Privacy Policy

Last updated: 21 August 2026

NJC Illustration respects your privacy and takes the handling of personal information seriously. This policy explains what information may be collected when you visit this website, make an enquiry or work with me, how that information is used, and the rights available to you under UK data protection law.

Who is responsible for your information

This website is operated by Nathaniel Cooper, trading as NJC Illustration.

For the purposes of UK data protection law, Nathaniel Cooper is the data controller responsible for personal information collected through this website and in connection with commissions, enquiries and other professional work.

Email: coopernathanielart@gmail.com
Business address: 89a Ash Street, Ash, Aldershot, GU12 6LG, UK

Information I may collect

The information collected depends on how you use the website.

If you contact me through the website, by email or by another direct means, I may collect information including:

  • your name;

  • your email address;

  • your telephone number, where provided;

  • information about your enquiry, project or commission;

  • correspondence between us; and

  • any other information you choose to provide.

If you purchase artwork, commission work or enter into another commercial arrangement with me, I may also collect information required to manage that work, such as billing details, delivery information, transaction records and project documentation.

The website may also collect limited technical information relating to your visit, such as your browser or device type, approximate location, pages viewed and information collected through cookies or similar technologies.

How your information is used

Personal information may be used to:

  • respond to enquiries and correspondence;

  • discuss, quote for and manage illustration commissions;

  • provide artwork, products or services you have requested;

  • process and maintain records of transactions;

  • arrange delivery where required;

  • administer and maintain the website;

  • protect the website and its users from misuse or security threats;

  • meet accounting, tax and other legal obligations; and

  • understand how the website is used, where appropriate and subject to your cookie choices.

I will not sell or rent your personal information to third parties.

Lawful bases for processing

Under UK data protection law, personal information must be processed on a recognised lawful basis.

Depending on the circumstances, I may rely on:

Contract — where processing is necessary to take steps at your request before entering into a contract, or to carry out a commission, sale or other agreement with you.

Legal obligation — where information must be retained or processed to meet legal, accounting or tax requirements.

Legitimate interests — where reasonably necessary to operate and protect the business, respond to relevant enquiries, maintain business records or improve the website, provided those interests do not override your rights and freedoms.

Consent — where you have specifically agreed to a particular use of your information, including where consent is required for non-essential cookies or similar technologies. You may withdraw consent at any time.

Cookies and website analytics

This website uses cookies and similar technologies to enable its operation and, where applicable, to understand how visitors use the site.

Cookies that are strictly necessary for the website to function may be used without consent. Analytics, advertising or other non-essential cookies will only be used where the appropriate consent has been obtained.

Where a cookie preference tool is provided, you can use it to accept, reject or change your choices concerning non-essential cookies.

You can also control cookies through your browser settings, although disabling certain cookies may affect the way parts of the website function.

Squarespace

This website is built and hosted using Squarespace. Squarespace may process certain technical and personal information in order to provide website hosting, security, form functionality, analytics and related services.

Depending on how Squarespace processes information, data may be handled outside the United Kingdom. Where international transfers take place, appropriate safeguards are used in accordance with applicable data protection requirements.

Sharing your information

Personal information is shared only where reasonably necessary.

This may include service providers involved in:

  • website hosting and administration;

  • email and communications;

  • payment processing, where applicable;

  • delivery or fulfilment;

  • accounting and professional services; and

  • technical or security support.

Information may also be disclosed where required by law, regulation, court order or a competent public authority.

Third-party providers are responsible for their own privacy practices where they act as independent data controllers.

International transfers

Some of the services used to operate this website or communicate with clients may process information outside the United Kingdom.

Where personal information is transferred internationally, I will rely on an appropriate mechanism recognised under UK data protection law, such as an adequacy regulation, approved contractual safeguards or another lawful transfer mechanism.

How long information is kept

Personal information is kept only for as long as reasonably necessary for the purpose for which it was collected.

Enquiry correspondence that does not lead to a commission or other continuing relationship will normally be deleted when it is no longer reasonably required for business purposes.

Where an enquiry develops into paid work or a transaction, relevant records may be retained for longer where necessary to manage the professional relationship, establish or defend legal rights, or comply with accounting, tax and other statutory obligations.

Retention periods are reviewed according to the nature of the information, the reason it is held and any applicable legal requirements.

Keeping your information secure

Reasonable technical and organisational measures are used to protect personal information against accidental loss, unauthorised access, alteration or disclosure.

No online service can guarantee absolute security, but access to personal information is limited to those services and individuals for whom it is reasonably necessary.

Your rights

Depending on the circumstances and the lawful basis on which your information is processed, you may have the right to:

  • request access to personal information held about you;

  • ask for inaccurate or incomplete information to be corrected;

  • request deletion of your personal information;

  • ask for processing to be restricted;

  • object to certain uses of your information;

  • request the transfer of certain information to you or another organisation; and

  • withdraw consent where processing is based on consent.

To exercise any of these rights, contact coopernathanielart@gmail.com.

There is normally no charge for making a data protection request, although additional information may be needed to confirm your identity before a request can be fulfilled.

Complaints

If you have a concern about how your personal information has been handled, please contact me in the first instance so that the matter can be considered.

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

Changes to this policy

This privacy policy may be updated from time to time to reflect changes to the website, the services I use or applicable legal requirements.

The latest version will be published on this page together with its most recent revision date.