Privacy Policy
Who I am
I'm Esther Sims, and I run Esther Sims Studio on my own from Derby, UK. This policy explains what personal information I collect when you visit esthersimsstudio.co.uk or commission a painting from me, and what happens to it.
I'm the data controller for your information under UK GDPR. If you have any questions, contact me:
- Email: esthersimsstudio@gmail.com
- Phone: +44 7940 561120
- Address: 27 Cobden Street, Derby, UK
What information I collect
I only collect what you give me, plus the basic technical data any website receives.
- When you get in touch through a contact form or by email: your name, email address, message, and anything else you choose to tell me. The commission form also asks for your UK delivery address, what you'd like painted, how you heard about me, and whether you'd like a gift voucher.
- When you commission a painting: the photos and details of your house, pet or people that you send me for reference, your delivery address, and records of what you ordered and paid.
- When you visit the website: your browser sends your IP address and device details to my website host and to the security check on my contact forms. I don't use this to build a profile of you.
Please don't send me sensitive information, such as health details, that the commission doesn't need.
How I use it and why
I use your information only to reply to you, paint and deliver your commission, and keep the records the law requires. I never sell it or use it for advertising.
I don't send marketing emails. If that changes, I'll only send them with your consent, and you can unsubscribe at any time.
| What I do | Lawful basis under UK GDPR |
|---|---|
| Reply to your enquiry and quote for a commission | Taking steps at your request before a contract |
| Paint, invoice and deliver your commission | Performing my contract with you |
| Keep invoices and payment records | Legal obligation (UK tax rules) |
| Protect the contact form from spam and abuse | Legitimate interests (keeping the site secure) |
Cookies and tracking
This website doesn't use analytics, advertising or tracking cookies, so there's no cookie banner to accept.
My contact forms use Cloudflare Turnstile to check that a real person, not a spam bot, is sending the message. Turnstile looks at technical signals from your browser, such as your IP address, and may use strictly necessary cookies for that check. It doesn't track you across other websites.
The Instagram and LinkedIn icons are plain links. Nothing from those platforms loads until you click one, at which point their own privacy policies apply.
Who I share it with
I share your information only with the services that help me run the studio, and only what each one needs.
I may also share records with my accountant or HMRC where tax law requires it, or with the police or courts if I'm legally required to.
| Service | What it does for me | Where its based |
|---|---|---|
| Webflow | Hosts my website and receives contact form messages | USA |
| Cloudflare | Runs the spam check on my contact forms | USA |
| Google (Gmail) | My studio email | USA |
| jsDelivr | Delivers some of my website's code, so receives your IP address when pages load | Global network |
| Delivery service | Delivers your finished painting to the address you give me | UK |
International transfers
Some of the services above store data in the USA or the EU, outside the UK. The EU has a UK adequacy decision, so data stored there has the same protection as in the UK. For US providers, I rely on the UK–US data bridge where the provider is certified under it, or on the UK International Data Transfer Addendum where it isn't. Contact me if you'd like details for a particular service.
How long I keep it
I keep your information only as long as I need it, then delete or anonymise it automatically.
| Information | How long I keep it |
|---|---|
| An enquiry that doesn't become a commission | 2 years after I last hear from you |
| Commission, invoice and payment records | 6 years after the commission ends, as UK tax rules require; after that, your name and contact details are anonymised |
| Reference photos you send | Until the commission is finished and delivered, unless you agree I can keep them |
| Emails | As long as they relate to an open enquiry or commission, or the records above |
Your rights
You can ask me at any time to see, correct or delete the information I hold about you. You can also ask me to restrict how I use it, object to it being used, or send it to you in a portable format. Some rights have limits, for example I must keep invoices for 6 years even if you ask me to delete them.
To make a request, email esthersimsstudio@gmail.com. I'll reply within one month, and it's free. My Privacy Rights page has more detail.
If you're unhappy with how I've handled your information, please tell me first so I can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
I'll update this policy if the way I handle your information changes, and change the "Last updated" date at the top. If a change affects your commission, I'll tell you directly.