Privacy Policy for Andrew Usher Artworks
Last updated: 31st May 2025
This Privacy Policy explains how Andrew Usher Artworks (“we,” “us,” or “our”) collects, uses, and protects your personal data when you use our website, andrewusherartworks.co.uk (the “Website”). We are committed to protecting your privacy and handling your data in a transparent and lawful manner, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Andrew Usher Artworks is the data controller responsible for your personal data collected via this Website. Our website address is: https://andrewusherartworks.co.uk
What personal data we collect and why we collect it
We collect various types of personal data for specific purposes:
- Comments:
- Data Collected: When you leave a comment on our Website, we collect the data you enter into the comments form (your name, email address, and comment), your IP address, and your browser user agent string.
- Purpose: We collect this data to display your comment on the Website, prevent spam, and detect malicious activity.
- Legal Basis: Our legitimate interest in maintaining a functional and secure website and engaging with our visitors.
- Gravatar: An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to check if you are using it. The Gravatar service’s privacy policy is available here: https://automattic.com/privacy/. If your comment is approved, your Gravatar profile picture (if applicable) will be publicly visible next to your comment.
- Media:
- Important Note: If you upload images to the Website, you should avoid uploading images that contain embedded location data (EXIF GPS). This is because other visitors to the Website can download these images and extract any such location data from them. We are not responsible for the location data you choose to embed in your uploaded images.
- Cookies:
- We use cookies to enhance your experience on our Website. Cookies are small text files placed on your device by websites that you visit. They are widely used to make websites work more efficiently and to provide information to the website owners.
- Comment Cookies: If you leave a comment on our site, you may choose to save your name, email address, and website in cookies. These cookies are for your convenience so that you do not have to re-enter your details when you leave another comment. These cookies will last for one year.
- Purpose: To improve user convenience.
- Legal Basis: Your consent, indicated by your choice to opt-in.
- Login Page Cookies: If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
- Purpose: To ensure website functionality.
- Legal Basis: Our legitimate interest in providing a functional login process.
- Login & Screen Options Cookies: When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for one year. If you select “Remember Me,” your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
- Purpose: To facilitate your login and retain your display preferences.
- Legal Basis: Our legitimate interest in providing a user-friendly login experience.
- Article Editing/Publishing Cookies: If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
- Purpose: To track changes to articles.
- Legal Basis: Our legitimate interest in managing website content.
- Managing Cookies: Most web browsers allow some control of most cookies through the browser settings. You can find out how to manage cookies on popular browsers by visiting their respective privacy or help sections. Please note that blocking or deleting certain cookies may impact the functionality of our Website.
- Embedded content from other websites:
- Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has directly visited the other website.
- Please be aware: These external websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content. This includes tracking your interaction with the embedded content if you have an account and are logged in to that specific external website. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services.
- User Registration Data (if applicable):
- If you register on our Website, we store the personal information you provide in your user profile. All registered users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
- Purpose: To manage user accounts and provide access to user-specific features.
- Legal Basis: Performance of a contract with you (user registration) and our legitimate interest in managing user accounts.
Who we share your data with
We do not sell or rent your personal data to third parties. We may share your data in limited circumstances:
- Spam Detection: Visitor comments may be checked through an automated spam detection service. This service may process your comment data (including IP address and browser user agent string) to identify and prevent spam.
- Password Resets: If you request a password reset, your IP address will be included in the reset email for security purposes.
- Legal Obligations: We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
How long we retain your data
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Comments: If you leave a comment, the comment and its associated metadata are retained indefinitely. This is so we can recognise and automatically approve any follow-up comments, rather than holding them in a moderation queue.
- Registered Users: For users who register on our Website, we retain their personal information in their user profile for as long as their account remains active.
- Cookies: Retention periods for cookies vary as described in the “Cookies” section above.
What rights you have over your data
Under UK GDPR, you have the following rights regarding your personal data:
- Right to Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
- Right to Erasure (“Right to be Forgotten”): You have the right to request that we erase your personal data, subject to certain conditions (e.g., we are not obliged to keep data for administrative, legal, or security purposes).
- Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
- Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
- Right to Object: You have the right to object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
- Rights in relation to automated decision making and profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you, subject to the conditions mentioned above.
To exercise any of these rights, please contact us using the details provided below.
Where your data is sent
Your personal data may be processed and stored on servers located within the United Kingdom or the European Economic Area (EEA).
As noted under “Who we share your data with,” visitor comments may be checked through an automated spam detection service, which may involve transferring data outside the UK/EEA. We ensure that any such transfers comply with UK GDPR requirements by relying on appropriate safeguards, such as Standard Contractual Clauses, or by transferring to countries deemed to provide an adequate level of data protection.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the “Last updated” date.
Contact Us
If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise any of your rights, please contact us via the contact details provided on our Website, andrewusherartworks.co.uk.
Complaints
If you are not satisfied with our response to a privacy query or believe we are not processing your personal data in accordance with the law, you have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. Their website is: www.ico.org.uk.
