Privacy Rights
Your privacy rights
You have rights over the personal information I hold about you, and using them is free and straightforward. This page explains each right and how to use it. My Privacy Policy explains what I collect and why.
These rights come from UK GDPR. If you live in the EU, the EU GDPR gives you the same rights, and you can use them in exactly the same way.
What you can ask for
I never make decisions about you by automated means alone, and I never use your information for marketing.
| Your right | What it means |
|---|---|
| See your information | Ask for a copy of everything I hold about you, and how I use it. This is often called a subject access request. |
| Correct it | Ask me to fix anything that's wrong or incomplete, such as a changed address. |
| Delete it | Ask me to delete your information when I no longer need it, or if I shouldn't have it. |
| Restrict how I use it | Ask me to keep your information but stop using it, for example while I check something you've said is wrong. |
| Object | Ask me to stop using your information where I rely on my legitimate interests, such as the spam check on my contact forms. |
| Take it with you | Ask for the information you gave me in a common digital format, or ask me to send it to someone else. |
| Withdraw consent | Where I've asked for your consent, you can change your mind at any time. |
How to make a request
Email me at esthersimsstudio@gmail.com and tell me which right you want to use. You don't need special wording or a form.
- It's free. I'll only charge, or refuse, if a request is clearly unfounded or excessive, and I'll explain why.
- I may check it's you. If I can't be sure who's asking, I'll ask for something to confirm your identity before sharing or changing anything. I'll only use it for that check.
- I'll reply within one month. If a request is complex, I may need up to two more months; I'll tell you within the first month if so.
- If I need more detail, the month starts once I have it.
When I can't do everything you ask
Some rights have legal limits. If I can't do all of what you've asked, I'll tell you which part and why.
- Invoices and payment records have to be kept for 6 years for tax, so I can't delete them early. I can stop using them for anything else.
- A commission in progress needs your name, address and reference photos to finish and deliver. If you ask me to delete them, I'll check with you whether you want to cancel the commission.
- Information about other people, such as someone else in a family portrait, may be left out of a copy I send you to protect their privacy.
If you're not happy
If you disagree with how I've handled your request, email me at esthersimsstudio@gmail.com with "Privacy complaint" in the subject line. I'll acknowledge it within 30 days and look at it again.
If you're still not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. If you live in the EU, you can also contact the data protection authority in your country.
I'll update this page if the law or how I handle your information changes, and change the "Last updated" date at the top.