Privacy & data handling

What is collected, and where

The contact and artist-advisory forms

Both forms store what you type, together with your IP address and the time of submission. The advisory application asks for a good deal of career detail, and that is stored with the rest of it.

Submissions are kept even when the notification email fails to send — that is deliberate, so an enquiry is never silently lost — and submissions our spam checks quarantine are kept too, so a false positive can still be found and answered.

The review form

Stores the review you write and the details you attach to it.

Everyone who visits

The web server keeps standard access logs, including IP addresses. A session cookie is set so forms and sign-in work. A small number of preferences — your light or dark theme choice, and the state of the render calculator if you use it — are stored in your own browser and are never sent to us.

There is no advertising, no analytics product, and no cross-site tracking on this site.

Who else sees it

Four services receive data as part of running the site. Each is named here because "trusted third parties" tells you nothing.

Cloudflare — Turnstile

The anti-spam check on the contact, advisory and review forms. Cloudflare receives your IP address and browser signals in order to decide whether you are a person. It runs on those pages whether or not you submit anything.

Postmark

Delivers the notification email when you submit a form, so it handles the contents of your message in transit.

Google — Calendar appointments

The booking panel on the home page is a Google Calendar appointment schedule, embedded in a frame. Google receives your IP address and browser signals when that section of the page loads, whether or not you book anything.

Your browser's push service

Only if you turn on QuickTips notifications. Delivering a notification means sending it through whoever makes your browser — Google, Mozilla or Apple — because that is how web push works. We hold the subscription your browser issues; turning notifications off discards it.

Nothing is sold, and nothing is shared for marketing.

How long it is kept

These are the periods we keep to. Deletion is run against them rather than being left to memory:

Server access logs and browser error reports are held in files that rotate on size rather than age, and neither is used to build any profile of you.

Asking for your data, or its deletion

Write to albert@iblvfx.com and say what you would like — a copy of what is held about you, a correction, or deletion. Deletion is done by hand, so please allow a few days; you will get a reply either way.

If you are in the UK or EU, this is also the address for any question about the lawful basis for holding your enquiry, which is our legitimate interest in answering it.