Privacy Policy

Last updated: 8 April 2026

Mark Wilson Studio respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect your personal data when you:

visit this website;
contact us by email or through a contact form;
join our mailing list;
enquire about or purchase artworks, workshops or other services;
interact with us in connection with events, bookings or customer support.

For the purposes of data protection law, the data controller is:

Mark Wilson Studio
Mark Wilson
Rua Vasco de Gama, Urb. Solcor, Bloco 7 R/c dto, Vila Nova de Cacela, 8900 018, Algarve.
Portugal
Email: hello@markwilsonstudio.com

If you have any questions about this Privacy Policy or how your data is handled, please contact us using the details above.

1. The personal data we collect

Depending on how you use the website, we may collect the following personal data:

Information you give us directly

your name;
your email address;
your phone number, if you provide it;
your message or enquiry details;
billing, delivery or payment-related details, where relevant to a purchase or booking;
any information you choose to include when contacting us or filling in a form.

Information collected automatically

When you browse the website, we may collect limited technical information such as:

IP address;
browser type and version;
device type;
pages visited;
date and time of access;
referring website or source.

This information may be collected through server logs, security tools, analytics tools and cookies, depending on how the site is configured.

2. How we use your personal data

We use your personal data for the following purposes:

to respond to your enquiries;
to provide customer service and support;
to process artwork enquiries, sales, bookings or workshop registrations;
to send studio updates, newsletters or marketing emails, where you have asked to receive them;
to manage and improve the website;
to maintain website security and prevent misuse;
to keep appropriate business and legal records;
to comply with legal and tax obligations.

3. Our legal bases for processing

Under the GDPR, we rely on one or more of the following legal bases:

Contract

We process your data where this is necessary:

to take steps at your request before entering into a contract; or
to perform a contract with you, such as processing an order, booking or enquiry.

Consent

We rely on consent where you:

sign up to our mailing list;
agree to receive marketing emails;
accept non-essential cookies, where applicable.

You can withdraw your consent at any time.

Legitimate interests

We may process your data where it is reasonably necessary for our legitimate interests, including:

replying to general enquiries;
running and improving the website;
keeping the website secure;
maintaining internal records;
operating and developing the business in a proportionate way.

Where we rely on legitimate interests, we aim to do so in a way that does not override your rights and freedoms.

Legal obligation

We may process your data where necessary to comply with legal obligations, including accounting, tax, fraud prevention or regulatory requirements.

4. Marketing

If you subscribe to studio updates, we may send you emails about:

new artworks;
works on paper;
studio news;
exhibitions;
workshops and creative sessions;
related offers or updates from Mark Wilson Studio.

You can unsubscribe at any time by:

clicking the unsubscribe link in any marketing email; or
contacting us directly.

We will not sell your personal data to third parties for their own marketing.

5. Cookies and similar technologies

This website may use cookies or similar technologies.

Some cookies are strictly necessary for the website to function properly. Others, such as analytics or marketing cookies, may only be used where you have given consent.

For more information, please see our Cookie Policy or cookie settings notice, if one is in use on the site.

6. Who we share your data with

We only share personal data where necessary and appropriate. This may include trusted service providers who help us run the business, such as:

website hosting providers;
website maintenance or security providers;
email marketing providers;
payment processors;
booking or ecommerce platforms;
analytics providers;
cloud storage or business software providers;
accountants or professional advisers, where necessary.

These providers process data on our behalf or as separate controllers depending on the service involved.

For example, this may include services such as:

Fastcomet
Mailerlite
Paypal
Google
Surecart

7. International transfers

Some of the providers we use may store or process personal data outside the European Economic Area.

Where personal data is transferred outside the EEA, we aim to ensure that appropriate safeguards are in place, such as:

an adequacy decision by the European Commission; or
approved standard contractual clauses or other lawful safeguards.

8. How long we keep your data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including to satisfy legal, accounting or reporting requirements.

Typical retention periods may include:

general enquiries: up to 24 months after the last contact;
customer purchase or booking records: as long as necessary for contract, accounting and tax records;
mailing list data: until you unsubscribe or ask us to delete it, or until we decide to clear inactive subscribers;
analytics or cookie data: in line with the settings of the relevant tools and cookie preferences.

9. Your data protection rights

Depending on the circumstances, you may have the right to:

access your personal data;
correct inaccurate or incomplete personal data;
ask for your data to be erased;
restrict the way we use your data;
object to certain processing;
receive a copy of certain data in a portable format;
withdraw consent where processing is based on consent;
lodge a complaint with a supervisory authority.

If you are in Portugal, you can lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD).

We may need to verify your identity before responding to certain requests.

10. Third-party links

This website may contain links to third-party websites, platforms or social media services. We are not responsible for the privacy practices of those third-party sites. You should read their privacy notices separately.

11. Children

This website is not intended to knowingly collect personal data from children without appropriate parental involvement where required. If you believe a child has provided personal data inappropriately, please contact us and we will review the situation.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any significant changes will be posted on this page with an updated revision date.

13. Contact

If you have any questions about this Privacy Policy or your personal data, please contact:

Mark Wilson Studio
Mark Wilson
Rua Vasco de Gama, Urb. Solcor, Bloco 7 R/c dto, Vila Nova de Cacela, 8900 018, Algarve.
Portugal
Email: hello@markwilsonstudio.com