Last updated 2 October 2026
Privacy & cookies.
Your information should have a clear purpose. Here is what this store uses, why it uses it and the choices you have.
This is a prelaunch store. The legal business identity and privacy contact are being finalised and will be published before orders are accepted. Please do not send personal or payment information to an unconfirmed contact.
Who is responsible
The controller for the store is the business operating Real Wall Art; its legal name is pending publication before launch.
Postal address:
To be published before ordering opens.
Our privacy contact will be published on the contact page before ordering opens.
Information used by the store
- Browsing: technical information such as IP address, requested pages, browser information and errors may be handled by our hosting provider to deliver and protect the website.
- Your bag: product option identifiers and quantities are stored in your browser so your selection survives a page change or return visit.
- Orders, when enabled: your name, email, billing and delivery details, selected prints, payment status, delivery progress and customer service correspondence are used to process and support your purchase.
- Payments: Stripe collects payment details. The store receives payment references and status, together with customer and delivery details needed for the order. It does not store full card numbers or card security codes.
- Store security: protected administrator sessions, activity records and limited request identifiers help prevent unauthorised access and repeated abusive requests.
Why we use this information
Order handling and related customer support are necessary to carry out a purchase contract or take steps you request before a purchase. Accounting and other records may be needed to meet legal duties. Website security and resolving service problems rely on the legitimate interests of running a reliable, secure store, with appropriate regard for your rights.
Optional advertising tracking relies on your consent. Browsing the store, adding something to your bag or buying a print does not by itself sign you up to marketing emails.
The services involved
The website runs on Vercel. Order records are stored in a PostgreSQL database hosted by Neon. Stripe provides hosted payment processing. Resend delivers order, dispatch and refund emails when email delivery is configured. These services receive the information needed for their respective roles. When physical fulfilment is enabled, the print supplier and delivery carrier will receive the name, address and order details needed to deliver your purchase.
If you accept advertising cookies and the advertising feature is configured, Meta receives browser and event information such as pages or products viewed, bag additions and checkout starts. Events can include product identifiers, price and currency. This helps measure ads and may support personalised advertising through Meta’s services.
With advertising consent, confirmed purchases may also be reported to Meta through a server connection. This includes order value, currency, product identifiers, a unique event identifier, browser user agent and a hashed version of your email address for matching. Hashing does not make this information anonymous. This connection does not send your plain-text email, name, delivery address, IP address or private order receipt link. Withdrawing consent also cancels purchase events that are still waiting to be sent.
Providers may process information outside the UK. Their published notices explain their processing and transfer arrangements. The store’s final supplier arrangements and any required transfer safeguards must be confirmed before orders open. We do not promise that all information stays within the UK.
Provider information: Vercel, Neon, Stripe, Resend and Meta.
Cookies and similar browser storage
| Storage | Purpose and duration |
|---|---|
| Bag storage | Essential local storage called rwa-bag remembers product choices and quantities. It remains until removed by the site, you or your browser. |
| Checkout session storage | Essential session storage called rwa-checkout-key and rwa-checkout-attempt prevents duplicate checkout requests, remembers the current checkout attempt and clears purchased items from your bag. It lasts for the browser tab’s session. |
| Cookie preference | Local storage called rwa-consent remembers your advertising choice until you change it or clear browser data. |
| Administrator session | A signed, secure session cookie called rwa_admin is used only when a store administrator logs in. Its maximum lifetime is eight hours. |
| Meta advertising | Optional tracking, including cookies such as _fbp and _fbc, is enabled only after acceptance. Meta controls its cookie lifetimes; see its cookie information. |
Select “Essential only” to use the store without optional advertising tracking. You can reopen “Cookie settings” in the footer and withdraw consent at any time. Withdrawal stops further consent-based tracking by this site; it does not undo information already received by Meta. Clearing browser storage may empty your bag and reset your preference.
Stripe’s separate checkout may use its own security and payment technologies. Read its privacy notice when using that service. Learn more about Meta cookies and the ICO’s explanation of cookies.
How long information is kept
Order and payment records are kept for the period needed to fulfil the order, handle returns and disputes, and meet applicable accounting and legal duties. Customer messages are retained while their issue is active and for any relevant dispute period. Security records are reviewed according to their usefulness for investigating abuse. Records should then be deleted or anonymised where no continuing purpose applies.
Browser storage follows the durations above. Hosting, payment and advertising providers have their own retention arrangements. Detailed operational retention settings are part of the prelaunch setup; this site does not claim that an automated deletion schedule is already running.
Your choices and rights
Depending on the circumstances, you can request access to your personal data, correction, deletion, restriction or a portable copy, and object to processing based on legitimate interests. You may withdraw consent for optional advertising without affecting the lawfulness of earlier processing.
Some information is needed to complete an order; without delivery and payment details, a purchase cannot proceed. We do not use solely automated decisions that produce legal or similarly significant effects about you.
Use the privacy contact above to raise a request. You can also complain to the Information Commissioner’s Office. See UK Government information about data protection rights.
Changes to this notice
We will update this page when the store’s services or data use change. Any new optional purpose that requires consent will be explained before it is enabled.