Privacy Policy

Last updated: 15 October 2026

Louise Graham Art Company respects your privacy and is committed to protecting the personal information you share with us.

This Privacy Policy explains what information may be collected when you use the Louise Graham Art Company website, mobile app and related services, why it is collected, how it may be used or shared, and the choices available to you.

This policy is intended to support compliance with South Africa’s Protection of Personal Information Act, 4 of 2013 (“POPIA”), as well as applicable mobile-app marketplace requirements.

1. Who we are

The website and mobile app are operated by:

Business: Louise Graham Art Company

Owner and artist: Louise Graham

Location: Mpumalanga, South Africa
Email: info@louisegraham-art-company.com
Website: www.louisegraham-art-company.com

In this policy, “we”, “us” and “our” refer to Louise Graham Art Company. “You” and “your” refer to visitors, customers, subscribers, commission clients and users of the website or mobile app.

For the purposes of POPIA, Louise Graham Art Company is the responsible party for the personal information described in this policy.

2. Services covered by this policy

This policy applies when you:

Visit or interact with our website.
Download, install or use the Louise Graham Art mobile app.
Create or use an account, where this feature is available.
Purchase or enquire about an artwork.
Submit a commission enquiry.
Upload reference images or other material.
Subscribe to the Journal, newsletter or other communications.
Complete a contact form.
Enable app notifications.
Communicate with us by email or through another connected service.

Third-party websites, platforms and services have their own privacy policies and are not governed by this policy.

3. Information we may collect

Depending on how you use our services, we may collect the following categories of information.

Contact and identity information

Your name.
Email address.
Telephone number.
Billing or delivery address.
Account or profile information, where accounts are available.

Purchase and transaction information

The artwork or service purchased.
Order and invoice details.
Transaction value and payment status.
Delivery, collection and tracking information.
Communications relating to an order.

Complete payment-card details are normally processed securely by the payment provider used at checkout. Louise Graham Art Company does not ordinarily receive or store your complete card number or security code.

Commission and enquiry information

Your preferred subject, size, medium, budget and deadline.
Messages, instructions and other information included in your enquiry.
Reference photographs or other files you choose to upload.
Information necessary to prepare a quotation or complete the agreed artwork.

If a reference image contains another person, you confirm that you have permission to provide it for the intended purpose.

Newsletter and communication information

Your email address.
Subscription status.
Communication preferences.
Information about the delivery of or interaction with communications, where provided by the relevant service.

Website, app and device information

Wix and connected service providers may automatically collect limited technical information, such as:

IP address.
Browser type.
Device type and operating system.
App version.
Device or app identifiers.
Language and general regional settings.
Pages, screens or features viewed.
Approximate interaction times.
Referring pages or links.
Diagnostic information, crash reports and performance data.
Security and fraud-prevention information.

The precise information collected depends on the website and app features, device settings, permissions and connected services in use.

Information you provide voluntarily

We may also collect any other information you choose to provide through forms, emails, reviews, messages or other interactions with us.

Please avoid submitting sensitive personal information unless it is genuinely necessary for your request.

4. App permissions and device features

The mobile app may request permission to use certain device features when they are required for a function you choose to use.

These may include:

Notifications: to send studio news, Journal updates, new-artwork announcements, order information or other communications you have chosen to receive.
Camera or photo library: to select or upload a reference image, profile image or other requested material.
Files or storage: to select and upload a relevant document or image.
Internet and network access: to load content, process requests and connect to the online store.

The app will only request a device permission when relevant to an available feature. You may decline or later withdraw a permission through your device settings, although this may prevent the related feature from working.

We do not intend to collect precise location, contacts, microphone recordings or health information unless a future feature clearly requires it, explains the reason and asks for the appropriate permission or consent. This policy will be updated if our data practices materially change.

5. How we collect information

We may collect information:

Directly from you when you submit it.
Automatically when you use the website or mobile app.
Through Wix, which provides the website, store and app infrastructure.
Through connected payment, delivery, communication, analytics and security services.
When you communicate with us through email or social media.
When you change your account, consent or notification preferences.

6. Why we use your information

We may process personal information to:

Provide and operate the website, mobile app and online store.
Create and manage an account, where this feature is available.
Process and fulfil purchases.
Arrange packaging, delivery or collection.
Respond to questions and artwork enquiries.
Prepare quotations and manage commissioned artwork.
Review reference images supplied for a commission.
Send order confirmations and essential service messages.
Send notifications or marketing communications where you have consented or where otherwise permitted by law.
Remember appropriate preferences.
Maintain security and prevent fraud, abuse or unauthorised activity.
Diagnose technical problems and improve performance.
Understand how people use our services.
Maintain appropriate business, accounting and tax records.
Establish, exercise or defend legal rights.
Meet applicable legal and regulatory obligations.

We will only process personal information for a lawful, specific and relevant purpose.

7. Grounds for processing

Depending on the circumstances, we may process personal information because:

You have consented to the processing.
The processing is necessary to respond to your request.
The processing is necessary to enter into or perform an agreement with you.
The processing is required by law.
The processing protects a legitimate interest of yours.
The processing is necessary for our legitimate business interests, provided those interests do not unjustifiably override your rights.

You may withdraw consent where processing relies on consent. Withdrawal does not affect processing that was lawful before consent was withdrawn.

8. Marketing and notifications

You will receive newsletters or promotional emails only where you have subscribed, consented or the communication is otherwise permitted by law.

You may unsubscribe by:

Selecting the unsubscribe link in an email.
Changing your communication preferences, where available.
Contacting us at [your email address].

You can enable or disable push notifications through the app or your device settings.

Unsubscribing from marketing or disabling promotional notifications will not prevent us from sending messages that are reasonably necessary for an order, commission, account, enquiry, security matter or requested service.

9. Cookies and similar technology

The website is created and hosted through Wix. Wix and connected services may use cookies, local storage, software development kits and similar technologies to:

Keep the website and app functioning correctly.
Maintain security.
Remember appropriate preferences.
Support accounts, shopping carts and checkout.
Process requests and purchases.
Measure traffic, performance and engagement.
Diagnose technical problems.
Enable connected communication, social-media or marketing features.

Where required, you may accept, reject or manage non-essential cookies through the website’s consent banner.

You may also manage cookies through your browser settings. Disabling certain cookies may affect the operation of the website or store.

App-related identifiers and permissions can generally be managed through the settings available on your mobile device.

10. When information may be shared

We do not sell or rent your personal information.

We may share limited information with trusted service providers where reasonably necessary to operate our services or complete your request. These may include:

Wix and its affiliated service providers, which support the website, app and online store.
Payment-processing providers.
Courier, delivery, packaging and logistics providers.
Email, newsletter and notification services.
Hosting, analytics, security and technical-support providers.
Apple or Google in connection with app distribution, downloads, diagnostics or services they provide.
Professional advisers, accountants, insurers or legal representatives.
Government bodies, regulators, courts or law-enforcement authorities where disclosure is lawfully required.

These providers should receive only the information reasonably necessary for the relevant service and may process it under their own contractual and legal obligations.

We may also disclose information where reasonably necessary to:

Comply with applicable law or a valid legal request.
Protect our rights, property, users or customers.
Investigate suspected fraud, misuse or a security incident.
Enforce an agreement.
Facilitate a legitimate business reorganisation or transfer, subject to appropriate safeguards.

11. International processing

Some providers, including Wix, mobile-app marketplace operators and connected digital services, may process or store information outside South Africa.

Where personal information is transferred internationally, we take reasonable steps to use providers and arrangements that offer appropriate privacy and security safeguards, subject to applicable law.

By using these services, your information may be processed in countries whose privacy laws differ from those of South Africa.

12. Information security

We use reasonable technical and organisational safeguards intended to protect personal information against:

Loss or destruction.
Unauthorised access.
Misuse.
Alteration.
Unlawful disclosure.

These measures may include controlled access, secure service providers and encrypted transmission where supported.

No online service, mobile app, storage system or electronic transmission can be guaranteed to be completely secure. You should protect your passwords and devices and notify us if you suspect unauthorised use of your account or information.

13. How long we retain information

We retain personal information only for as long as reasonably necessary to:

Fulfil the purpose for which it was collected.
Provide the requested product or service.
Manage orders, commissions and customer relationships.
Maintain records required for accounting, tax, legal or dispute-resolution purposes.
Prevent fraud and maintain security.
Meet legal and regulatory obligations.

Different categories of information may be retained for different periods.

When information is no longer reasonably required, it will be deleted, destroyed or de-identified where practicable and subject to the capabilities and lawful retention practices of our service providers.

14. Account and data deletion

Where the mobile app allows you to create an account, you may request deletion of the account and the personal information associated with it.

You may initiate a deletion request:

Through the account or app settings, where a deletion option is provided; or
By contacting [your email address] with the subject line App Account Deletion Request.

Please include the email address connected to the account. We may need to verify your identity before completing the request.

Deleting the app from your device does not automatically delete an account or information previously submitted.

Following a verified deletion request, we will delete or de-identify the information associated with the account unless certain records must be retained for a lawful reason, such as:

Tax, accounting or transaction-record requirements.
Fraud prevention or security.
Resolving a dispute.
Establishing or defending legal rights.
Compliance with another legal obligation.

Any information retained for these reasons will be limited to what is reasonably necessary and will not be used for unrelated marketing.

15. Your privacy rights

Subject to POPIA and other applicable laws, you may have the right to:

Ask whether we hold personal information about you.
Request access to your personal information.
Ask us to correct inaccurate or incomplete information.
Request deletion or destruction where legally appropriate.
Object to certain processing.
Withdraw consent where processing is based on consent.
Opt out of direct marketing.
Request account deletion where applicable.
Lodge a complaint with South Africa’s Information Regulator.

To make a request, contact info@louisegraham-art-company.com.

Please describe your request clearly. We may need to verify your identity before providing access to information or making changes.

Some requests may be subject to lawful limitations, including circumstances where information must be retained or access may affect another person’s rights.

16. Children’s privacy

The website, mobile app and services are intended for a general audience and are not specifically directed towards children.

We do not knowingly collect personal information directly from a child without appropriate consent from a parent or legal guardian where that consent is required.

If you believe a child has provided personal information without the necessary consent, contact us so that we can investigate and take appropriate action.

17. Reference images and user-submitted content

If you submit photographs, artwork references, text or other material, you remain responsible for ensuring that you are entitled to provide and use it for the intended enquiry or commission.

We will use submitted material only as reasonably necessary to:

Respond to your enquiry.
Prepare a quotation.
Discuss or create an agreed commission.
Provide the service you requested.
Maintain necessary transaction or dispute records.

We will not publish private reference material as promotional content without an appropriate lawful basis or permission.

18. Third-party links and services

The website or app may contain links to third-party websites, social-media platforms, payment services or other external resources.

We do not control the independent privacy, security or content practices of those services. You should review the relevant provider’s privacy policy before submitting personal information or using its services.

19. Changes to this policy

We may update this Privacy Policy when our services, website, app features, service providers or legal obligations change.

The latest version will be published on this page with an updated revision date. Material changes may also be communicated through the website, app or another appropriate method.

Your continued use of the services after an update is subject to the revised policy, where permitted by law. We will request consent again if required for a new form of processing.

20. Contact and complaints

For questions, privacy requests, account-deletion requests or concerns about your personal information, contact:

Louise Graham Art Company
Louise Graham
Email: louisegraham@louisegraham-art-company.com
Location: Mpumalanga, South Africa
Website: [www.louisegraham-art-company.com

You may also submit a complaint to South Africa’s Information Regulator if you believe your personal information has been processed unlawfully.

Information Regulator South Africa:
https://inforegulator.org.za