Privacy Policy
Clarkpaintings.com are committed to ensuring that your privacy is protected.
This privacy notice is here to inform you that this website is a static digital portfolio and does not request, collect, or store any of your personal information. If you wish to contact us or use our services, you will be directed to our official eBay UK seller page, where all communications and sales are handled securely under eBay’s privacy terms.
Who we are
https://clarkpaintings.com is a website showing some of the art work of Gareth Williams.
The site is run by Gareth Williams trading as Clark Paintings.
Address: 12 Park Rd, Chipping Norton, OX7 5PA, UK
We do not host an administrative email address or email forms on this website. To contact us directly, please click the “Contact” link located in our footer menu, which will direct you to our information page and our official eBay UK seller page button.
Data controller
For https://clarkpaintings.com – Gareth Williams does not collect, store, or process any personal data. Because no personal information is captured on this domain, there is no processing of personal data, and the role of “Data Controller” under the UK GDPR does not apply to this website [ICO].
For any enquiries or concerns regarding how your data is handled when making a purchase or sending a message, please use the Contact link in the footer menu to reach our official eBay UK seller page, where all transactions and communications are securely processed under eBay’s privacy terms.
What is ‘Personal Data’
Personal Data is any information which makes you identifiable as an individual. Examples of such data include your name, address, email, IP address, and browser cookies.
Under the UK GDPR and Data Protection Act 2018, your computer’s IP address and online identifiers are considered personal data [ICO]. However, because this website automatically anonymises all traffic analytics through Google Analytics 4, drops your IP address instantly before logging data, and completely blocks tracking cookies via Cookiebot unless you opt in, no identifiable personal data is ever collected or held on this domain.
What data we collect and why we collect it
1. Analytics
When you visit our website and provide consent via our CookieYes banner, we use Google Analytics 4 (GA4) to monitor broad, aggregate traffic trends (such as total monthly page views).
Your privacy is fully locked down because we have manually hardened our Google Analytics configurations using the following strict parameters:
- Automatic IP Anonymisation: GA4 automatically strips away and discards your individual computer IP address instantly before any traffic data is logged or stored on a server.
- Granular Tracking Disabled: Granular location tracking (city-level tracking) and advanced device information tracking are completely turned off.
- Google Signals & Tracking IDs: Google Signals, Cross-Device tracking, and User-Provided Data collection are permanently deactivated, ensuring Google cannot link your visit to a personal Google account or profile.
- Data Retention: All basic interaction logs are strictly set to expire and erase automatically after 14 months.
Because of these settings, these tools only provide us with anonymous, macro-level numbers (e.g., how many total views a gallery receives) and cannot identify you as an individual.
Lawful Basis: We process these performance analytics on the lawful basis of: Consent (UK GDPR Article 6(1)(a)).
2. Cookies
Please note that you can at any time revise your cookie preferences on our site by clicking on the small cookie icon located at the bottom left corner of your screen. This icon remains accessible on every page, allowing you to change what you want to accept or decline at any time.
A cookie is a small text file which is placed onto your computer (or other electronic device) when you access our website. We use cookies on this website to:
- Remember your privacy settings whenever you visit this website
- Carry out basic statistical analysis to help us understand broad aggregate visitor numbers and interests
- Keep the website safe, secure, and functioning efficiently
In most cases we will need your consent in order to use performance cookies on this website.
The cookies we use on our site –
Cookie Banner
One cookie which operates the cookie banner preferences:
- “Cookie Consent” (CookieYes)
What it does: It remembers your cookie banner settings (whether you chose to accept or decline analytics).
Who gets this cookie: This is set for all users. It is saved to your browser so you do not have to fill out the banner on every single visit.
How this cookie helps: It remembers your choice and prevents the banner from popping up repeatedly unless you manually click the small icon on the bottom left to change your preferences.
Google Analytics
Google Analytics 4 cookies that we set are first-party cookies. These cookies are used to collect aggregate information about how visitors use our website so we can monitor broad traffic trends. Because Google Signals, User IDs, and granular location data are entirely disabled, these cookies are fully anonymised and do not track or identify you as an individual.
Cookies Set by Google Analytics – all are first-party cookies:
- “_ga”
What it does: It is used by Google Analytics to distinguish one anonymous browser connection from another.
Who gets this cookie: Set for users who opt in via the banner. It automatically expires and deletes after 14 months.
How this cookie helps: It lets us see aggregate numbers regarding which galleries are popular so we can improve the portfolio display.
- “_gat”
What it does: This cookie is used to throttle the request rate to Google’s servers.
Who gets this cookie: Set for users who opt in. It expires and deletes itself after 1 minute.
How this cookie helps: It ensures our analytics tracking does not slow down the performance of the website.
- “_gid”
What it does: It is used to count page views and group a single anonymous session together.
Who gets this cookie: Set for users who opt in. It expires and deletes itself after 24 hours.
How this cookie helps: This helps us see general, non-identifiable pathways of how traffic navigates through the image galleries.
Lawful Basis: We process these performance cookies on the lawful basis of: Consent (UK GDPR Article 6(1)(a)). You can review Google’s official “Safeguarding your data” terms directly on the Google Analytics help documentation.
Wordfence
Cookies Set by Wordfence – this is a first-party cookie:
- “wfwaf-authcookie-(hash)”
What it does: This cookie is used strictly by the Wordfence security firewall to perform an immediate capability check of the user before the core WordPress system loads.
Who gets this cookie: This is primarily used to detect if an administrator is trying to log into the backend. For general visitors, it runs an automated check to verify that the request is coming from a safe, human web browser rather than a malicious hacking bot.
How this cookie helps: This cookie allows the Wordfence firewall to make instant decisions about who to allow and who to block, keeping the site secure from cyberattacks.
Lawful Basis: We collect this security information on the lawful basis of: Our Legitimate Interests (UK GDPR Article 6(1)(f)), as processing is necessary to defend the security and integrity of this website network.
How to turn off cookies
If you do not want to accept cookies, you can change your web browser settings so that cookies are blocked entirely. If you do this, please be aware that you may lose some of the basic functionality or security features of this website. For further information about cookies and how to disable them via your device, you can read the universal help guides provided by standard web organisations such as aboutcookies or allaboutcookies.
To find out more about how to manually block or delete cookies within your specific browser settings, you can check the built-in help guides for:
- Google Chrome
- Microsoft Edge
- Mozilla Firefox
- Opera
- Apple Safari
3. Technical Information and Security Software
In order to maintain the integrity, security, and performance of our website infrastructure for our visitors and ourselves, we run Wordfence security software to provide automated firewall checks. This software protects the website database and visitors from malware, malicious bots, and hacking attempts
- Firewall Cookies: Wordfence installs essential security cookies on your browser to make instant decisions about who to allow and who to block. Because this is strictly required to protect the network and maintain a safe browsing environment for the public, these cookies run automatically. No personal browsing data or user tracking profiles are generated or stored for standard public visitors browsing the portfolio image galleries.
How long we retain your data
Wordfence Security
Attack data and malicious IP addresses attempting to breach the website network are collected by the firewall and sent to Wordfence. This data is retained securely for as long as it remains an active security threat to the network, generally expiring after 90 days unless the source remains actively malicious.
Google Analytics
Our Google Analytics 4 configurations do not store or retain your computer IP address on any server, as it is permanently stripped and discarded instantly upon your arrival. Basic, fully anonymised interaction and performance metrics (such as aggregate page view counts) are set to automatically expire and erase after 14 months.
What rights you have over your data
Under the UK GDPR and Data Protection Act 2018, you possess statutory rights over your personal data, including the right to access, rectify, or request the erasure of your personal information [ICO].
However, because this portfolio website is entirely static and does not request, collect, store, or process any personal data, no identifying information exists on this domain. We do not hold a database of names, emails, or user profiles. Therefore, it is impossible to exercise these data rights on this website, as there is no user data stored to erase or access.
If you have interacted with us via our official eBay UK seller page, your data rights regarding purchases and messages are handled directly and securely through the eBay platform infrastructure in accordance with eBay’s own user privacy terms.
The Right to complain
You can contact theme here –
Who we share your data with
Web Hosting
Our web hosting suppliers, Cloudways, provide the physical server infrastructures that our website operates on, and also the automated backups. Our Cloudways servers reside physically in a dedicated data centre in London, UK, meaning no technical website data is transferred to data centres outside the UK or EU. All of our static website database files sit securely on these servers. Data compliance is fully protected through a formal Data Processing Addendum integrated directly into our core hosting agreement with Cloudways.
Google Analytics
We use Google Analytics 4 to monitor broad traffic trends. Your privacy is fully protected because we have manually deactivated all advanced tracking features, including Google Signals, User IDs, and granular location data. Furthermore, individual computer IP addresses are permanently stripped and discarded instantly upon arrival. No personal data or identifiable tracking profiles are ever shared with Google.
We provide a clear choice regarding performance tracking via our CookieYes banner when you first visit the website. You can always manage your choices or change your mind at any time by clicking the small cookie icon located at the bottom left corner of your screen. For more info, please see our dedicated section on cookies.
Defiant Inc.
Security – Wordfence
Defiant Inc. are the providers of the Wordfence security software that protects our website from cyberattacks. Only limited, technical network data (such as attack logs and malicious IP addresses attempting to hack the network) are transmitted.
Because Defiant Inc. is located outside of the UK, we hold a formal Data Processing Agreement (DPA) with them incorporating the standard UK International Data Transfer Addendum and approved model contract clauses, ensuring that all automated network defense checks comply fully with UK data safety standards. Data sent to Wordfence is strictly limited to malicious network attack data.
Where we send your data
Wordfence
The technical data which is sent to Wordfence is strictly limited to malicious network attack data, and this data is transmitted to security servers located in the US.
When an automated hacking attempt or network attack is detected by the firewall, the system logs the malicious visitor’s IP address, the precise request time, the referrer URL (where available), and the browser user-agent string.
From these technical markers, the security software analyzes the network data to identify the attacker’s origin, including the date and time of the request, device type, operating system, browser language, and geographic country. This technical metadata is strictly used to block malicious traffic and protect the portfolio site from cyberattacks.
We hold a formal Data Processing Agreement with Defiant Inc. (the owners of Wordfence) ensuring that these automated international safety checks comply fully with UK data protection standards. Standard public visitors browsing the portfolio image galleries are not tracked or recorded by this system.
How we protect your data
Access control: Access to the administrative backend of this website is strictly limited to the website owner. Because we do not collect or store personal profiles, names, or emails from the public on this domain, there is no public database of personal information held on our server.
Security software: We operate Wordfence security scanning and firewall software on our website. This software is responsible for limiting backend login attempts, blocking potentially malicious attempts to access our administrative files, and regularly performing full system defense scans. We hold a formal Data Processing Agreement with the provider of this security infrastructure.
Data encryption: This website is secured with standard SSL encryption, which means that all network traffic to and from our web servers is encrypted. This applies to our own administrative access to the website, as well as that of public visitors browsing our galleries.
clarkpaintings.com is fully secured with an SSL certificate. You will see an icon, such as a padlock badge, in your browser’s address bar indicating that the secure https protocol is fully active. This ensures an encrypted connection from our London web server straight to your web browser, protecting your browsing session from external tampering.
What data breach procedures we have in place
We then would make contact with our Hosting company – Siteground Ltd
Following the establishment of the sensitivity of any breach we would follow the standard procedures outlined by the ICO in the UK.
We are required to keep logs of any breaches detected and of the nature of the data which has been breached and to report this to the ICO within 24 hrs of becoming aware of the essential nature of the breach.
You can check these here –
In the case of a data breach users have be notified within 72 hrs if any personal information has been breached and whether or not you need to take any action.
What third parties we receive data from
Children’s Information
Children’s Information
We do not knowingly collect or request any personal identifiable information from children under the age of 13. Because this website is a completely static digital showcase with no contact forms, input fields, or user portals, there is no technical possibility for any visitor to submit or share personal information on this website, child or adult.
Changes to our Privacy Policy
We reserve the right at any time to change this Privacy Policy. Should we change this Privacy Policy we will post those changes on our website so that website visitors can become aware of the changes to the Policy.
Your continued use of our website will constitute your acceptance of that change. This policy was last updated in June 2026.