Privacy Policy

This policy explains how Good Ereseh, a sole trader based in London, United Kingdom, collects and uses personal information when you visit the website, contact the studio, buy artwork or use the AI Commission Studio.

1. Information collected

Depending on how you use the website, Good Ereseh may collect:

• your name, email address and telephone number;
• billing, shipping and delivery information;
• commission descriptions, notes and AI chat content;
• reference photographs and other images you choose to upload;
• order, quotation, payment status and transaction records;
• messages sent through contact or commission forms;
• technical data such as browser, device, IP address and security or server logs where generated by the website or its service providers;
• cookie and similar-technology information where applicable.

2. Why information is used

Personal information may be used to:

• respond to enquiries;
• understand and review commission requests;
• prepare quotations, concepts and artwork;
• process orders and payments;
• package, ship and deliver artwork;
• communicate about an order or commission;
• maintain business, accounting and transaction records;
• protect the website, customers and business against misuse or fraud;
• comply with legal and regulatory obligations.

3. Lawful bases

Depending on the activity, Good Ereseh may process personal information because it is necessary to take steps at your request before entering a contract, to perform a contract with you, to comply with a legal obligation, or for legitimate business interests that do not override your rights. Where consent is legally required, processing will rely on consent.

4. AI Commission Studio

The Commission Studio uses an AI service to help turn customer messages and reference material into a clearer commission conversation and brief. Information you submit in the AI chat may be sent to the AI service so that it can generate a response.

Reference photographs may be processed by the AI service for the purpose of understanding the commission request. The customer-facing Commission Studio is not intended to regenerate or replace an uploaded reference photograph.

The AI assistant does not make the final decision to accept a commission, determine a binding price or approve payment. Good Ereseh reviews commission requests personally.

5. Service providers and sharing

Good Ereseh uses third-party providers to operate the website and fulfil customer requests. Depending on the service used, information may be processed by providers supporting:

• AI processing;
• website and backend hosting;
• database and private file storage;
• transactional email;
• payment processing;
• delivery or courier services where required.

Current technical providers may include Google for AI services, Railway for backend hosting, Supabase for database and file storage, Resend for transactional email and Stripe for payment processing. These providers process information under their own terms and privacy arrangements as applicable.

Personal information may also be disclosed where required by law, to establish or defend legal claims, or to protect customers, the business or others from fraud or misuse.

6. Payments

Payment card information is handled by the payment provider rather than being intentionally stored in full by Good Ereseh. Good Ereseh may receive transaction identifiers, payment status, customer details and other information required to manage the order.

7. Retention

Personal information is kept only for as long as reasonably necessary for the purpose for which it was collected, including completing commissions and orders, handling enquiries, resolving disputes, meeting tax or accounting duties and protecting legal rights.

Reference photographs and commission conversations may be retained while a commission is active and for a reasonable period afterward where needed for records, disputes, repeat work or legal obligations. Retention practices will be reviewed as the service develops.

8. Security

Reasonable technical and organisational measures are used to protect personal information. Private commission references are intended to be stored in access-controlled storage rather than openly published as website assets. No internet service can guarantee absolute security.

9. Your rights

Depending on the circumstances, UK data protection law may give you rights to ask for access to your personal information, correction, deletion, restriction, portability or to object to certain processing. You may also withdraw consent where processing is based on consent.

To make a privacy request, email [email protected]. You also have the right to raise a concern with the UK Information Commissioner's Office.

10. International processing

Some technology providers may process or store information outside the United Kingdom. Where this occurs, Good Ereseh will rely on the safeguards and transfer mechanisms applicable to the relevant provider and service.

11. Children

The website is not designed to invite children to submit commissions independently. If you provide a photograph of a child or other person, you must have the authority or permission needed to provide and use that photograph for the commission.

12. Changes to this policy

This policy may be updated when the website, service providers or data practices change. The latest version will be published on this page with an updated date.