top of page

Privacy Policy

Last updated: 5th October 2026
 
Index of Truth respects your privacy. This policy explains how we collect, use and protect your personal information when you visit our website, purchase a print, contact us or subscribe to our mailing list.
 
1. Who we are
Index of Truth is operated by Steve Kraitt, trading as Index of Truth. Steve Kraitt is the data controller responsible for the personal information covered by this policy.
You can contact us about privacy matters at:
Email: info@indexoftruth.co.uk
Post: Steve Kraitt, Index of Truth, 1 Barnfield Shaw, Wisborough Green, Billingshurst, West Sussex RH14 0GJ, United Kingdom.
 
2. Information we collect
Depending on how you interact with us, we may collect:

  • Contact details: your name, email address, billing address, delivery address and telephone number.

  • Order information: the prints you purchase, transaction references, payment status, delivery details and records of returns or refunds.

  • Correspondence: information you provide when contacting us, including enquiries and any photographs supplied in connection with a damaged print.

  • Subscription information: your email address, any name you provide, and records of your marketing preferences and consent.

  • Account information: information associated with a customer account, if you create one.

  • Website information: your IP address, browser and device information, and information about your use of the website, subject to your cookie choices where applicable.

We collect information directly from you and automatically through the website. We may also receive payment confirmations from payment providers and delivery updates from carriers. Payments are processed through the payment providers available at checkout. Please do not send payment card details to us by email.
 
3. How and why we use your information
We use personal information only where we have an appropriate legal basis.
To process and fulfil orders
We use your contact, order and delivery information to take payment, produce and dispatch your print, send order updates and deal with returns or refunds. This is necessary to perform our contract with you. We also use information to take steps you request before purchasing, such as answering a question about a particular order.
To respond to general enquiries and provide customer support
We use correspondence and contact details for our legitimate interest in responding to people who contact us and providing an effective service.
To meet legal obligations
We retain necessary transaction records for accounting and tax purposes and use information where required to comply with applicable law.
To protect and administer the business
We use relevant information for our legitimate interests in maintaining website security, preventing fraud, keeping appropriate business records and establishing or defending legal claims. We consider your rights and interests when relying on this basis.
To send marketing emails
We use your subscription details with your consent to send the Collector’s Circle newsletter and other updates you have chosen to receive.
To understand website use
Where optional analytics tools collect personal information, we use this with your consent, as explained in the cookies section below.
If you do not provide information needed to process an order, such as a delivery address, we cannot fulfil that order. Subscribing to marketing emails is optional.
 
4. Collector’s Circle and marketing emails
If you subscribe, we may email you about new collections, prints, studio news and offers from Index of Truth. You can withdraw your consent at any time by clicking the unsubscribe link in an email or contacting info@indexoftruth.co.uk. Unsubscribing does not affect the lawfulness of earlier processing. It also does not prevent us from sending necessary communications about an order you have placed.
We may retain a minimal record of your unsubscribe request so that we can respect your preference.
 
5. Who we share information with
We share relevant information with service providers where necessary to operate the website and fulfil orders. These include:

  • Wix, which hosts the website and provides online shop and customer management services.

  • Payment providers, which process payments and refunds.

  • Postal and delivery services, including Royal Mail, which receive the contact and delivery details needed to deliver your order and provide tracking updates.

  • Email and IT service providers, which support communications and business administration.

  • Professional advisers, such as accountants or legal advisers, where necessary.

We may also disclose information to public authorities where legally required, or where lawful and necessary to protect our rights.
We share only information relevant to the purpose. Some providers, such as payment providers, also process information for their own legal and regulatory purposes under their own privacy policies. We do not sell your personal information.
 
6. Where information is processed
Although we currently deliver only within the United Kingdom, our website and service providers may process personal information outside the UK. Wix operates internationally. Its arrangements for international transfers are described in its Data Processing Addendum.
Where a transfer requires protection under UK data protection law, we use applicable safeguards. These may include UK adequacy regulations or approved contractual safeguards. You can contact us for further information about the safeguards relevant to your personal information and how to obtain a copy.
 
7. How long we keep information
We retain personal information only for as long as necessary for the purposes described in this policy. The retention period depends on the type of information and why we hold it:

  • Order and transaction records: for the period needed to meet accounting and tax requirements, manage returns and resolve or defend claims.

  • Enquiries and correspondence: until the matter is resolved and any relevant follow-up or dispute period has passed.

  • Customer account information: while the account remains in use, subject to any separate requirement to retain associated transaction records.

  • Mailing list information: while you remain subscribed, with periodic reviews of whether continued retention is appropriate.

  • Consent and unsubscribe records: for as long as needed to demonstrate and respect your choices.

  • Technical and cookie information: according to the purpose and duration of the relevant technology, as described in the website’s cookie information.

When information is no longer needed, we delete it securely or anonymise it.
 
8. Cookies and similar technologies
Our website uses cookies and similar technologies to support functions such as website security, the shopping basket and checkout.
Essential technologies are used where necessary to provide the service you request. Optional technologies, such as those used for analytics or advertising, are used only with your consent. You can accept or reject these through the website’s cookie controls and change your choices later through the cookie settings. The cookie information available through those controls explains the technologies used, their purposes and their duration. You can also manage cookies through your browser settings. Blocking essential cookies may prevent parts of the website or checkout from working properly.
 
9. Protecting your information
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure. Access is limited to those who need the information for the purposes described in this policy.
 
10. Your rights
Depending on the circumstances, you may have the right to:

  • Request access to your personal information.

  • Ask us to correct inaccurate or incomplete information.

  • Request deletion of your information.

  • Ask us to restrict how we use your information.

  • Receive certain information in a portable format or request its transfer to another provider.

  • Withdraw consent where our processing relies on it.

Your right to object: You can object to processing based on legitimate interests on grounds relating to your particular situation. You have an absolute right to object to the use of your information for direct marketing. To exercise your rights, contact info@indexoftruth.co.uk or write to the address above. These rights are subject to applicable conditions and exemptions. For example, we may need to retain certain transaction records despite a deletion request. We normally respond within one month. If a lawful extension applies, we will explain why. We may request information reasonably needed to verify your identity. Requests are normally free of charge.
 
11. Privacy complaints
If you are concerned about how we have handled your personal information, please contact us by email or post using the details above.
We will acknowledge your complaint within 30 days, investigate it, keep you informed and explain the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator. You do not need our permission to do so. Website: ico.org.uk/make-a-complaint
 
12. Changes to this policy
We may update this policy to reflect changes to the website, our services or legal requirements. The latest version will appear on this page with an updated date. Where required, we will bring significant changes to your attention or obtain fresh consent.

bottom of page