Privacy

This is the personal portfolio of Anna Barnett, a painter working in the United Kingdom. I run the site myself and I’m the data controller for the information described here — meaning I’m the one responsible for it and the one you deal with. You can reach me about anything on this page at anna@annabarnett.art.

Only what you choose to send me. When you use the contact form I receive your name, your email address, and the message you write. Giving me these is entirely your choice — but without an email address I can’t reply.

The site doesn’t take payments, sell from a basket, or ask you to create an account, so there’s no card, delivery or order information for me to hold. I also don’t use analytics or advertising trackers, so nothing is quietly profiling you in the background.

To read your message and reply, and to carry the conversation forward if you’re asking about a painting, a print or a commission. My lawful basis under UK GDPR is legitimate interests — responding to an enquiry you chose to start. If that conversation turns into an actual purchase or commission, I rely on performance of a contract to arrange it with you, and on legal obligationfor any records I’m then required to keep.

Only the services that make the site and my email work: the platform that hosts the site (Vercel) and the service that delivers form messages to my inbox (Resend). They process the data strictly on my behalf, under their own data-protection terms, and only so your message can reach me. I never sell your information, and I never share it for anyone’s marketing.

Some of those providers may process data on servers outside the UK. Where they do, the transfer is covered by appropriate safeguards — a UK adequacy decision, or the International Data Transfer Agreement and Addendum — so your information keeps UK-standard protection wherever it’s handled.

The site is served over an encrypted (HTTPS) connection, and your messages sit in established, access-controlled services rather than anywhere loose. Access is limited to me. No system can be promised completely secure, but I take reasonable, sensible steps to protect what little I hold and to keep it no longer than I need.

Enquiries are kept only as long as they’re useful: while we’re in touch, and for a reasonable period afterwards in case you write again, after which I delete them. If we go on to agree a sale or commission, I keep the records tied to it for as long as the law requires, and no longer.

Under UK GDPR you can ask me to show you the information I hold about you, to correct or delete it, to restrict or object to how I use it, and to receive it in a portable form. Email anna@annabarnett.artand I’ll deal with it — normally within one month, and free of charge.

If something’s gone wrong, please tell me first so I can put it right. You also have the right to complain to the UK regulator, the Information Commissioner’s Office, at ico.org.uk.

The site uses only the essential cookies needed to keep it working and to protect the contact form from abuse. These don’t track you and don’t require consent, which is why there’s no cookie banner to click through. If I ever add anything that does track — analytics, for instance — I’ll ask for your consent and update this page before switching it on.

This is a gallery site meant for a general, adult audience; it isn’t aimed at children and I don’t knowingly collect their information. If you believe a child has sent me something through the form, write to anna@annabarnett.artand I’ll delete it.

If the site changes in a way that affects your privacy, I’ll revise this page and update the date at the top. The version you see here is always the one that applies.