Privacy Policy

Who I am

This website, jessicabeesly.co.uk, is operated by me, Jessica Beesly, an individual working as a sole trader and based in the United Kingdom. I run this site as a personal portfolio showcasing my work as a graphic designer, artist and photographer.

For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, I am the "data controller" responsible for your personal data. In this policy, "I", "me" and "my" refer to Jessica Beesly, and "you" and "your" refer to you as a visitor to the site.

If you have any questions about this policy or about how I handle your data, you can contact me by email at babiastudios@gmail.com. This is the only contact method on the site: there is no contact form, no user accounts or login, no shop or payments, and no newsletter or mailing list.

The personal data I collect

This is a simple portfolio site, so I collect very little personal data. In practice it falls into three categories.

Information you send me

If you choose to email me at babiastudios@gmail.com, or to message me through one of the social profiles linked from this site, I receive whatever information you decide to include. That is typically your name, your email address (or social handle) and the contents of your message. I only ever receive this information because you have chosen to send it. There is no contact form anywhere on this site, so nothing is ever submitted to me through the site itself.

Technical information handled automatically

Any website has to be sent to you over the internet, so a little technical information is handled automatically whether or not you consent to anything. My hosting provider records standard server logs in order to deliver the site and keep it running. Those logs typically contain your IP address, the date and time of the request, the page or file requested and your browser's user-agent string. The site's typeface is served from this same hosting rather than from a font CDN, so no request for it reaches a third party; this is explained in Typefaces below.

Cookies and analytics data

This site sets no cookies at all and runs no analytics. If you press "Accept all" in the consent banner, that acceptance is recorded in your own browser, but no analytics or usage data is collected even then, because no analytics provider is connected to the site. Should I ever connect one, this policy will be updated first to name the provider and say what it collects.

The site does not otherwise collect personal data. It has no forms of any kind, and I do not knowingly collect any special category (sensitive) data through it.

How I use your data, and my lawful bases

Under the UK GDPR, I must have a "lawful basis" for using your personal data. The bases I rely on, and the purposes they relate to, are set out below.

• Responding to and managing enquiries you send me. I use the details in your message to read it, reply to you and keep a reasonable record of our correspondence. My lawful basis is my legitimate interests (UK GDPR Article 6(1)(f)) in running my freelance practice and responding to people who get in touch. Where your message is about possible work together, I also rely on taking steps at your request before entering into any agreement.
• Delivering and protecting the website. The server logs described above are what make it possible to serve the site to you, keep it working and guard it against abuse. My lawful basis is my legitimate interests (UK GDPR Article 6(1)(f)) in publishing a working, secure website.
• Optional analytics cookies. If analytics is ever enabled, my lawful basis will be your consent (UK GDPR Article 6(1)(a)), given through the cookie banner. You can withdraw that consent at any time (see Cookies and consent below).

I do not use your data for automated decision-making or profiling, and I do not sell your personal data to anyone.

Cookies and consent

A consent banner appears the first time you visit the site. The short and honest version is that there is very little to consent to: this site sets no cookies at all, and no analytics or third-party tracking scripts are loaded, whichever button you press.

The banner offers two choices:

• Accept all: records that you are happy for optional analytics to be used. Nothing loads today, because no analytics provider is connected. If one is ever added, it would run only for visitors who have made this choice.
• Reject non-essential: records that you are not. On a first visit, closing the banner with the × button or the Escape key does the same thing. If you reopen the banner later to change your mind, closing it leaves your saved choice exactly as it was.

Your choice is stored on your own device using your browser's localStorage, under the key jb-cookie-consent, with the value all or essential. That single entry is the only thing this site stores on your device. It is not a cookie, it is never sent to me or to any server, and it is not used to identify you. It exists purely so that the banner does not ask you again on every page.

Changing your mind. You can reopen the cookie banner at any time and make a different choice; the same control appears as "Cookies" in the footer of every page. You can also remove the stored preference altogether by clearing this site's data (site data, cookies and local storage) in your browser settings, after which the banner will ask again on your next visit. Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it.

Typefaces

The site is set in one typeface: Inter. It is served from this website's own hosting, not from Google Fonts or any other third-party font service.

That is a deliberate choice. Loading fonts from an external service would send your IP address and browser details to that service on every page view, before you had any opportunity to make a choice about it. Because the files are served from here, no request for them goes anywhere else, and no third party learns that you visited.

Inter is used under the SIL Open Font License 1.1, which permits it to be redistributed and self-hosted in this way.

Who I share your data with

I keep data sharing to a minimum and I do not sell your personal data. The recipients involved in running this site are:

• My website hosting provider, which stores and serves the site and processes basic technical information (such as server logs) in order to deliver it to you.
• Google, as the provider of Gmail, because emails you send me arrive in a Gmail inbox. Google therefore processes the contents of your message under its own terms and privacy policy as part of providing that email service.
• An analytics provider, only if analytics is enabled on the site in future and only where you have consented. If that happens, this policy will be updated to name the provider.

I may also disclose personal data where I am required to do so by law, or where it is necessary to establish, exercise or defend legal rights.

International data transfers

Some of the providers above (Google in particular, as the provider of Gmail) may process your data on servers outside the United Kingdom. Where that happens, I rely on appropriate safeguards, such as the UK's adequacy regulations or the International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses), so that your data remains protected to a standard equivalent to UK law.

How long I keep your data

I keep personal data only for as long as I need it. Enquiry emails are retained for as long as is necessary to deal with your message and for a reasonable period afterwards (for example, in case you follow up), after which they are deleted. Server logs are kept for whatever period my hosting provider's own settings specify. Your cookie-consent preference stays in your browser until you change it or clear your browser's site data. I never hold a copy of it. Any analytics data would be retained in line with the settings of the analytics provider used at the time.

Data security

I take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration, and to limit access to it. Please be aware, however, that no method of transmitting or storing data over the internet is ever completely secure, so I cannot guarantee absolute security.

Your rights under UK GDPR

You have the following rights in relation to your personal data:

• Access: to ask for a copy of the personal data I hold about you.
• Rectification: to have inaccurate or incomplete data corrected.
• Erasure: to ask me to delete your data in certain circumstances.
• Restriction: to ask me to limit how I use your data.
• Objection: to object to processing based on my legitimate interests.
• Data portability: to receive certain data in a portable, machine-readable format.
• Withdraw consent: to withdraw your consent to analytics at any time, by reopening the cookie banner and choosing again.

To exercise any of these rights, just email me at babiastudios@gmail.com and I will respond as required by law.

If you are unhappy with how I have handled your personal data, you also have the right to complain to the Information Commissioner's Office (ICO), which is the UK's supervisory authority for data protection. You can find out more and contact the ICO at https://ico.org.uk. I would, however, appreciate the chance to address your concerns directly first.

Children's privacy

This site is not directed at children under 13, and I do not knowingly collect personal data from children. If you believe a child has sent me personal data, please contact me and I will delete it.

Links to other websites

This site contains links to other websites (for example, my social media profiles). I am not responsible for the privacy practices or content of those third-party sites. When you follow a link, I encourage you to read the privacy policy of each website you visit.

Changes to this policy

I may update this privacy policy from time to time to reflect changes in how the site works or in the law. Where I make a material change, I will reflect it by updating the "Last updated" date at the top of this page, so it is worth checking back occasionally.

This privacy policy sits alongside my Terms of Use, which govern your use of the site more generally.

Contact

For any questions, requests or concerns about this policy or your personal data, please contact:

• Jessica Beesly (sole trader), United Kingdom
• Email: babiastudios@gmail.com

The same details, along with my social profiles, are on the contact page.