Sign in Subscribe

Privacy Policy

Last updated: 14 August 2026

This Privacy Policy explains how Draw Fractals collects, uses, stores and protects personal information when you visit drawfractals.com, contact us, subscribe to emails or join the workshop waiting list.

1. Who we are

Draw Fractals is operated by Ágota Benedek, based in London, United Kingdom.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Ágota Benedek is the data controller responsible for the personal information described in this Privacy Policy.

Contact email: drawfractals@gmail.com
Website: https://drawfractals.com/

2. Personal information we collect

The information we collect depends on how you interact with the website.

Information you provide directly

We may collect:

  • your email address when you subscribe or join the workshop waiting list;
  • your name, if you choose to provide it through a Ghost member account or correspondence;
  • your subscription preferences and subscription status;
  • information you include when contacting us by email;
  • records of your consent, subscription, confirmation and unsubscribe requests;
  • any information you voluntarily provide when enquiring about future workshops.

Please do not send sensitive personal information, medical information or other special category data by email unless we specifically ask for it and explain why it is required.

Information collected automatically

When you use the website, limited technical information may be collected, including:

  • IP address;
  • browser and device information;
  • date and time of access;
  • pages visited;
  • referring website or source;
  • basic security and server log information;
  • the page or source from which a membership or subscription began.

When Ghost analytics is enabled, we may also receive aggregated information about website visits and content engagement. When a visitor is signed in as a member, Ghost may associate activity with the member ID and membership status.

We do not currently use Google Analytics, Meta Pixel, advertising trackers or behavioural advertising cookies.

3. How and why we use personal information

We use personal information for the following purposes.

Workshop waiting list and email updates

We use your email address to:

  • add you to the workshop waiting list;
  • tell you when new London or online workshop dates are announced;
  • send occasional information directly related to Draw Fractals workshops;
  • manage your subscription and unsubscribe requests.

Our lawful basis is your consent. You give consent by voluntarily entering your email address and submitting the signup form after being told what emails you will receive.

You can withdraw your consent at any time by using the unsubscribe link in an email or by contacting drawfractals@gmail.com.

Responding to enquiries

If you contact us, we use the information you provide to respond to your question or request.

Our lawful basis may be:

  • our legitimate interest in responding to enquiries and operating Draw Fractals; or
  • taking steps at your request before entering into a contract, where your enquiry concerns a potential workshop booking or service.

Operating and protecting the website

We may process limited technical information to:

  • operate and maintain the website;
  • prevent spam, fraud, misuse and security incidents;
  • diagnose technical problems;
  • understand how visitors find and use the website;
  • improve the website and its content.

Our lawful basis is our legitimate interest in operating a secure, functional and useful website.

We may retain or disclose information where reasonably necessary to:

  • comply with a legal obligation;
  • respond to a lawful request from a public authority;
  • establish, exercise or defend legal claims;
  • protect our rights or the rights of others.

Our lawful basis is compliance with a legal obligation or our legitimate interests in protecting our legal rights.

4. Email marketing and workshop notifications

We only send workshop announcements or other marketing emails where you have actively requested them or otherwise provided valid consent.

We do not buy, rent or sell email lists, and we do not share your details with other organisations for their own marketing.

Every marketing email will provide an unsubscribe method. You can also withdraw your consent by emailing drawfractals@gmail.com.

Withdrawing consent will not affect the lawfulness of processing carried out before consent was withdrawn.

We may retain a minimal suppression record after an unsubscribe request so that we can respect your preference and avoid adding the same address back to a marketing list by mistake.

5. Cookies, local storage and analytics

The website uses Ghost as its publishing, membership and email subscription platform.

Ghost may use strictly necessary technologies to provide features such as:

  • email subscription and confirmation;
  • secure member sign-in;
  • session management;
  • account and subscription management;
  • fraud and security protection.

These technologies are necessary for services requested by the user and are not used for behavioural advertising.

Ghost’s native website analytics are first-party and cookie-free. They count visits within limited time periods without using persistent cookies to identify visitors across different sessions, browsers or devices.

We do not currently use non-essential advertising or tracking cookies. If this changes, this Privacy Policy will be updated and any consent mechanism required by law will be introduced before those technologies are activated.

6. Service providers and recipients

We use trusted service providers to operate the website and manage subscriptions. These may process personal information on our behalf only where necessary to provide their services.

They include:

  • Ghost Foundation, which provides the Ghost publishing, membership, subscription, newsletter and analytics platform;
  • email delivery and infrastructure providers used by Ghost;
  • content delivery providers, including jsDelivr, used to deliver Ghost Portal and search functionality;
  • Bunny Fonts and related content delivery services used to display website fonts;
  • website hosting, security and technical support providers;
  • professional advisers or public authorities where disclosure is legally required.

These providers may receive limited technical information, such as an IP address, when their resources are requested by your browser.

We require processors to handle personal information securely and in accordance with applicable data protection requirements.

We do not sell personal information.

7. International data transfers

Some service providers may process information outside the United Kingdom or the European Economic Area.

Where personal information is transferred internationally, we rely on legally recognised safeguards where required. These may include:

  • UK adequacy regulations;
  • contractual protections approved under UK data protection law;
  • the UK International Data Transfer Agreement;
  • the UK Addendum to the European Commission Standard Contractual Clauses;
  • other safeguards permitted by applicable data protection legislation.

Ghost Foundation states that it uses contractual safeguards for relevant international transfers. You may contact us if you would like more information about the safeguards applying to your personal information.

8. How long we keep personal information

We keep personal information only for as long as it is reasonably required for the purpose for which it was collected.

Our general retention periods are:

  • Workshop waiting-list information: reviewed after 24 months and deleted or anonymised if it is no longer relevant and consent has not been renewed;
  • Newsletter and email subscription information: retained until you unsubscribe, withdraw consent or the mailing list is discontinued;
  • Enquiries and correspondence: normally retained for up to 24 months after the last meaningful contact;
  • Consent and unsubscribe records: retained for as long as reasonably necessary to demonstrate compliance and respect your communication preferences;
  • Technical and security records: retained according to the operational and security requirements of the relevant service provider and only for as long as necessary.

Information may be kept for longer where required by law or where necessary to establish, exercise or defend legal claims.

9. How we protect personal information

We use reasonable technical and organisational measures to protect personal information, including:

  • HTTPS encryption for the website;
  • restricted administrative access;
  • password-protected and authenticated systems;
  • secure service providers;
  • regular software and security updates;
  • limiting the information we collect.

No internet-based system can be guaranteed to be completely secure. If we become aware of a personal data breach, we will assess it and take the actions required by applicable law.

10. Your data protection rights

Depending on the circumstances, you may have the right to:

  • ask for access to your personal information;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete your personal information;
  • ask us to restrict how we use your information;
  • object to processing based on legitimate interests;
  • object at any time to the use of your information for direct marketing;
  • receive certain information in a portable format;
  • withdraw consent at any time;
  • make a complaint to a data protection authority.

These rights are not absolute and may depend on the circumstances and the applicable lawful basis.

To exercise a right, contact drawfractals@gmail.com. We may ask for reasonable information to confirm your identity before responding.

We normally respond to valid requests within one month, as required by data protection law.

11. Automated decision-making

We do not use personal information to make decisions about you based solely on automated processing, and we do not carry out automated profiling that produces legal or similarly significant effects.

12. Children’s information

We do not knowingly collect personal information from children through the workshop waiting list.

If a future workshop is intended for participants under the age of 18, we will provide additional privacy information and obtain any consent or authorisation required before collecting their personal information.

If you believe that a child has provided personal information without appropriate authorisation, please contact drawfractals@gmail.com.

13. Third-party websites and social media

The website includes links to third-party services, including Facebook and Instagram.

When you follow an external link, the third party will process information according to its own privacy policy. We are not responsible for the privacy practices of third-party websites or platforms.

Simply displaying a social media link on this website does not give us access to your social media account.

14. Changes to this Privacy Policy

We may update this Privacy Policy when our services, technology or legal obligations change.

The latest version will always be available on this page. The “Last updated” date at the top will show when the policy was most recently revised.

If we plan to use personal information for a materially different purpose, we will provide appropriate information before beginning that processing and seek new consent where required.

15. Contact and complaints

If you have a question, request or complaint about how we use personal information, please contact:

Ágota Benedek
Email: drawfractals@gmail.com
London, United Kingdom

We encourage you to contact us first so that we have an opportunity to address your concern.

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane, Wilmslow, Cheshire SK9 5AF
United Kingdom

Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/