The General Data Protection Regulation (GDPR) seeks to protect and enhance the rights of data subjects. These rights cover the safeguarding of personal data, protection against the unlawful processing of personal data and the unrestricted movement of personal data within the EU. This policy sets out how I collect and use data and information from my customers. I keep your data confidential and only use it and share it as detailed in this privacy policy. I do not sell your data to third parties. I will comply with the Data Protection Act 1998 and the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) in relation to your data.



I am a professional artist, trading as a limited company registered as Carrie McKenzie Ltd. You can contact me through my email:, my mobile: 07854677767, or the contact page on my website:



Information collected is solely for the purposes of contacting you, either in relation to a course booking, to answer an enquiry, to process a sale from my website, or to advise you about my courses, workshops and exhibitions.


The data I collect is the personal information needed:

  • for you to book on to one of my art courses or workshops, so I can contact you to confirm the booking, or if I need to cancel or change a workshop;
  • to answer an enquiry from you about my services, such as requesting a painting commission, or to provide a demonstration or workshop for an art society;
  • for you to purchase one of my artworks from my website, and process payment;
  • to provide you with an invoice if you require one.


This can include any or all of the following:

  • the full name(s) and address(es) of the person(s) making the booking/enquiry/purchase;
  • the email address of the person(s) making the booking/enquiry/purchase;
  • the telephone numbers of the person(s) making the booking/enquiry/purchase.


How I Store Your Data and Keep it Secure

  • I take all reasonable precautions, technical and administrative, to store your information in a secure manner and to prevent its loss or misuse;
  • Your data will be kept in a password protected computer and accessed only by myself;
  • Invoices for purchases or services are also stored on a password protected computer and form part of my accounting records which have to be kept for seven years for the purposes of HM Revenue and Tax, after which they are destroyed;
  • Purchases from my online shop are processed through a safe and secure Paypal environment. (Paypal are responsible for their own privacy statements);
  • I do not share, analyse or sell your data to any third parties – its sole purpose is for contact and communication with you about your booking/enquiry/purchase.


There are links to third-party websites of interest on my website, but I have no control over the operations of other websites. Such third-party websites are not my responsibility and you should supply any data to them with caution read their own privacy policy.



Please let me know if the personal information that I hold about you needs to be corrected or updated. I may update this privacy policy from time to time by posting an updated version on my website.



You are entitled to change, erase, block or modify any inaccuracies in your personal data, by contacting me using my contact details above. If you wish to have your data erased you should contact me on the details above and I will remove you from my distribution list.