Privacy Policy

A site showing Belle's work. There is no shop checkout and no account to create. The two things you can type into this site are an email address, if you choose to join the newsletter, and a message through the contact form — and those are the only things it ever asks for.

The email address that appears elsewhere on this site is still an ordinary mailto link — writing to it opens your own mail app and the message goes straight to Belle, without passing through this site at all.

If you sign up, your email address will receive the occasional newsletter from the studio and for nothing else — no sharing and no profiling, and every newsletter carries an unsubscribe link. The list is held by Resend, the same service that delivers the contact form, in a list kept for this site alone; the signup passes the same Cloudflare Turnstile spam check as the contact form.

Closing the newsletter prompt on the homepage is also remembered, in your browser's local storage under bw-newsletter-v1. Like the cookie answer, it never leaves your device — it is only there so the prompt stops appearing.

What you type into the form — a name, an email address and a message — is sent to Belle as an email and used to reply to you, and for nothing else. This site keeps no copy: there is no database behind it, and the message lives only in email.

Two companies help along the way. Resend carries the email from this site to Belle's inbox, and retains delivery logs and message content for a period under its own privacy policy. Cloudflare Turnstile runs the spam check — it looks at a handful of browser signals, and may set a Cloudflare cookie, solely to tell people from bots. Neither is used to profile you.

There are two categories, and only one of them is a choice.

Strictly necessary is unusual here in that it sets no cookie at all. Your answer to the banner is kept in your browser's local storage under bw-consent-v1, beside the newsletter-prompt record described above — two keys, both of which never leave your device and are never sent to a server. They are only there so the questions stop being asked.

If you allow analytics, Google Analytics sets its own cookies — _ga — which last about two years and hold a randomly generated number, so a returning visit can be told apart from a new one. Reject, and they are never set.

One more possibility sits outside the banner: Cloudflare may set a cookie of its own while the spam check on the contact or newsletter form runs. That is strictly-necessary territory — it exists only so a form you are actively submitting can tell you apart from a bot — and it appears only if you use one of the forms.

Analytics is the only third party on this site, and it runs under Google Consent Mode. The three advertising signals are refused permanently, whatever you choose — this site does no advertising and no profiling, and there is nothing to opt into on that front.

The Google tag does load before you answer the banner, but in a cookieless mode with every storage signal denied: it can count that a page was viewed, and it cannot store anything on your device or recognise you again. Only an explicit yes turns storage on. IP addresses are anonymised either way.

You can change your mind at any time, and changing it takes effect immediately rather than on the next visit.

Clearing this site's data in your browser settings removes the stored answer along with any analytics cookies, and the banner will ask again. Browser-level controls — blocking cookies, private windows, Do Not Track — all work here as they do anywhere.

Questions about any of this, or a request to see or delete what little there is, can go through the contact form. If you are not happy with the answer, you can complain to the Information Commissioner's Office, the UK regulator.