Last updated: 1 September 2026

AA Images Ltd (“AA Images”, “we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit or shop with us at aa-images.co.uk (the “Site”), in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

AA Images Ltd is a company registered in England and Wales (company number 13171115), with a registered address of Orchard Cottage, Moccas, Hereford, HR2 9LQ, United Kingdom.

We are the data controller for the personal data described in this policy. If you have any questions about this policy or how we handle your data, please contact us at admin@aa-images.co.uk.

AA Images Ltd is registered with the Information Commissioner’s Office (ICO) as a data controller.

2. Information we collect

Information you give us directly. When you create an account, place an order, or contact us, we collect information such as your name, billing and delivery address, email address, telephone number, and order details.

Payment information. When you make a purchase, your payment card details are collected and processed directly by our payment provider, WooCommerce Payments (operated by WooCommerce/Automattic and its payment processing partners). We do not store your full card number, expiry date, or CVV on our servers.

Information collected automatically. When you browse the Site, we (and the third-party services described in Section 4) automatically collect certain technical information, including your IP address, browser type, device information, pages viewed, and how you interact with the Site, using cookies and similar technologies.

Account information. If you create a “My Account” login, we store your login credentials (your password is stored in encrypted form) and your order history.

3. How we use your information

We use your personal data to:

  • Process and fulfil your orders, including printing, packing, and shipping your art prints, maps, and other products
  • Communicate with you about your order, including confirmations, dispatch notices, and customer service enquiries
  • Process refunds and returns in accordance with our Refund and Returns Policy
  • Prevent and detect fraud and abuse of the Site
  • Improve the Site, our products, and our customer experience
  • Send you marketing communications, where you have consented to receive them (you can opt out at any time — see Section 8)
  • Comply with our legal obligations, including tax and accounting requirements

The legal bases we rely on are: performance of a contract (processing your order), legal obligation (tax and accounting records), legitimate interests (fraud prevention, improving our Site), and consent (marketing communications and non-essential cookies).

4. Cookies and analytics

We use cookies and similar technologies on the Site. Full details of the specific cookies we use, their purpose, and how long they last are set out in our Cookie Policy.

In summary, we use:

  • Strictly necessary cookies to operate the shopping basket, checkout, and account login. These cannot be switched off.
  • Analytics cookies (Google Analytics) to understand how visitors use the Site, so we can improve it. These only run if you consent.
  • Advertising cookies (Google Ads) to measure the effectiveness of our advertising and, where you have consented, to show you relevant ads. These only run if you consent.

We use Google Consent Mode, meaning analytics and advertising cookies are set to “denied” by default and only activate once you give consent through our cookie banner. You can change your cookie preferences at any time using the consent settings link in the site footer.

5. Who we share your data with

We share your personal data with the following categories of recipients, only as necessary to run our business:

  • Payment processors — WooCommerce Payments and its underlying payment partners, to process your payment securely.
  • Delivery and courier companies — to deliver your order to you. This includes providing your name and delivery address to the courier we use for your order.
  • IT and hosting providers — who host the Site and store our data on our behalf, under contract and subject to appropriate data protection safeguards.
  • Analytics and advertising providers — Google (Google Analytics and Google Ads), only where you have given consent, to help us understand Site usage and measure advertising performance.
  • Professional advisers and authorities — where required to comply with a legal obligation, such as HMRC for tax purposes, or law enforcement where legally required.

We print and fulfil all orders ourselves and do not use a third-party print-on-demand or dropshipping company, so your order and image data are not shared with any external print fulfilment partner.

We do not sell your personal data to third parties.

6. International transfers

Some of the third-party services we use (such as Google) may transfer data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as the UK’s International Data Transfer Addendum or adequacy regulations, to protect your data to UK GDPR standards.

We also sell and ship products to customers in a number of countries outside the UK. Where you place an order with us from outside the UK, your order and delivery information will necessarily be processed and transferred internationally as part of fulfilling that order.

7. How long we keep your data

We keep your personal data only for as long as necessary for the purposes set out in this policy, including to satisfy any legal, accounting, or reporting requirements. Order and transaction records are generally kept for at least 6 years to meet UK tax and accounting obligations. If you create an account, we retain your account data until you ask us to delete it or your account becomes inactive for an extended period.

8. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request erasure of your data, in certain circumstances
  • Restrict or object to our processing of your data
  • Data portability, where technically feasible
  • Withdraw consent at any time, where we rely on consent (for example, marketing emails or non-essential cookies)

To exercise any of these rights, please email admin@aa-images.co.uk. We will respond within one month, as required by law.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe we have not handled your personal data properly.

9. Marketing communications

If you have opted in to receive marketing emails from us, you can unsubscribe at any time using the link in any marketing email, or by emailing admin@aa-images.co.uk. Opting out of marketing will not affect order confirmation or service emails, which we send as part of fulfilling your order.

10. Children’s privacy

The Site is not directed at children, and we do not knowingly collect personal data from anyone under the age of 16.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The “Last updated” date at the top of this page shows when it was last revised. We encourage you to review this page periodically.

12. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

AA Images Ltd
Orchard Cottage, Moccas, Hereford, HR2 9LQ, United Kingdom
Email: admin@aa-images.co.uk