: to take steps towards and perform a contract | Enquiries that do not go ahead: 24 months from our last message. Commissions: as for orders, below |
| You ask to hear when the shop opens | Your email address | To send that one message: your consent, which you can withdraw at any time | Deleted once we have told you the shop is open |
| You buy from the shop or commission work | Name, email, delivery address, phone number if you give it at checkout, what you ordered and what you paid. Card details are handled only by Stripe; we never see them. | To take payment, deliver and deal with returns or faults: performance of a contract. To keep accounts: legal obligation | Until 5 years after the 31 January filing deadline for the tax year of the sale, as HMRC requires |
| We paint in your home | Your address and access arrangements; photographs of the finished work for our portfolio, never showing your address or anything that identifies you | To carry out the mural: performance of a contract. Portfolio photographs: our legitimate interests, and you can object | Address: as for orders. Portfolio photographs: while used |
Who we share it with
We do not sell your data or use it for advertising. We share only what each service needs:
- Cloudflare: hosts the site, provides the analytics and forwards email sent to [email protected].
- Google: hosts the mailbox that receives that email.
- Stripe: takes payment and sends your receipt (stripe.com/gb/privacy).
- Royal Mail or another carrier: your name and delivery address, to deliver your order.
- Our accountant and HMRC, where needed for our accounts and tax.
Cloudflare, Google and Stripe may process data outside the UK, including in the United States. Where they do, the transfer is covered by UK adequacy regulations (including the UK–US data bridge for certified companies) or by the ICO's international data transfer agreement or addendum.
Your rights
Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, ask us to restrict how we use it, object to our use of it where we rely on legitimate interests, ask for it in a portable form, and withdraw consent where we rely on consent. Email [email protected]; we reply within one month. We make no decisions about you by automated means.
You do not have to give us personal data, but we cannot reply, deliver an order or paint a mural without the details listed above.
If you are unhappy with how we handle your data, please tell us. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.
Last updated 28 October 2026.