Privacy Notice

● Last Updated: July 2026

Who I am

This website is run by Jade Foster, a curator, art historian and writer based in the North of England. References to ‘I’, ‘me’ or ‘my’ in this notice are to Jade Foster. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), I am the controller of any personal information collected through this website or through my professional practice as an independent curator and writer.

This notice applies to you if you visit this website, contact me through it, subscribe to updates, or work with me in a professional capacity — for example as an artist, collaborator, commissioner, editor, gallerist, student or researcher. Where I work in an employed or governance role at another organisation, that organisation’s own privacy notice applies to information processed in that context.

I am committed to respecting your privacy. This notice explains what personal information I collect, why, on what lawful basis, who it may be shared with, how long it is kept, and what your rights are.

Personal information I collect

Depending on how we interact, I may collect:

  • Contact details: your name, email address, telephone number and postal address, where you provide them.

  • Correspondence: the content of emails, contact-form messages, letters and other communications

  • between us, including any enquiries, proposals or feedback you send.

  • Professional information: your role, organisation, professional background and details relevant to a project, commission, collaboration or publication we are working on together.

  • Business and payment information: invoicing details, fees, transactions, and records needed for contracts and accounting. I do not collect or store payment card details through this website.

  • Subscription information: your email address and preferences if you sign up to receive news or a mailing list.

  • Access requirements: where you share them with me so that an event, meeting or collaboration can be organised appropriately. I treat this information with particular care, store it only for the purpose you shared it, and delete it when it is no longer needed.

  • Website usage information: technical data such as your IP address, browser type, device information and pages visited, collected through Squarespace Analytics and Google Analytics, where in use.

  • Photographs, video and audio: documentation of events or projects, where you have taken part and been informed, or where you have provided material to me.

I do not carry out credit checks, identity or anti-money-laundering screening, and I do not use automated decision-making or profiling.

Special categories of personal information

I do not routinely collect special category information (such as information about health, race or ethnicity, religious belief, sexual orientation or political opinions). Where you choose to share such information with me — for example, access requirements that relate to disability or health — I process it on the basis of your explicit consent, or where processing is necessary in connection with equality of opportunity, and I keep it only as long as needed.

Where your information comes from

Most of the personal information I hold comes directly from you: when you email me, use the contact form, subscribe to updates, or work with me on a project. I may also receive information about you from:

  • a colleague, organisation or mutual contact who introduces us or refers you to me;

  • your employer or the organisation you represent, in connection with a project or commission;

  • publicly available professional sources, such as an organisation’s website or a professional platform, where relevant to work we are doing together.

How and why I use your personal information

Responding to enquiries and correspondence — using your contact details and our correspondence. Lawful basis: legitimate interests (running my practice and responding to the people who contact me).

Entering into and performing contracts — commissions, curatorial projects, writing and consultancy, using your contact details, professional information, and business and payment information. Lawful basis: performance of a contract with you or the organisation you represent.

Organising events, meetings and projects, including meeting access requirements — using your contact details, professional information and any access requirements you share. Lawful basis: legitimate interests; explicit consent for special category information.

Sending news and updates you have subscribed to — using your contact details and subscription preferences. Lawful basis: consent, which you can withdraw at any time.

Keeping accounting and tax records — using business and payment information. Lawful basis: legal obligation.

Maintaining and improving this website — using website usage information. Lawful basis: legitimate interests (understanding how the site is used and keeping it working well).

Documenting and promoting my work and projects — using photographs, video and audio. Lawful basis: consent, or legitimate interests where documentation was made openly at a public event.

Establishing, exercising or defending legal claims — using any relevant information held. Lawful basis: legitimate interests; legal obligation.

Where I rely on your consent, you can withdraw it at any time by contacting me using the details at the end of this notice, or by using the unsubscribe link in any mailing. Withdrawing consent does not affect processing that took place before you withdrew it.

Who I share your personal information with

I do not sell your personal information, and I do not share it with third parties for their own marketing. I may share personal information with:

  • Service providers that support my practice. This website, including its contact form, analytics and any mailing list sign-up, is hosted and operated on Squarespace. Information you submit through the contact form or sign-up is stored by Squarespace and delivered to me. I also use email and cloud storage providers [provider(s)] to run my practice. These providers process information on my instructions under contractual safeguards.

  • Professional advisors: such as an accountant, legal advisor or insurer, where necessary.

  • Project partners: organisations I am working with on a specific project, where you are involved in that project and sharing is necessary to deliver it.

  • Regulators, law enforcement or public authorities: where I am legally required to do so.

International transfers

Squarespace is a company based in the United States, and information collected through this website may be stored on servers outside the UK, including in the US. Where this happens, transfers are protected by safeguards recognised under UK data protection law, such as the UK Extension to the EU–US Data Privacy Framework and the UK International Data Transfer Agreement / Addendum, as set out in Squarespace’s own data protection terms. Squarespace’s privacy policy is available at squarespace.com/privacy.

How long I keep personal information

I keep personal information only as long as needed for the purpose it was collected, and then for as long as any legal requirement or potential claim applies. In general:

  • Enquiries and general correspondence: up to 2 years after our last contact.

  • Contracts, commissions and business records: 6 years after the end of the relevant tax year, in line with HMRC requirements.

  • Mailing list subscriptions: until you unsubscribe, after which your details are removed from the active list.

  • Access requirements: for the duration of the event or project they relate to, unless you ask me to keep them for future work together.

Security

I take reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access, including password protection, secure hosting and limiting access to the information I hold. No system is entirely secure, but I take the security of your information seriously.

Your rights

Under UK data protection law you have the right to:

  • be informed about how your personal information is used (which is the purpose of this notice);

  • access the personal information I hold about you;

  • have inaccurate information corrected;

  • have your information erased in certain circumstances;

  • restrict processing in certain circumstances;

  • object to processing, including an absolute right to object to direct marketing;

  • data portability in certain circumstances;

  • and not be subject to solely automated decision-making (which I do not use).

To exercise any of these rights, contact me using the details below. More information about your rights is available from the Information Commissioner’s Office at ico.org.uk/for-the-public.

If you are unhappy with how your personal information has been handled, I would encourage you to contact me first so I can try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

Cookies

This website is built on Squarespace, which sets a small number of cookies. Non-essential cookies are only placed if you accept them through the cookie banner, and you can change your choice at any time using the cookie preferences link on this site or through your browser settings.

Essential cookies keep the site working and secure. They manage your session, protect forms against fraudulent submissions, and remember the cookie choice you have made so you aren't asked repeatedly. These cannot be switched off, because the site cannot function without them. Most last for the duration of your visit; the one recording your cookie preference lasts longer, so that your choice is remembered on future visits.

Analytics cookies help me understand how the site is used — which pages people visit, how they arrived, and whether anything is broken. This is collected in aggregate and does not directly identify you, and I use it to improve the site rather than to profile individual visitors. Squarespace’s analytics cookies typically last up to two years, and they are only set if you accept them.

Cookies set by embedded content. If a page includes content hosted elsewhere — a video, a map, a font, or an audio player — that provider may set its own cookies when the content loads or plays. These are governed by that provider’s own policies rather than mine, and I aim to note where such content appears.

Squarespace publishes a full, current list of the cookies it uses, including names and durations, at squarespace.com/cookie-policy. If you would like to know exactly what is set on a particular page, please ask, and I will tell you.

Changes to this notice

I may update this notice from time to time. When I make a material change, I will update the date at the top of this page and, for significant changes, give reasonable notice where I can.

Contacting me

For any question, request or complaint about the personal information I hold about you, please email info@jade-foster.com.