Last updated: 10 October 2026

This policy explains what personal information is collected when you visit johnsheeran.art, sign up for news, read A Long Apprenticeship, make an enquiry or buy a painting, and what is done with it. In short: only what is needed, never sold, never shared for anyone else's marketing.

Who is responsible for your information

John Sheeran, trading as John Sheeran Art
c/o Studio Graziani, Via P. Togliatti, 1/c, 06064 Tavernelle di Panicale (PG), Italy
P.IVA 04055870549
Email: john@johnsheeran.art

John Sheeran is the data controller under the EU General Data Protection Regulation (GDPR) and Italian data protection law.

What is collected, and why

News and the newsletter. If you sign up, your email address (and your name, if you give it) is used to send you news of new collections, events and A Long Apprenticeship. The legal basis is your consent. Every email has an unsubscribe link, and you can withdraw consent at any time.

Enquiries. If you use the Enquire form or email, your name, email address and message are used to reply to you and to deal with your enquiry. The legal basis is taking steps at your request before a possible purchase, or a legitimate interest in answering you.

Purchases. If you buy a work, your name, billing and delivery address, email, phone number and order details are used to complete the sale, deliver the work, issue the invoice required by Italian law and keep tax records. Card payments are handled by the payment provider; card details are never seen or stored by John Sheeran Art. The legal bases are performing the contract and complying with legal obligations.

Visiting the site. The website platform records basic technical information, such as your browser, device, approximate location and the pages you view, to keep the site secure and working and to understand, in aggregate, how it is used. See Cookies below.

Who else handles your information

Information is shared only with the service providers needed to run the site and the business, each acting on John Sheeran Art's instructions:

• Squarespace (website, forms, online shop)

• Substack (A Long Apprenticeship newsletter)

• Brevo (email newsletters)

• Google Workspace (email)

• Stripe (card payments)

• Couriers and framers (delivery of a work you have bought)

• The accountant, Studio Graziani, and the Italian tax authorities (invoices and tax records)

Your information is never sold, rented or passed to anyone for their own marketing.

Transfers outside Europe

Some of these providers are based in, or store data in, the United States. Where that happens, the transfer is protected by the EU-US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

How long it is kept

Newsletter details are kept until you unsubscribe. Enquiries are kept for as long as needed to deal with them, and for no more than two years after the last contact unless they lead to a sale. Sales and invoice records are kept for ten years, as Italian tax law requires.

Cookies

The site uses cookies that are strictly necessary for it to work (for example, to keep a shopping basket or remember a cookie choice) and, where you allow them, analytics cookies that show in aggregate how the site is used. No advertising cookies are used. You can change your choice through the cookie banner or your browser settings.

Your rights

You can ask to see the information held about you, to correct it, to delete it, to restrict or object to its use, or to receive a copy in a portable format. Where use is based on consent, you can withdraw it at any time. To do any of this, email john@johnsheeran.art. You will get a reply within one month.

If you are unhappy with how your information has been handled, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority where you live.

Children

This site is not aimed at children under 16, and information about them is not knowingly collected.

Changes

If this policy changes, the new version will be posted here with a new date.