Privacy

This is short because the site does very little. There are no accounts, no analytics, no advertising trackers, and nothing to sign up to. Buying happens on Etsy, not here.

Who is responsible

David Waite, trading as Everframe Gallery, based in the United Kingdom, is the data controller for this website. You can reach me at davidwritesme@googlemail.com.

What this website collects

Nothing you type, because there is nothing to type. The site is a set of static pages. It does not use Google Analytics or any equivalent, sets no tracking or advertising cookies, and does not build a profile of you.

The site is hosted on Cloudflare Pages, which keeps standard server logs — IP address, browser type, which page was requested and when — for security and to keep the site running. That is ordinary hosting infrastructure, it is not used for marketing, and I do not connect it to anything about you.

If you email me

I keep your email and what you wrote, so I can reply and so there is a record if the same question comes up again. I do not add you to a mailing list — there is no mailing list. Ask me to delete the correspondence and I will.

If you buy something

Purchases are made through Etsy, and Etsy handles the payment. I never see your card details. Etsy is the data controller for your order and its own privacy policy applies to everything you do on their site.

As the seller I see what Etsy shows sellers: your name, the order, your messages, and a billing country or address where tax rules require it. I use that to fulfil the order and to meet the record-keeping the tax authorities require. I do not use it to market to you.

Social media

Everframe Gallery posts artwork to Pinterest. That is me publishing pictures of things I sell — it collects nothing about you, and there is no Pinterest tracking pixel on this site. If you interact with those posts on Pinterest, Pinterest's own privacy policy governs it, not this one.

The Pinterest API

I use a private application built on the Pinterest API to publish those posts, rather than uploading each one by hand. It is single-tenant: it signs in as the Everframe Gallery Pinterest business account and no other, it posts only to boards that account owns, and there is no way for anyone else to connect their Pinterest account to it. It is not a product, and it has no users other than me.

Through that application I read my own boards and Pins, my own account details, and the statistics Pinterest reports on my own posts, and I create and update Pins on my own boards. I do not request access to other people's accounts, to their secret boards, or to anyone's followers, and I do not collect, store, or process personal data belonging to Pinterest users. The images and descriptions I send are my own product listings.

The access token that lets the application act as my account is a credential, and I treat it as one: it is kept outside the published website, never committed to source control, and never shared. It is not sold, rented, or passed to anyone, and nothing gathered through the API is combined with anything else on this site. Revoking the application's access in my Pinterest settings stops it immediately.

Your rights

Under UK data protection law you can ask what personal data I hold about you, ask for it to be corrected or deleted, and object to how it is used. Email me and I will respond within 2 working days. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.

How long things are kept

Emails for as long as the conversation is useful, and then deleted on request. Order records for six years, because UK tax law requires it. Server logs for the short period Cloudflare retains them by default.

Changes

If this policy changes the date below changes with it. There is no version history to hunt through; the page you are reading is the current one.

Last updated: August 2026.