Privacy Policy | Toby Tinsley

Last updated: Aug 2026

​

Who I am

This website is operated by Toby Tinsley, a graphic and illustrative designer based in Dorset, United Kingdom. I am the data controller for any personal information collected through this site.

​

Contact: toby@tobytinsley.com
Telephone: +44 (0) 7539 945 005

​

What information I collect

Information you give me directly. If you email me, call me, or complete a contact form on this site, I collect your name, email address, telephone number and anything else you choose to include in your message.

​

Information collected automatically. When you visit this site, certain technical information is collected automatically, including your IP address, browser type and version, device type, operating system, the pages you view, and the site or search term that referred you. This is collected through cookies and similar technologies.

I do not collect special category data (such as health, ethnicity or political opinions), and I do not knowingly collect information from anyone under 16.

​

How I use your information

I use your information to:

​

• respond to your enquiry and correspond with you about a potential or ongoing project

• prepare proposals, quotations and invoices, and deliver commissioned work

• keep records required for accounting and tax purposes

• understand how the site is used so I can improve it

• send occasional updates about my work, where you have asked to receive them

 

Legal basis for processing

Under UK GDPR, I rely on the following lawful bases:

​

• Legitimate interests - responding to enquiries, corresponding with clients, and maintaining basic site analytics. I have considered your rights and believe this processing is what you would reasonably expect.

• Contract - carrying out work you have commissioned, including invoicing and delivery.

• Legal obligation - retaining financial records as required by HMRC.

• Consent - non-essential cookies and any marketing emails. You may withdraw consent at any time.

 

Cookies

This website is built on the Wix platform and uses cookies. Essential cookies are required for the site to function - for security, load balancing and remembering your preferences. Analytics cookies help me understand which pages are visited and how visitors arrive; these are only set where you have consented.

You can manage your preferences through the cookie banner when you first visit, and you can block or delete cookies through your browser settings. Blocking essential cookies may prevent parts of the site from working.

​

Who I share your information with

I do not sell, rent or trade your personal information. I share it only with service providers who help me operate my business, and only as far as necessary:

​

• Wix.com Ltd - website hosting, forms and site analytics

• Email and cloud storage providers - correspondence and file storage

• Accounting software and my accountant - invoicing and statutory record keeping

• Trusted freelance collaborators - where a project requires additional specialists, and only with information relevant to that work

 

Some of these providers process data outside the UK. Where that happens, transfers are protected by UK adequacy regulations or standard contractual clauses.

I may also disclose information where required by law or to establish or defend legal claims.

​

How long I keep your information

Enquiries that do not lead to work are kept for up to two years, then deleted. Client project records and correspondence are kept for the duration of the working relationship and for six years afterwards, in line with HMRC requirements for financial records. Marketing contacts are kept until you unsubscribe.

​

Keeping your information secure

I take reasonable technical and organisational measures to protect your information, including encrypted connections, access controls and reputable service providers. No transmission over the internet is completely secure, so I cannot guarantee absolute security, but I will notify you and the Information Commissioner's Office if a breach occurs that is likely to affect your rights.

​

Your rights

Under UK data protection law you have the right to:

​

• access a copy of the personal information I hold about you

• have inaccurate information corrected

• have your information erased, where there is no ongoing legal or contractual reason to keep it

• restrict or object to how your information is used

• receive your information in a portable format

• withdraw consent at any time, where consent is the basis for processing

 

To exercise any of these rights, email toby@tobytinsley.com. I will respond within one month.

If you are unhappy with how I have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. I would appreciate the chance to resolve it first.

​

Links to other websites

This site may link to external websites, including client work and industry organisations. I am not responsible for their privacy practices and encourage you to read their policies.

​

Changes to this policy

I may update this policy from time to time. Any changes will be posted here with a revised date at the top.