Privacy Policy

1. Who we are

The data controller is Lateefat Modupeola Tobun, based in Bradford, United Kingdom. You can reach us at hello@tobunlateefat.com for any privacy-related queries.

2. Information we collect

We may collect the following categories of personal data:

• Contact enquiries — your name, email address, telephone number (optional) and message content when you submit the contact form.
• Newsletter sign-ups — your email address when you opt in to our mailing list via the footer form.
• Usage data — anonymised browsing analytics (pages visited, session duration, device type) to help us understand how our website is used.

We do not collect payment card data directly; any purchases are handled by a third-party processor whose own privacy notice will apply.

3. How we use your data

We use the data we collect to:

• Respond to your enquiry or message.
• Send occasional newsletters about new work, exhibitions and events (only if you opted in — you may unsubscribe at any time).
• Improve our website content based on aggregated, anonymised usage patterns.
• Comply with legal obligations when required.

Our lawful basis for processing contact enquiries is legitimate interests (responding to your message). For newsletters, our basis is your consent.

4. Cookies & analytics

Our site uses a small number of technical cookies necessary for the website to function (e.g. session state). We may also use a privacy-first analytics tool (no cross-site tracking, no advertising profiling) to collect aggregated page-view data.

You can disable non-essential cookies through your browser settings at any time without affecting your use of the site.

5. Data sharing

We do not sell, trade or rent your personal data. We may share data with trusted service providers (e.g. email delivery, hosting) strictly to operate this website — they are contractually bound to handle it securely and only as instructed.

We may disclose data when required by law or to protect our legal rights.

6. Retention

We retain contact enquiry data for up to 24 months to allow for any follow-up correspondence, then securely delete it. Newsletter subscriber data is retained until you unsubscribe. Anonymised analytics data may be retained indefinitely.

7. Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erasure ("right to be forgotten") in certain circumstances.
• Restrict how we process your data.
• Object to processing based on legitimate interests.
• Data portability where processing is automated and consent-based.

To exercise any of these rights, please email hello@tobunlateefat.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

8. Third-party links

Our website may include links to third-party websites (e.g. social media). We are not responsible for the privacy practices of those sites and encourage you to read their own policies.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will always reflect the most recent revision. Continued use of the site following any changes constitutes your acceptance of the updated policy.