Privacy policy
Privacy policy
Last updated: 28 July 2026
Who I am
PUCA.ARCHIVE is the studio practice of Conor Fitzpatrick, a sole trader based in London, United Kingdom. I am the data controller for information collected through this site.
Contact: pucaarchive@gmail.com
What I collect
When you buy something: your name, email address, delivery and billing address, phone number if you give one, and details of what you ordered. Payment card details go directly to the payment provider. I never see or store them.
When you join the mailing list: your email address, and a tag noting which signup form you used, so I know whether you were following a specific drop.
When you email me: whatever you choose to tell me.
Automatically, when you browse: IP address, device and browser type, pages viewed, and how you arrived. This comes through Shopify's built-in analytics and cookies.
Why I use it, and on what legal basis
To take payment, pack your order and get it to you, and to handle returns. Legal basis: performance of a contract with you.
To email you about your order, such as confirmations and dispatch notices. Legal basis: performance of a contract.
To send you news about drops, exhibitions and new work, but only if you asked for it. Legal basis: your consent, which you can withdraw at any time.
To keep records for tax and accounting. Legal basis: legal obligation.
To keep the site working, prevent fraud and understand which pages people actually read. Legal basis: my legitimate interest in running a functioning shop, balanced against your privacy.
Who else sees it
I use a small number of services to run the shop. Each only receives what it needs.
- Shopify hosts the store and processes orders
- Payment providers, including Shopify Payments and PayPal, handle payment and fraud checks
- Prodigi, my print partner, receives the name and delivery address for open edition print orders so they can post them to you
- Couriers and Royal Mail receive delivery details
- Email tools used to send the drop newsletter receive your email address
- My accountant and HMRC, where the law requires it
I do not sell your personal information, and I do not share it with anyone for their own marketing.
Where your data goes
Some of these providers are based outside the UK, including in the United States. Where that happens, transfers are covered by the safeguards those providers have in place, such as the UK International Data Transfer Agreement or an adequacy decision.
How long I keep it
Order records are kept for six years, because tax law requires it. Mailing list details are kept until you unsubscribe. Emails are kept for as long as they are useful, then deleted.
Your rights
Under UK data protection law you have the right to ask me for a copy of the information I hold about you, to have it corrected, to have it deleted, to restrict or object to how I use it, to receive it in a portable format, and to withdraw consent to marketing at any time.
To do any of these, email pucaarchive@gmail.com. I will respond within one month.
If you are unhappy with how I have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. I would rather you came to me first so I can put it right.
Marketing emails
I only email you about drops and exhibitions if you signed up. Every email has an unsubscribe link, and unsubscribing takes effect immediately. Order confirmations and dispatch notices are not marketing, so you will still get those.
Cookies
The site uses cookies that are necessary to make it work, such as remembering your cart and keeping you logged in, plus analytics cookies that tell me which pages get read. You can block or delete cookies in your browser settings, though some parts of the site may stop working properly if you do.
Children
This site is not intended for children, and I do not knowingly collect information about anyone under 16.
Changes
If this policy changes, the updated version will appear here with a new date.
Contact