Last Updated: 5 December 2025

Welcome to www.natashadurley.com (Website), operated by Natasha Durley (“I”). I am committed to protecting your privacy and ensuring your personal data is handled responsibly. This Privacy Policy explains how I collect, use, store, and protect your personal data when you visit my Website or interact with me. It also outlines your rights regarding your personal data.
By using my Website, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Website.

1. Who I Am
I am Natasha Durley, an illustrator based in the United Kingdom. My Website showcases my illustration portfolio and allows visitors to contact me about my work. I am the “data controller” responsible for your personal data under data protection laws.

 

Contact Details:
• Email: hello@natashadurley.com

2. What Personal Data I Collect
I collect and process the following types of personal data:
• Information You Provide:
◦ Name, email address, and any other information you submit via the contact form on my Website (e.g., inquiries about my illustrations or commissions).
• Automatically Collected Information:
◦ Technical data, such as your IP address, browser type, operating system, and browsing behaviour, collected via cookies or analytics tools (e.g., Google Analytics).
◦ Usage data, including the pages you visit and how you interact with the Website.
I do not knowingly collect personal data from individuals under 16 years of age. If you are under 16, please do not provide personal data through the Website.

3. How I Use Your Personal Data
I use your personal data for the following purposes, based on the legal grounds outlined:
To respond to inquiries or communications submitted via the contact form.
Legitimate interest (to provide customer service and manage professional inquiries).
To improve my Website’s functionality and user experience (e.g., through analytics).
Legitimate interest (to enhance my services) or consent (for non-essential cookies).
To comply with legal obligations, such as responding to data protection requests.
Legal obligation.


4. Cookies and Tracking Technologies
My Website uses cookies and similar technologies to enhance your experience and analyse usage. Cookies are small text files stored on your device.
• Essential Cookies: Necessary for the Website to function (e.g., navigation and site performance).
• Analytics Cookies: Help me understand how visitors use the Website (e.g., Google Analytics tracks page views and traffic sources).
When you first visit my Website, a cookie consent bar allows you to opt in or out of non-essential cookies. You can review or change your data-sharing settings at any time by clicking the fingerprint button at the bottom left of this page.

5. Sharing Your Personal Data
I do not sell your personal data. I may share your data with third parties in the following circumstances:
• Service Providers: I use trusted third-party services to operate the Website and process data, such as:
◦ Website hosting provider (GoDaddy).
◦ Analytics providers (e.g., Google Analytics).
• Legal Requirements: I may disclose your data if required by law, such as to comply with a court order or respond to a regulatory authority.
I ensure that third parties processing your data comply with data protection laws and use your data only for the purposes specified.

6. International Data Transfers
Your data is primarily processed in the UK. If I transfer your data to third parties outside the UK (e.g., a US-based service provider like Google Analytics), I ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in accordance with UK GDPR.

7. How I Protect Your Data
I take reasonable measures to protect your personal data, including:
• Using secure hosting services and encryption (e.g., HTTPS for Website traffic).
• Limiting access to your data to authorised personnel only.
• Regularly updating software to address security vulnerabilities.
No method of online transmission is 100% secure, and I cannot guarantee absolute security.

8. How Long I Keep Your Data
I retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or to meet legal requirements. For example:
• Contact form data is kept for 12 months or as long as needed to address your inquiry.
• Analytics data is anonymised or deleted after 26 months (per Google Analytics default settings).
When data is no longer needed, I securely delete or anonymise it.

9. Your Data Protection Rights
Under the UK GDPR and other applicable laws, you have the following rights regarding your personal data:
• Access: Request a copy of the personal data I hold about you.
• Rectification: Ask me to correct inaccurate or incomplete data.
• Erasure: Request deletion of your data (subject to legal exceptions).
• Restriction: Ask me to limit how I process your data.
• Portability: Receive your data in a structured, machine-readable format.
• Object: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent for non-essential cookies at any time via the fingerprint button.
To exercise your rights, contact me at hello@natashadurley.com. I will respond within one month, though complex requests may take longer. If you are unsatisfied, you can lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.

10. Third-Party Links
My Website may contain links to third-party websites (e.g., social media platforms). I am not responsible for their privacy practices. Please review their privacy policies before providing personal data.

11. Changes to This Privacy Policy
I may update this Privacy Policy to reflect changes in my practices or legal requirements. The updated policy will be posted on this page with a revised “Last Updated” date. Significant changes may be communicated via a Website notice.

12. Contact Me
If you have questions about this Privacy Policy or your personal data, please contact me at:
• Email:hello@natashadurley.com