Privacy Policy

Last updated: 11 May 2026

1. Who We Are

This website is operated by Verity James, a visual artist based in the Scottish Borders, UK. When this policy refers to ‘we’, ‘us’, or ‘our’, it means Verity James (sole trader).

If you have any questions about this policy or how your data is handled, please contact us at:

helloverity@gmail.com

2. What Personal Data We Collect

Contact form

When you use the contact form on this website, we collect:

  • Your name
  • Your email address
  • Any information you choose to include in your message

Newsletter sign-ups

If you choose to subscribe to our newsletter, we collect:

  • Your email address
  • Your name (if provided)

3. How We Use Your Data

We use the personal data you provide only for the purposes for which it was given:

  • Contact form submissions are used solely to respond to your enquiry.
  • Newsletter sign-ups are used to send you occasional updates about our work, exhibitions, workshops, and available paintings. You can unsubscribe at any time.

We do not use your data for automated decision-making or profiling, and we will never sell or rent your personal data to third parties.

4. Legal Basis for Processing (UK GDPR)

We process your personal data on the following legal bases:

  • Legitimate interests — for responding to contact form enquiries.
  • Consent — for sending newsletters. You may withdraw your consent at any time by clicking the unsubscribe link in any email, or by contacting us directly.

5. Third-Party Services

Brevo (newsletter platform)

We use Brevo (formerly Sendinblue) to manage our mailing list and send newsletters. Your email address and name (if provided) are stored on Brevo’s servers. Brevo is a European company headquartered in Paris, France, and processes data in accordance with the UK GDPR and EU GDPR.

You can read Brevo’s privacy policy at: https://www.brevo.com/legal/privacypolicy/

Contact form

Our website contact form is provided via our WordPress website. Submissions may be stored temporarily in our WordPress database. We do not use any third-party contact form services that transfer your data outside of our hosting environment.

Website hosting

This website is hosted by IONOS SE, a German company. Your data is stored on servers located within the European Economic Area (EEA). IONOS processes data in compliance with UK GDPR and EU GDPR.

6. Cookies

Our website uses only essential cookies necessary for the site to function (for example, WordPress session cookies). We do not use any tracking, advertising, or analytics cookies.

You can control cookie settings through your browser. Please note that disabling essential cookies may affect how the website functions.

7. How Long We Keep Your Data

  • Contact form enquiries: We retain correspondence for up to 2 years, or until it is no longer necessary for the purpose for which it was collected.
  • Newsletter subscribers: We retain your data for as long as you remain subscribed. You may unsubscribe at any time.

8. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (the ‘right to be forgotten’)
  • Object to or restrict how we process your data
  • Withdraw consent at any time (where processing is based on consent)
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact us at the email address above. We will respond within one calendar month.

9. Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to complain to the UK’s data protection authority:

Information Commissioner’s Office (ICO)

Website: https://ico.org.uk

Helpline: 0303 123 1113

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date at the top. We encourage you to review this policy periodically.