Privacy Notice
No cookies, no analytics, no third-party requests. Here is exactly what happens to your details.
The short version
This website does not use cookies, does not run analytics, does not embed third-party trackers and does not load anything from an external server. Every script, stylesheet, font and image is served from this domain. If you send an enquiry, I use your details to reply to your enquiry and for nothing else.
Who is responsible
Thomas Brown, trading as Thomas Brown Creates, of Newport, Shropshire, is the data controller for personal data collected through this website. You can reach me at [email protected].
What is collected
| Data | Why | Kept for |
|---|---|---|
| Name | To address you correctly in a reply | Up to 24 months from last contact |
| Email address | To reply to your enquiry | Up to 24 months from last contact |
| Phone number (optional) | To discuss a booking if you prefer to talk | Up to 24 months from last contact |
| Enquiry details | To prepare an accurate quote | Up to 24 months, or 7 years if a booking results (tax records) |
| Theme preference | Stores whether you chose the light or dark theme | Held in your own browser only; never sent anywhere |
Lawful basis
For enquiries, the lawful basis is consent (you choose to send the form) and, once a booking exists, performance of a contract. For financial records relating to completed bookings, the basis is legal obligation under UK tax law.
What is not done
- No cookies are set by this website.
- No analytics, heatmaps or session recording.
- No advertising networks, pixels or social media trackers.
- No fonts, scripts or images loaded from a third-party CDN.
- Your details are never sold, rented or shared for marketing.
Theme preference
If you switch between the light and dark theme, that single preference is stored in your browser's local storage under the key tbc-theme. It never leaves your device and it is not readable by anyone else. Clearing your browser data removes it.
Photographs of people
Photography at sporting events is covered separately. Where a shoot involves anyone under 18, I work to the organisation's safeguarding and photography consent policy and require the organiser's written permission. If you appear in a photograph on this site or in a delivered gallery and would like it removed, email me and it will be taken down — no explanation needed.
Your rights
Under UK GDPR you have the right to ask what personal data I hold about you, to have it corrected, to have it erased, to restrict or object to its processing, and to receive it in a portable format. Email [email protected] and I will respond within one month.
If you are not satisfied with my response you may complain to the Information Commissioner's Office at ico.org.uk.
Hosting and security
Enquiry emails are held in a password-protected mailbox with two-factor authentication. Delivered galleries are hosted on TransferNow behind a private link that expires after 356 days. Original files are stored on encrypted drives.
Changes
If this notice changes, the date below changes with it. Material changes will be flagged on the contact page.
Last updated: August 2026.
Let's get your season on camera.
Fixtures, tournaments, team portraits or aerial work — tell me the date and the venue and I will come back with a plan and a price.