This policy explains how personal data is collected and used when you visit tomabba.studio or interact with its services. The data controller is Tom Abba, University of the West of England, Bristol.

What data is collected and why

Contact form

When you submit the contact form, your name, email address, and message are sent to and stored by Formspree. This data is used solely to respond to your enquiry. The legal basis is legitimate interests. You can request deletion of your submission at any time by contacting me.

Newsletter

If you subscribe to the newsletter, your email address is stored by Beehiiv. Subscription is voluntary and you can unsubscribe at any time via the link in any email. The legal basis is consent.

Shop

The shop links to Big Cartel, which is operated independently. Any purchase data — including payment information and delivery addresses — is handled entirely by Big Cartel under their own privacy policy. No payment or purchase data passes through this site.

Analytics

This site uses Cloudflare Web Analytics, which collects anonymised, aggregated data about page visits (pages viewed, referrers, browser type, country). No cookies are set. No personal data is collected. No data is shared with advertisers. The legal basis is legitimate interests.

Hosting

This site is hosted on Cloudflare Pages. Cloudflare may process IP addresses and request data as part of its infrastructure and security services.

Cookies

This site sets one cookie: theme, stored locally in your browser to remember your light or dark mode preference. It contains no personal data and is not shared with any third party.

Your rights

Under UK GDPR you have the right to access, rectify, or erase personal data held about you; to restrict or object to processing; and to data portability where applicable. To exercise any of these rights, use the contact form.

You also have the right to lodge a complaint with the UK Information Commissioner's Office: ico.org.uk.

Data retention

Contact form submissions are retained by Formspree for as long as necessary to respond to the enquiry. Newsletter subscriptions are retained until you unsubscribe. Analytics data is aggregated and anonymised with no retention of individual records.

Changes to this policy

This policy may be updated occasionally. The date at the top of this page reflects the most recent revision.