Privacy notice

This notice explains what personal information Fictional Accounts collects through this website, why, and what you can do about it.

Who is responsible

The controller is Tarryn Mason, a sole trader trading as Fictional Accounts.

• Legal name: Tarryn Mason
• Email: thisistarryn at gmail.com

What we collect, and why

We collect two things, and nothing else.

1. The brief form. If you send a brief through the form, we receive the details you type into it:

• your name and email address;
• your company or brand;
• the departments you would like to work with;
• your project description;
• your budget band and deadline;
• how you heard of us;
• your tick agreeing that we may use these details to reply to your brief.

The page also creates a job reference in your browser and sends it with the brief, so that your enquiry and our reply can be matched. We use these details to reply to your enquiry and to prepare a quote. The form also has a hidden field that only automated spam fills in; anything entered there is treated as spam and is not used for any other purpose.

Sending a brief is optional. If you would rather not use the form, you can email us at the address above instead. If you do not give your name and email address, we cannot reply.

Please do not put confidential or personal details in the project description beyond what the form asks for. The form is not the place for payment details, health information, identity documents or passwords.

2. Server logs. Our host keeps ordinary server logs when you visit: your IP address, your browser’s user agent and the page requested. They are kept to deliver and secure the site.

We do not use analytics, advertising identifiers or fingerprinting. Nothing is collected about you from the illustrated scene, and the site sets no cookies. See the Cookies page for the two small items the site remembers in your own browser.

Our lawful bases

• The brief form: legitimate interests, and taking steps at your request before a possible contract (UK GDPR Article 6(1)(f) and (b)). Our legitimate interest is answering the enquiries people send us.
• Server logs and spam detection: legitimate interests, in running and securing the site.

Who receives your information

• Netlify, which hosts the site and processes form submissions and server logs on our behalf.
• Our email provider, which receives the notification that a brief has been sent.

We do not sell your information. We do not share it with anyone else, except where the law requires it.

Transfers outside the UK

Netlify may process information outside the United Kingdom, including in the United States. Those transfers are covered by Netlify’s data processing agreement, which uses the transfer terms approved under UK data protection law (the UK International Data Transfer Agreement), with the EU Standard Contractual Clauses for transfers from the EEA.

How long we keep it

We delete brief submissions within 12 months of our last contact with you, from both the form store and our email. We delete them sooner if you ask. Spam submissions are cleared regularly. Server logs are kept by Netlify according to its own standard retention.

Automated decisions

We make no decisions about you by automated means, and we do not profile you.

Your rights

You can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything that is wrong;
• delete what we hold;
• stop using it, or limit how we use it, where you object.
• give you the details you sent through the form in a common electronic format, so you can pass them to someone else.

To do any of these, email us at the address above. We will reply within one month.

You can also complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk. We would like the chance to put things right first, but you do not have to ask us first.

Changes

If we change this notice, we will change the date at the top of the page.