Draft for review by the owner. Not legal advice; please have it checked before launch.

Privacy notice

Last updated 11 November 2026. Mimesis Works is a trading name of RA ARC Ltd, a company registered in England and Wales (company number 12478953), registered office 47b Rutland Gardens, London, England, N4 1JN.

Who we are

RA ARC Ltd is the controller of the personal data described here, under UK data protection law (the UK GDPR and the Data Protection Act 2018).

What we collect and why

• Orders: your name, delivery address, email address and phone number, and what you bought. We use these to take payment, print and deliver your order and keep you updated. Lawful basis: to perform our contract with you.
• Orders through Etsy: if you buy through our Etsy shop, Etsy shares your name, delivery address and order with us so we can make and send it, and we send the tracking details back to Etsy. Lawful basis: contract. Etsy's own privacy policy covers what Etsy does with your data.
• Payments: handled by Stripe. We receive confirmation of payment and limited details such as the last four digits of your card, never your full card number. Stripe also checks payments for fraud. Lawful basis: contract, and our legitimate interest in preventing fraud.
• Records: we keep order and payment records for six years, as UK tax law requires. Lawful basis: legal obligation.
• Email updates: if you sign up, we use your email address to send news of new work. You can unsubscribe at any time from any email. If you tick the box at checkout to hear from us and then leave without paying, we may send you one reminder. Lawful basis: your consent.
• How people use the site: our own analytics count page views and which works are popular, so we can improve the shop. They do not follow you to other websites. Lawful basis: our legitimate interest in running the shop.
• Advert measurement: only if you allow advert cookies, Pinterest and Meta receive information about visits and purchases to measure our adverts. Lawful basis: your consent, which you can change at any time in Cookie settings.

Who we share it with

We share only what each provider needs: Stripe (payments), our printing and delivery partner Gelato (printing and delivering your order), Resend (sending order and update emails), Etsy (for orders placed there), Cloudflare (delivering this website securely) and Backblaze (encrypted backups). Pinterest and Meta receive data only if you allow advert cookies. We never sell your data. Some of these providers are based in or use servers outside the UK; where they do, they use safeguards approved under UK law.

How long we keep it

Order records: six years. Email sign-up details: until you unsubscribe. Analytics: no longer than 25 months, in a form that does not identify you.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, ask for it in a portable form, and withdraw consent at any time. Email us to do any of these; we reply within one month. If you are unhappy with how we handle your data, please tell us first; you can also complain to the Information Commissioner's Office at ico.org.uk.