This page explains what ArtYourData processes, why that processing happens, and how to request access,
correction, deletion, or restriction of your data. It is written for customers in the UK, EEA, and other
regions with similar privacy rights.
Last updated: 14 October 2026
Who is responsible
ArtYourData is operated by George Rowe, 11 Dragons Court, Bristol, BS5 7XX, United Kingdom, who is responsible for the order, fulfilment, support, and artwork-production data you provide
directly to this site. When you choose to connect Strava, Strava remains responsible for the operation of
your Strava account and platform, while ArtYourData is responsible for the Strava data copied into this app
for your order or gift workflow.
Data we collect
Buyer and recipient details such as name, email address, and shipping information.
Order metadata, print choices, approval status, and fulfilment notes.
Artwork snapshots and rendered files created for an order.
Your saved choice about whether Art Your Data may feature a self-order artwork publicly.
Limited Strava athlete, activity, and stream data needed to build the purchased artwork.
GPX files and route data you choose to upload for an artwork.
Operational data such as session state, webhook events, and support correspondence.
With your permission, pseudonymous page, navigation, creator-step, and order-flow analytics.
Why we process it
To create, review, export, and fulfil the artwork you asked us to produce.
To send gift, approval, checkout, and support emails linked to an order.
To keep order records, investigate issues, and prevent misuse of the service.
To comply with legal, tax, accounting, and platform obligations.
Legal bases
Contract: processing needed to create and fulfil your order.
Consent: when you choose to connect Strava, share recipient details for a gift order, allow optional analytics, or allow public use of a self-order artwork.
Legitimate interests: support, fraud prevention, record keeping, and service reliability.
Legal obligation: where records must be kept for accounting, tax, or dispute handling.
Print fulfilment and service providers
Bicep Press receives the finished artwork, print specifications and delivery/contact information needed to
print and send your order. Stripe processes payments, Resend sends transactional emails, and Supabase stores
order records and artwork files. These services receive the information needed for their role in your order.
Artwork rights and public use
You keep any rights you already hold in your activity data and personal content. Art Your Data keeps its rights
in the templates, visual system, software, and production methods used to create the artwork. Buying a print
gives you the right to enjoy and share the delivered print and customer image files for personal,
non-commercial use; it does not transfer ownership of the Art Your Data design system.
We do not assume permission to publish customer artwork. At checkout, a self-order buyer can make a separate,
unchecked choice to let Art Your Data share the finished artwork on Instagram or our website.
The private order page lets them change that choice later. It does not affect the order. Gift orders are not eligible because the buyer may
not be the person whose activity data appears in the artwork.
An artwork may contain a recognisable route or location. Any name and exercise stats visible in the artwork
would be shared too. You can optionally give us your Instagram handle so we can tag you when sharing it.
This permission does not cover your email, delivery address, order reference, or activity data that is not
visible in the artwork. We record the wording, time and optional handle with your choice so we can demonstrate
what was agreed. Earlier permissions retain their original wording and scope.
You can withdraw permission at any time from the same private order page. We will stop new uses after the
withdrawal is received. You can also email hello@artyourdata.com
if you want help finding or removing an existing Art Your Data-controlled post.
Optional analytics
If you allow analytics, ArtYourData uses PostHog when configured to understand visits and progress through the website,
creator, checkout, recipient, and approval flows. We also keep daily design-choice totals on our own system,
without a visitor identifier, to understand popular templates, Styles, colours, text styles, fonts and effects.
Analytics is off until you choose to allow it. We do not
send names, email or postal addresses, order references, artwork text, or Strava activity details.
You can change your choice at any time. Declining analytics does not affect the website, creator, or an order. Read our cookies page for the storage we use.
Retention and deletion
We keep activity-linked design data and finished artwork files while an order is being made and for a limited
period afterwards to resolve problems or arrange a reprint. Our configured retention policy targets deletion of
rendered order files 90 days after an order is completed or cancelled, and purges unpaid abandoned checkouts
after 30 days. Orders with an unresolved issue are held for review. Cleanup runs nightly after a verified backup;
if a backup fails, deletion waits until a successful run.
Buyer, recipient and delivery details may be needed longer for support, accounting and legal claims. Our
configured policy redacts those details on completed or cancelled orders after two years; payment references
and financial records may be kept for applicable record-keeping duties. Strava connection tokens are cleared
when no longer needed for a completed order. Backup copies and records held by payment or email providers may
follow separate, limited retention periods.
If you want ArtYourData to delete your data sooner, email
hello@artyourdata.com with enough detail for us to identify the
order. If the request concerns Strava-connected data, include the order link, public token, or the email used
for the order.
Strava's API terms require us to delete Strava-derived personal data when a user requests deletion or revokes
the app's access, unless we must retain part of the record to satisfy another legal obligation.
Removing ArtYourData from your Strava apps ends access for all orders linked to that athlete. Contact us so
we can also check older orders, print-provider copies and backups. We will confirm the removal and explain
any remaining legal records. Files already downloaded and prints already sent cannot be recalled automatically.
Your rights
Access the personal data we hold about you.
Correct inaccurate or incomplete information.
Request deletion where continued retention is not required.
Object to, or request restriction of, certain processing.
Request a portable copy of the data you gave us where applicable.
Complain to your local supervisory authority if you believe your rights were not handled correctly.
How to make a request
Email hello@artyourdata.com and state whether you want access,
correction, deletion, restriction, or export. Please include the email address used for the order and any
order reference you have. We may need to verify your identity before making account-level changes.
If your request is primarily about data held by Strava inside your Strava account, you may also need to contact
Strava directly under Strava's own privacy process.
Strava-specific note
ArtYourData uses Strava OAuth to request access that is necessary for the artwork workflow. You can revoke that
access from your Strava connected-app settings, and you can ask ArtYourData to remove any Strava-derived copy
held for your order at the same time.