This Privacy Policy explains how I, Matthew Eyles, collect, use, and protect your personal data when you visit my website (the "Website"). I am committed to ensuring your privacy and complying with the UK Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR). By using my Website, you consent to the collection and use of your data in accordance with this policy.

When you submit the contact form on the Website, I collect the following personal information:

• Name
• Email Address

I collect this information to respond to your inquiries, provide information about my artwork, exhibitions, or commissions, and fulfil your requests.

I process your personal data based on legitimate interest, as it is necessary for me to respond to your inquiries and provide services. In some cases, processing may also be based on your consent (e.g., signing up for my newsletter).

I have implemented appropriate technical and organizational measures to protect your personal data, including:

• Secure Server Environment: The Website is powered by Webarto, which manages hosting, SSL, operations, maintenance, and the database for me. However, I retain full control over all data collected by the Website, and I ensure that the data is used and processed in accordance with this Privacy Policy. Webarto ensures that data is stored securely and complies with industry-standard security practices. For more details, please refer to Webarto's Privacy Policy www.webarto.co.uk/privacy-policy.
• Data Encryption: My Website uses a Secure Socket Layer (SSL) encryption to protect data transmitted between your device and my server.
• Access Controls: Only authorized personnel from me and Webarto have access to your personal data, and only as necessary to perform their roles.
• Regular Monitoring: Webarto monitor the systems for security vulnerabilities and implement regular updates to maintain a secure environment.

I will retain your personal data only as long as necessary to fulfil the purposes for which it was collected or to comply with legal requirements.

You have the right to:

• Access your data
• Rectify inaccurate data
• Request data erasure (right to be forgotten)
• Restrict processing
• Object to processing
• Data portability (transfer your data to another service provider) To exercise any of these rights, contact me at mattheweylesart@gmail.com.

While Webarto handles the hosting, SSL, operations, maintenance, and the database management of the Website, no other third-party services currently collect or process your personal data. Should I engage additional third parties in the future (e.g., for analytics or payment processing), I will update this Privacy Policy with relevant details.

I may update this Privacy Policy from time to time. Changes will be posted on this page and will take effect immediately. Please review this policy periodically for updates.

If you have any questions or concerns about this Privacy Policy, please contact me at mattheweylesart@gmail.com.