Privacy policy

Last updated: 26 August 2026

The short version

We collect as little as we can. If you fill in the form on this site, we get your name, your email and whatever you write in the message — and that lands in our inbox as an email. There is no database of customers, no account to create, no tracking, and no cookies. We do not sell your data to anyone, ever.

1. Who we are

Rev Up Your Walls ("we", "us", "our") is the data controller for the personal information described in this policy. We are a small art business based in the UK, selling prints and hand-drawn commissions.

You can reach us about anything in this policy at revupyourwalls@gmail.com. A postal address is available on request.

This policy sits alongside our Terms of Service and expands on the summary in section 7 of those terms.

2. What we collect

When you use the form on this website, we collect:

• Your first and last name
• Your email address
• Whether you are asking about a custom design or a pre-made one
• Anything you write in the message box
• Confirmation that you have agreed to our terms

When you email or message us directly, we collect whatever you choose to send, including your email address and the content of your message.

When you go ahead with an order, we will also ask you for:

• A delivery address
• Reference photos of your car, and any notes about what you want drawn

Please note that reference photos often contain a number plate, and a number plate counts as personal information. We only use your photos to draw your artwork. We are not looking for anything else in them, and we do not extract, record or look up plate details. If a photo includes other people, please make sure you have their agreement before sending it — our terms cover this in section 2.

Automatically, when you visit the site, our form protection records the IP address your request came from. This is used only as a counter to stop the same connection sending more than three messages an hour. It is not linked to your name, your message, or anything else about you.

3. What we do not collect

We want to be specific about this, because most privacy policies are vague:

• No cookies. This site sets none at all. That is why you have not seen a cookie banner.
• No analytics. We do not use Google Analytics, Meta Pixel, or any other visitor tracking or advertising tool. We genuinely do not know how many people visit this site or which pages they look at.
• No accounts. There is nothing to sign up for and no password to store.
• No mailing list. We do not send marketing emails and there is nothing to unsubscribe from.
• No payment details. No payment is ever taken on this website. We never see, handle or store your card number.
• No fingerprinting. The fonts on this site are served from our own server rather than fetched from Google, so loading a page does not tell any font provider that you were here.

4. Why we use your information, and our lawful basis

Under UK GDPR we have to tell you why we are allowed to use your information. Here is the whole list:

• To reply to your enquiry and give you a quote. Lawful basis: taking steps at your request before entering into a contract (Article 6(1)(b)).
• To make and deliver your artwork, and to keep you updated while we do. Lawful basis: performance of our contract with you (Article 6(1)(b)).
• To keep records of what was sold, to whom and for how much. Lawful basis: a legal obligation — HMRC requires us to keep business records (Article 6(1)(c)).
• To stop the contact form being abused for spam. Lawful basis: our legitimate interest in keeping the site working for genuine customers (Article 6(1)(f)).
• To deal with a complaint, a return, or a legal claim, if one arises. Lawful basis: our legitimate interest in defending our position (Article 6(1)(f)).

We do not make any automated decisions about you, and we do not profile you.

5. Who else sees your information

We do not sell, rent or trade your personal information. We share it only with the services we need to run the business, and only as far as each one needs:

• Resend — delivers your form submission to our inbox as an email. They handle the message in transit.
• Google (Gmail) — our inbox. This is where we read your enquiry and reply to it, and where correspondence is stored.
• Vercel — hosts this website and runs the code that handles your form submission.
• Upstash — stores the IP counter described in section 2 for our form protection.
• Contentful — supplies the words and images on this site. Because your browser loads images from their content network, their servers see your IP address as part of delivering those images. They receive nothing else about you.
• Royal Mail — receives your name and delivery address so your artwork can be posted to you.
• A payment provider — once you accept a quote, payment is taken through a secure third-party provider rather than on this site. They will handle your payment details under their own privacy policy. (To be confirmed and named here.)

We may also disclose information if we are legally required to — for example, in response to a valid request from a public authority.

6. Information leaving the UK

Some of the providers above are based in, or store data in, the United States. Where information is transferred outside the UK, it is protected by an approved safeguard — either a UK adequacy decision, or standard contractual clauses with the UK International Data Transfer Addendum, as set out in each provider's own terms.

7. How long we keep it

• Enquiries that turn into orders: kept for 6 years from the end of the tax year the order relates to, because HMRC requires us to keep business records for that long. Then deleted.
• Enquiries that do not turn into orders: deleted within 12 months.
• Reference photos: deleted once your commission is complete and you are happy with it, unless you ask us to keep them.
• The IP counter used for form protection: expires automatically within an hour of your message being sent.

8. Your rights

Under UK data protection law you have the right to:

• Be told what we hold about you and why — which is what this policy is for
• Get a copy of the information we hold about you
• Have mistakes corrected
• Have your information deleted, where we are not legally required to keep it
• Restrict or object to how we use your information
• Receive your information in a portable format, where it was provided under a contract

To use any of these, email revupyourwalls@gmail.com. It costs you nothing, and we will respond within one month. In practice, most requests are quick to deal with — your information is usually just an email thread.

If you are unhappy with how we have handled your information, please tell us first so we have a chance to fix it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.

9. Children

This site is not aimed at children, and we do not knowingly collect information from anyone under 13. If you believe a child has sent us their details, please contact us and we will delete them.

10. Keeping your information safe

This site is served over an encrypted connection, and the form is protected against automated abuse. No payment details are ever handled by this site. Access to our inbox is limited to the person who runs the business and is protected by a strong password and two-factor authentication. That said, no method of transmission over the internet is completely secure — please do not send us anything sensitive that we have not asked for.

11. Changes to this policy

If we change how we handle your information — for example, if we add a payment provider or start using analytics — we will update this page and change the date at the top. If the change is significant, we will say so clearly rather than quietly editing the text.

12. Contact us

For anything about this policy, your information, or your rights, email revupyourwalls@gmail.com or use the form on this site.