Legal

Privacy Policy

This notice explains what personal data this website collects, why, how long it is kept and what rights you have. It is written for a small personal portfolio site with a mailing list and an email contact route — not a shop or an account-based service.

Who is responsible for your data

The data controller for this site is Andrew Melchior. For any privacy question, or to exercise the rights below, contact me through the contact page. The website is https://andymelchior.com.

The mailing list

If you subscribe to the mailing list, your email address is collected and used only to send occasional updates about new work, installations and studio news. The list is operated on my behalf by Buttondown (buttondown.com), which stores your address and delivers the emails. The lawful basis is your consent, given when you submit the form; that consent — and the date it was recorded — is held by Buttondown. You can withdraw it at any time using the unsubscribe link in any email, or by emailing me. On unsubscribe your address is removed from active sending.

Enquiries by email

If you email me — directly or through a link on the contact page — I process the message and your email address to reply and, where relevant, to discuss a commission, talk or collaboration. The lawful basis is my legitimate interest in responding to enquiries about my work. Correspondence is kept only as long as needed for that purpose and then deleted.

Embedded content and analytics

Some pages embed media from third parties — for example Bandcamp, SoundCloud and YouTube. When you play or interact with that content, those services may receive your IP address and set their own cookies, exactly as if you had visited them directly; their own privacy policies apply. This site does not set advertising or tracking cookies of its own. If privacy-respecting, cookieless visitor statistics are in use, they are aggregated and do not identify you.

How long data is kept

Mailing-list addresses are kept until you unsubscribe or ask to be removed. Email correspondence is kept only for as long as it is useful to the matter it concerns. There are no user accounts, comments or profiles on this site.

International transfers

Some providers used here (including the mailing-list service) may store or process data outside the UK/EEA, for example in the United States. Where that happens, they are relied upon to provide appropriate safeguards for the transfer, such as standard contractual clauses or an equivalent approved mechanism.

Your rights

You have the right to access the personal data held about you, to have it corrected, to have it erased, to restrict or object to its processing, and to data portability. To exercise any of these, get in touch through the contact page and I will respond within one month.

Complaints

If you believe your data has been mishandled, you can complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk. I would appreciate the chance to resolve it with you first.

Last updated: July 2026. This notice is provided in good faith; please have it briefly checked by a qualified adviser before relying on it.