This Privacy Policy explains how Encaptured Environment (we, us, our) collects, uses, stores, discloses, and protects the personal data of visitors and customers (you) of our website located at www.encapturedenvironment.com (the Website).

Data Controller Details:

– Business name: Encaptured Environment

– Owner / Sole Trader: Liam Burgess

– Registered address: Jersey, Channel Islands

– Contact email: encapturedenvironment@gmail.com

– Website: www.encapturedenvironment.com

Encaptured Environment is a sole-trader photography and print-on-demand business operating from Jersey, Channel Islands. We sell fine-art photographic prints produced and fulfilled by our third-party print partner, Prodigi, as well as works submitted by other contributing photographers. Jersey is a Crown Dependency and, whilst not part of the United Kingdom or the European Union, Jersey has its own data protection law — the Data Protection (Jersey) Law 2018 — which is substantially equivalent to the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR). We are committed to complying with all applicable data protection legislation.

If you are located in the European Economic Area (EEA) or the United Kingdom, additional rights may apply to you as described in Section 12 of this Policy.

This Policy applies to:

– All visitors to the Website, whether or not they make a purchase;

– Customers who purchase physical prints or digital products;

– Individuals who subscribe to our mailing list or create an account;

– Photographers who submit or license work to be sold through the Website;

– Anyone who contacts us via email or through any contact form.

This Policy does not apply to third-party websites or services linked to from our Website. We encourage you to review the privacy policies of any third-party sites you visit.

3.1 Data You Provide Directly

We collect personal data that you provide to us voluntarily, including:

– Full name and billing/shipping address (required for order fulfilment);

– Email address (for order confirmation, shipping updates, and, where consented, marketing communications);

– Telephone number (if provided at checkout);

– Payment information — note: we do not store your full card details. Payment processing is handled by Squarespace Payments, PayPal, and/or Stripe; please refer to those providers' privacy policies;

– Any information you include in enquiry or contact form submissions;

– Photographer submissions including name, portfolio images, and correspondence.

3.2 Data Collected Automatically

When you visit the Website, certain data is collected automatically through cookies and similar tracking technologies:

– IP address and approximate geographic location;

– Browser type and version;

– Operating system;

– Referring URLs and exit pages;

– Pages viewed, time spent on pages, and navigation paths;

– Device type (desktop, tablet, mobile);

– Date and time of each request.

This data is collected partly by Squarespace (our website and hosting platform) and partly by third-party analytics and advertising tools described in Section 7.

3.3 Cookies and Similar Technologies

Our Website uses cookies. A cookie is a small text file placed on your device to help the Website function correctly and to enable us and third parties to understand how you interact with the site.

We use the following categories of cookies:

– Strictly Necessary Cookies: Essential for the Website to operate (e.g. shopping cart, session management). These cannot be disabled.

– Performance and Analytics Cookies: Used to collect aggregate statistics about site usage, including via Google Analytics (see Section 7.1). These help us understand visitor behaviour and improve our site.

– Functional Cookies: Allow the Website to remember your preferences (e.g. currency, language).

– Targeting / Marketing Cookies: May be placed by third-party services to build a profile of your interests and serve relevant advertisements. These are only active where you have consented.

Squarespace, as our website platform, sets its own cookies for purposes including site security, fraud prevention, and analytics. For full details of cookies set by Squarespace, please refer to Squarespace's Cookie Policy at squarespace.com/privacy.

On your first visit to the Website you will be presented with a cookie consent banner. You may withdraw or update your cookie consent at any time by clicking the Cookie Preferences link in the footer of the Website, or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of the Website.

We process your personal data only where we have a valid legal basis to do so. The applicable legal bases under the Data Protection (Jersey) Law 2018 and the UK/EU GDPR are:

– Performance of a Contract: Processing your order, arranging fulfilment via Prodigi, and communicating order status.

– Legal Obligation: Retaining financial records for tax and accounting purposes as required by Jersey law.

– Legitimate Interests: Improving our Website, preventing fraud, maintaining security, and understanding our audience — where such interests are not overridden by your rights and freedoms.

– Consent: Sending marketing emails, placing non-essential cookies, and using certain analytics or advertising tools — where you have given explicit, freely given, and informed consent. You may withdraw consent at any time without detriment.

We use your personal data for the following purposes:

– Order Processing: To process, confirm, fulfil, and deliver your order, including transmitting necessary data to Prodigi for print production and shipping.

– Customer Communications: To send you order confirmations, dispatch notifications, and respond to your enquiries.

– Account Management: To create and manage your customer account on the Website, if you create one.

– Marketing (with consent): To send promotional emails, newsletters, or updates about new works, offers, or photographers — only where you have opted in. You may unsubscribe at any time via the link in any marketing email.

– Analytics and Site Improvement: To analyse traffic, understand how visitors use the Website, and improve our content and user experience.

– Fraud Prevention and Security: To detect and prevent fraudulent transactions, abuse, or other illegal activity.

– Legal Compliance: To meet our legal and regulatory obligations, including tax record-keeping.

– Photographer Relations: To manage submissions from contributing photographers, including communication, licensing, and attribution.

Payments on the Website are processed by Squarespace Payments and/or PayPal. We do not directly receive, store, or process your full payment card details. Payment data is transmitted securely to our payment processor(s) in accordance with Payment Card Industry Data Security Standards (PCI-DSS).

By making a purchase, you are also subject to the relevant payment processor's terms and privacy policy:

– Squarespace Payments: squarespace.com/privacy

– PayPal: paypal.com/uk/legalhub/privacy-full

We may retain limited transactional metadata (e.g. order value, date, last four digits of card) for accounting and fraud-prevention purposes. This data is not used for marketing.

7.1 Squarespace

Our Website is built and hosted on Squarespace, Inc. (a US-based company). Squarespace processes certain data about visitors and customers on our behalf as a data processor, including in connection with hosting, commerce, analytics, and email marketing tools. Squarespace's handling of data is governed by our Data Processing Agreement with them and by Squarespace's own Privacy Policy at squarespace.com/privacy. Data processed by Squarespace may be stored in the United States and other countries; Squarespace relies on Standard Contractual Clauses for international transfers.

7.2 Prodigi (Print Fulfilment)

Print orders are fulfilled on our behalf by Prodigi Limited, a UK-based print-on-demand service. When you place an order, we transmit your name and shipping address (and any other data required for delivery) to Prodigi for the sole purpose of producing and dispatching your order.

Prodigi acts as a data processor on our behalf and is contractually obligated to process your data only for fulfilment purposes. Prodigi is based in the United Kingdom and operates in accordance with the UK GDPR. For further information, see Prodigi's Privacy Policy at prodigi.com/privacy-policy.

7.3 Email Marketing (Squarespace Email Campaigns)

Where you have opted in to receive marketing communications, we may use Squarespace's built-in Email Campaigns tool to send newsletters or promotional emails. Your email address and name are stored within Squarespace's platform for this purpose. You may unsubscribe at any time by clicking the unsubscribe link at the bottom of any marketing email, or by emailing us at encapturedenvironment@gmail.com. Unsubscribe requests will be actioned within ten (10) business days.

7.4 Other Potential Third-Party Integrations

From time to time, we may integrate additional third-party tools (for example, social media sharing buttons, embedded maps, or customer review platforms). Where such integrations involve the processing of personal data, this Policy will be updated accordingly. Social media platforms such as Instagram, Facebook, or Pinterest may set their own cookies when you interact with embedded social content on our Website; their own privacy policies govern such processing.

As a business based in Jersey, Channel Islands, some of the third-party services we use (including Squarespace and Google Analytics) store or process data in the United States and other countries outside the UK and EEA. Jersey is recognised by the UK as providing an adequate level of data protection. We take steps to ensure that any transfer of your personal data to third countries is subject to appropriate safeguards, such as:

– Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO) or the European Commission;

– Adequacy decisions where applicable;

– Data processing agreements with all relevant third-party processors.

We do not sell, rent, or trade your personal data. We may share your data with the following categories of recipients:

– Service Providers: Squarespace (hosting, commerce, email), Prodigi (print fulfilment), PayPal/Squarespace Payments (payment processing) — all acting as data processors under contract with us.

– Legal Authorities: Where we are required to disclose data by law, court order, or regulatory requirement, or where disclosure is necessary to protect the rights, property, or safety of Encaptured Environment, our customers, or others.

– Business Succession: In the event that our business is sold or transferred, personal data held by us may form part of the assets transferred. You would be notified of any such change.

– Contributing Photographers: Where you purchase a print by a specific photographer, we may share your order data (e.g. number of units sold) with that photographer for royalty accounting purposes. We will not share your name or contact details with photographers without your explicit consent.

We retain personal data only for as long as is necessary for the purposes set out in this Policy or as required by applicable law. Our standard retention periods are:

– Order and transaction records: 7 years from the date of the transaction (for VAT and tax compliance under Jersey law);

– Customer account data: For the duration of the account and up to 2 years following the last login or purchase, after which it will be deleted or anonymised;

– Marketing email lists: Until you unsubscribe, or until 2 years of inactivity, whichever is sooner;

– Contact and enquiry correspondence: Up to 3 years from the date of the last communication;

– Cookie data: As per individual cookie lifespans; session cookies are deleted when you close your browser.

When data is no longer required, it will be securely deleted or anonymised.

We take the security of your personal data seriously. We rely on Squarespace's enterprise-grade infrastructure, which includes SSL/TLS encryption for all data in transit, secure server environments, and regular security audits. Squarespace is PCI-DSS compliant for payment data handling.

Whilst we take appropriate technical and organisational measures to protect your data, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, and you provide your data at your own risk. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the Jersey Office of the Information Commissioner (JOIC) and affected individuals as required by the Data Protection (Jersey) Law 2018.

Depending on your location, you have the following rights in relation to your personal data:

– Right of Access: You may request a copy of the personal data we hold about you.

– Right to Rectification: You may ask us to correct inaccurate or incomplete personal data.

– Right to Erasure ('Right to be Forgotten'): You may request deletion of your personal data where there is no compelling reason for its continued processing. Note that we may be required to retain certain data by law (e.g. financial records).

– Right to Restriction of Processing: You may ask us to restrict the processing of your data in certain circumstances.

– Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format.

– Right to Object: You may object to processing based on legitimate interests or direct marketing at any time.

– Rights Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects on you. We do not currently use such automated decision-making.

– Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at encapturedenvironment@gmail.com. We will respond to all legitimate requests within one (1) calendar month. We may ask you to verify your identity before actioning your request.

If you are dissatisfied with our handling of your personal data, you have the right to lodge a complaint with the relevant supervisory authority:

– Jersey: Jersey Office of the Information Commissioner (JOIC) — jerseyoic.org

– United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk

– EEA: Your local Data Protection Authority.

Our Website is not directed at or intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe that we have inadvertently collected data from a child under 16, please contact us immediately at encapturedenvironment@gmail.com and we will take steps to delete such information promptly.

Where you are a photographer who contributes work to our Website, we will collect and hold personal data necessary to administer our commercial relationship, including your name, contact details, portfolio images, bank or payment details for royalty disbursement, and any correspondence. This data is held on the basis of contractual necessity and will be retained for the duration of our arrangement and for 7 years thereafter for accounting purposes. Photographer data is not shared with customers without consent and is not used for marketing unless you have separately consented.

Our Website may contain links to third-party websites, including social media platforms, photography blogs, or partner sites. Once you leave our Website, this Privacy Policy no longer applies. We are not responsible for the privacy practices or content of third-party websites and encourage you to read their respective privacy policies before providing any personal data.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. Where we make material changes, we will notify you by updating the 'Last Updated' date at the bottom of this Policy and, where appropriate, by placing a notice on the Website or by sending an email to customers on our mailing list.

We encourage you to review this Policy periodically. Your continued use of the Website following the posting of any changes constitutes your acceptance of those changes with respect to information collected after the date of the change.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

– By email: encapturedenvironment@gmail.com

– Via the contact form on our Website: www.encapturedenvironment.com/contact-us

We aim to respond to all enquiries within five (5) business days.