Privacy notice

Who is responsible

Peter Synnott, trading as Peter’s Portraits, is responsible for the personal information collected through this website. Questions or requests can be sent to peters.pencilportraits@gmail.com.

What I collect

The enquiry form collects your name, email address, optional mobile number, message and your confirmation that you have read this information. Your name, email address, message and privacy confirmation are required so that I can respond to your enquiry; your mobile number and photographs are optional. If you choose to attach photographs, it also collects up to three photographs and their filenames and file types. Cloudflare Turnstile processes limited browser, device and network information to distinguish genuine visitors from automated submissions.

If you proceed with a commission, Stripe collects the billing and payment details needed to process your deposit and final payment on its secure hosted payment page. Peter’s Portraits receives the payment status and transaction record, but not your full card number.

Please only send photographs that you have permission to share. Avoid including sensitive information that is not needed to discuss the portrait.

Why I use it

I use this information to respond to your enquiry, assess reference photographs, prepare and manage a commission, keep the form secure and maintain appropriate business records. I do not use enquiry details for marketing, and I do not publish a photograph or finished portrait without separate permission.

The legal bases are taking steps at your request before entering a contract, performing a commission contract, my legitimate interests in handling enquiries and protecting the service from misuse, and legal obligations that apply to business records.

Where it is handled

Enquiry details are saved in a private Airtable base. Resend processes the two transactional emails, and the enquiry and any attached photographs are delivered to the Peter’s Portraits business Gmail account. Vercel hosts the website and processes the form request. Attached photographs are stored in Airtable alongside their status, filenames and file types. Stripe processes commission payments on its hosted payment pages. Cloudflare provides the Turnstile security check used to protect the enquiry form from spam and automated misuse.

Some of these providers may process information outside the UK. Where a restricted transfer applies, I rely on an applicable UK adequacy regulation or appropriate contractual safeguards supplied by the provider. You can ask me for further information about the safeguards relevant to your information. I do not sell your information.

How long I keep it

Enquiries that do not become commissions are kept for up to 12 months after the last contact. Reference photographs for completed commissions are normally deleted within 90 days after completion, unless we agree that they are still needed. Essential correspondence and transaction records for a completed commission may be kept for up to six years where required for tax, accounting or legal purposes. Information is reviewed and deleted sooner when it is no longer needed.

Your choices and rights

You can ask what information I hold about you, request a correction or deletion, restrict how it is used and, where applicable, ask for a portable copy. You have the right to object to processing based on legitimate interests. Email the address above and include enough information for me to identify the relevant enquiry. You can also complain to the UK Information Commissioner’s Office if you are unhappy with how your information is handled.

Cookies

The website does not currently use advertising or analytics cookies. Vercel and Cloudflare Turnstile may use strictly necessary security technology to deliver the site and protect the enquiry form.

Last updated: 13 October 2026.