Privacy Policy – Profile ART

PROFILE-ART.COM — PRIVACY POLICY (UK GDPR / DPA 2018)

Effective date: 25 September 2025

1) Who we are (Data Controller)

Profile-Art.com is operated by NEWBRIDGE CAPITAL BATH LTD (the “Company”, “we”, “us”, “our”), a company incorporated in England and Wales. Registered office: Dept 6101, 43 Owston Road, Carcroft, Doncaster, United Kingdom, DN6 8DA. Contact: info@profile-art.com

2) Scope of this Privacy Policy

This Privacy Policy explains how we collect, use, share, and protect personal data when you visit our website, create an account, make a purchase of one‑off downloadable digital avatar images, or contact us. We do not offer subscriptions and we provide Pay‑In functionality only.

3) What data we collect

We collect and process the following categories of personal data depending on how you interact with us:

• Account & identity data: name, email address, password hash (if an account is created).

• Order & transaction data: billing email, products purchased, currency, value, timestamps, limited payment status metadata from our payment processor (we do not store full card numbers).

• Communications: messages you send us (e.g., support emails), reviews or feedback you submit.

• Device & usage data: IP address, device identifiers, browser type, pages viewed, session duration, referral/attribution data, and basic diagnostic logs.

• Cookies & similar technologies: see our Cookie Policy for details on categories, purposes, and choices.

4) Where we get your data

• Directly from you when you browse the website, create an account, place an order, or contact us.
• Automatically via cookies and similar technologies on our website (see Cookie Policy).
• From third parties involved in your order (e.g., payment processors) providing limited payment status data.

5) How we use your data & lawful bases

We use personal data for the purposes below and rely on the stated lawful bases under the UK GDPR:

• To provide the website, process your order, deliver digital downloads, and offer customer support — Lawful basis: contract (Article 6(1)(b)).

• To prevent misuse, ensure service integrity, maintain security, and diagnose issues — Lawful basis: legitimate interests (Article 6(1)(f)).

• To improve the website and understand performance using aggregated analytics — Lawful basis: legitimate interests (Article 6(1)(f)). Where required, we rely on your consent via the cookie banner.

• To send service emails about your order (receipts, delivery messages) — Lawful basis: contract (Article 6(1)(b)).

• To comply with legal obligations (e.g., accounting and tax rules) — Lawful basis: legal obligation (Article 6(1)(c)).

6) Cookies & similar technologies

We use essential cookies necessary to operate the site and, with your consent, non‑essential cookies for analytics/attribution. You can manage preferences at any time via the cookie banner or settings. For details, see our separate Cookie Policy.

7) Payments

Payments are processed by third‑party payment processors on our behalf. We do not collect or store full payment card numbers. The processor acts as a separate controller or processor for card data; please review their privacy notices for more information.

8) Sharing your data

We share personal data only as needed with: (a) service providers who help us operate the website, deliver digital content, provide analytics/attribution, and process payments; (b) professional advisers (e.g., accountants); and (c) authorities where required by law. We do not sell your personal data.

9) International data transfers

Where personal data is transferred outside the UK (or EEA), we implement appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, and conduct transfer assessments as appropriate.

10) How long we keep your data

We retain personal data only as long as necessary for the purposes set out in this Policy, including to provide the service, resolve disputes, enforce our terms, and meet legal/accounting requirements. Typical retention periods include: order records for up to 6 years; support correspondence for up to 2 years; analytics data in line with cookie lifetimes or aggregated thereafter.

11) Your rights under UK GDPR

You have the right to request access to your personal data, rectification, erasure, restriction, and portability, and to object to processing based on legitimate interests. Where we rely on consent (e.g., non‑essential cookies), you may withdraw consent at any time. These rights may be subject to conditions and exemptions.

12) How to exercise your rights

To make a request, email us at info@profile-art.com from the address associated with your order or account. We may ask for limited information to verify your identity. We aim to respond within one month.

13) Children

Our website is intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided personal data, please contact us so we can delete it.

14) Security

We implement technical and organisational measures designed to protect personal data, including encryption in transit, access controls, and data minimisation. No method of transmission or storage is completely secure.

15) Changes to this Privacy Policy

We may update this Policy from time to time to reflect changes in law or our practices. We will post the updated version with a new effective date.

16) Contact & complaints

Questions or concerns? Email: info@profile-art.com
If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO). Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF; phone: +44 303 123 1113; ico.org.uk.