Privacy policy

Last updated: 25 August 2026

Who is responsible for your data

Verulamium Studio is a UK-based sole trader and is the data controller for personal data collected through this website. Contact: osman@verulamiumstudio.com.

What is collected, and why

• Contact form submissions — your name, email address and message. Used only to read and reply to your enquiry. The lawful basis is legitimate interests: you wrote to this business expecting an answer.
• Server logs — the hosting provider records standard technical data (IP address, request time, pages requested) to operate and secure the service. The lawful basis is legitimate interests in keeping the site running and defending it against abuse.

This site currently runs no analytics and sets no cookies — which is also why there is no cookie banner. If analytics are added later, they will be a cookieless, privacy-first service, and this policy will be updated before they go live.

How long data is kept

Contact form messages are kept for as long as the conversation they belong to is live, and no longer than two years after the last exchange. Hosting logs are retained on the hosting provider’s standard short-term schedule.

Who processes data on this site’s behalf

• Netlify — hosts the site and receives contact form submissions. Netlify may process data in the United States and other countries outside the UK, under its standard contractual safeguards.
• The email provider that delivers messages to and from osman@verulamiumstudio.com.

No data collected here is sold or shared with anyone else.

Your rights

Under UK GDPR you can ask for access to the personal data held about you, ask for it to be corrected or erased, restrict or object to its processing, and ask for a portable copy. Email osman@verulamiumstudio.com and the request will be honoured without fuss.

If you believe your data has been mishandled, you have the right to complain to the Information Commissioner’s Office at ico.org.uk.