Your information,
handled carefully.

Gary Stanley is the controller responsible for personal information used through this website and in connection with enquiries and commissioned work.

Independent Designer & Digital Artist
Crediton, Devon, United Kingdom
Email: me@garystanley.co.uk

I may collect and use:

• your name, email address, project type, timing and message when you use the contact form;
• information you provide in later emails, calls, meetings or project correspondence;
• contract, quotation, invoicing and payment records where work is commissioned;
• normal website security and server-log information, which may include an IP address, browser or device details, requested pages and the date and time of a request;
• your privacy choice, stored so the website can remember whether you accepted or rejected optional Analytics; and
• website-usage information collected by Google Analytics only after you have accepted Analytics.

The contact form is not intended for sensitive or special-category information. Please avoid including it unless it is genuinely necessary for your enquiry.

You are not legally required to use the contact form or provide personal information. However, I cannot respond to an enquiry without a valid way to contact you and enough information to understand what you are asking.

I do not use information collected through this website to make solely automated decisions that have legal or similarly significant effects on you.

Google Analytics is optional and switched off by default. When you accept it, it helps me understand general matters such as which pages are used, broad device and browser categories, referring sources and journeys through the site.

I do not use Analytics for advertising, remarketing or decisions about individual visitors. My implementation disables advertising personalisation and Google Signals. The separate cookie notice lists the storage used and explains how to change your choice.

Open privacy choices

Personal information may be processed by the companies that provide website hosting and email services to me. Google receives Analytics information only when you accept Analytics. Google Fonts and the jsDelivr content-delivery network may receive normal connection information, such as an IP address and browser details, when your browser requests their files.

I may also share information with professional advisers, insurers, payment providers or public authorities where this is reasonably necessary, required by law, or needed to establish, exercise or defend legal claims. I do not sell personal information.

Some service providers may process information outside the United Kingdom. Where UK data-protection transfer rules apply, I rely on an applicable UK adequacy regulation or appropriate safeguards used by the relevant provider, such as approved contractual protections. Further information about a provider’s safeguards can be requested using the contact details above.

• Enquiries that do not become commissioned projects are normally kept for up to 12 months after the last meaningful contact.
• Client correspondence, contracts and project records are normally kept for up to six years after the work ends, where needed for contractual, insurance or legal purposes.
• Invoices and accounting records are kept for the period required by tax and accounting law, normally six years.
• Routine server logs are normally kept for up to 30 days, unless they are needed for a security investigation.
• The browser storage recording your privacy choice lasts for up to six months.
• Google Analytics event and user data are retained in the Analytics property for two months. Analytics cookies set through this website are configured for up to six months.

I may retain particular information for longer where the law requires it or where it is reasonably necessary for an active dispute, complaint, security incident or legal claim.

Depending on the circumstances and the lawful basis being used, you may have rights to:

• ask for access to your personal information;
• ask for inaccurate or incomplete information to be corrected;
• ask for information to be erased;
• ask for processing to be restricted;
• object to processing based on legitimate interests;
• receive eligible information in a portable format; and
• withdraw Analytics consent at any time, without affecting processing that occurred before withdrawal.

Your right to object: where I rely on legitimate interests, you can object to that use of your information. I will stop unless I can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the information is needed for legal claims.

To exercise a right, email me@garystanley.co.uk. I may need enough information to confirm your identity and understand the request.

You can make a data-protection complaint by emailing me@garystanley.co.uk with the subject Data protection complaint. Please explain what you believe has gone wrong and the outcome you are seeking.

I will acknowledge a data-protection complaint within 30 days, make appropriate enquiries, keep you informed where an investigation is continuing, and communicate the outcome without undue delay.

You may also complain to the Information Commissioner’s Office. The ICO will often expect you to give the organisation an opportunity to respond first. Visit the ICO complaints service.

I use reasonable technical and organisational measures intended to protect personal information. No website or email system can be guaranteed completely secure, so please do not send information that is unnecessary for the enquiry.

This notice may be updated when the website, service providers or legal requirements change. The date at the top shows the latest substantive update.