Privacy policy — Daniel Crompton

This site is run by Daniel Crompton, a sole trader based in North Yorkshire, United Kingdom, trading as dtcrompton.com ("I", "me"). I am the data controller for the personal data described here. You can reach me using this contact form or by emailing me at hello@dtcrompton.com. A postal address for formal correspondence is available on request.

1. What I collect

When you contact me, I receive your name, email address and message. If you subscribe to the newsletter, your email address is collected and held by Substack, not me. If you buy a print, I collect your name, delivery address and email; your payment is processed by Stripe, and I never receive or store your full card details. The site uses privacy-friendly analytics that record broad, aggregated usage without cross-site tracking or advertising profiles.

2. Why I use it, and my lawful basis

I use enquiry details to reply to you (my legitimate interest in answering you). I use order and delivery details to take payment, make and send your print, and keep tax records (performance of our contract, and compliance with a legal obligation). I send the newsletter only where you have opted in (your consent), which you can withdraw at any time. I do not sell your data, and there is no automated decision-making or advertising.

3. Who I share it with

A small number of trusted providers process data on my behalf or as their own controllers under their own policies: Stripe (payments), Substack (newsletter), Cloudflare (hosting and security), and in some cases, my print and delivery partners (to produce and post your order). I share only what each needs for its task.

4. Transfers outside the UK

Some of these providers are based in, or store data in, the United States. Where personal data is transferred outside the UK, it is protected by appropriate safeguards, such as the UK's adequacy regulations or the International Data Transfer Agreement and standard contractual clauses.

5. How long I keep it

Order and transaction records are kept for six years to meet UK tax and accounting requirements. Enquiry correspondence is kept only as long as needed to deal with your query and for a reasonable period afterwards. Newsletter data is kept until you unsubscribe.

6. Your rights

You have the right to access the personal data I hold about you, to have it corrected or erased, to restrict or object to its use, and to receive it in a portable form, as well as to withdraw consent to marketing at any time. To exercise any of these, contact me and I will respond within one month.

7. Cookies

The site uses only essential cookies needed to make it work and the checkout secure, together with privacy-friendly analytics. It does not use advertising or cross-site tracking cookies.

8. Complaints

I would always rather hear from you first, but you have the right to complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how your data has been handled.