Privacy & Cookie Notice
Last updated: 3 September 2026
1. Who we are
jamespwaters.com is the professional portfolio and freelance design website of James Waters.
Design services offered through this website are supplied under the trading name James Waters Design, which is a trading name of Envision 3D Limited.
Envision 3D Limited is registered in England and Wales.
Company number: 16869852
Registered office: Unit A, 82 James Carter Road, Mildenhall, United Kingdom, IP28 7DE
Envision 3D Limited is the data controller responsible for personal information processed through jamespwaters.com in connection with enquiries, freelance design services and operation of the website.
For privacy enquiries, contact:
Email: james@jamespwaters.com
2. Personal information we may collect
Depending on how you interact with the website or with James Waters Design, we may collect personal information including:
- your name and contact details;
- your company or organisation, where relevant;
- information contained in enquiries, emails and correspondence;
- information submitted through the website contact form;
- project briefs, files, reference materials and other information you provide in connection with potential or existing work;
- contractual, invoicing and payment information;
- records relating to projects and services supplied;
- technical information generated when you use the website, such as IP address, browser and device information; and
- information generated by security, anti-spam and cookie or storage technologies used by the website.
We only collect information that is reasonably necessary for operating the website, responding to enquiries, supplying services, maintaining security and administering the business.
3. How we obtain your information
We may obtain personal information:
- directly from you, including through the website contact form;
- through email, telephone or other correspondence;
- from your employer, organisation or representative;
- from a recruitment agency, client, contracting platform or other intermediary where relevant;
- through project work and existing business relationships; and
- automatically through the website and the technical services used to operate and secure it.
4. How and why we use personal information
Responding to enquiries
We use contact details and information you provide to respond to enquiries, discuss possible projects, opportunities or collaborations and determine whether we can provide the requested services.
The lawful basis will normally be taking steps at your request before entering into a contract and/or our legitimate interests in responding to genuine business enquiries.
Providing design services
Where Envision 3D Limited, trading as James Waters Design, is engaged to provide services, we process information necessary to manage the engagement, communicate with you, produce the work, obtain feedback, administer the project and deliver the agreed services.
The lawful basis is normally performance of a contract or taking steps before entering into a contract.
Operating and administering the business
We may process information for project management, business correspondence, record keeping, invoicing, financial administration, supplier management, security and management of business relationships.
The lawful basis may be our legitimate interests in operating and protecting the business or compliance with legal obligations.
Financial, accounting and tax records
Certain information must be retained in order to comply with accounting, company and tax obligations.
The lawful basis is compliance with our legal obligations.
Website operation and security
Technical information may be processed where necessary to operate, maintain, troubleshoot and secure the website, prevent spam, detect malicious activity and protect website forms.
The lawful basis will normally be our legitimate interests in operating and securing the website and, where applicable, the provisions of the Privacy and Electronic Communications Regulations relating to technologies that are strictly necessary to provide or secure a service requested by the user.
5. Contact form and Cloudflare Turnstile
The contact form on jamespwaters.com uses Cloudflare Turnstile to help distinguish genuine submissions from automated or malicious activity.
When Turnstile is used, technical information about the visitor’s browser, device, network and interaction with the security challenge may be processed. A validation token is generated in the browser and checked with Cloudflare before a form submission is accepted.
We use this service for website and form security and not for advertising purposes.
Information submitted through the contact form may be stored within the website administration system and sent to us by email so that we can respond to the enquiry.
6. Cookies and similar technologies
The website may use cookies, local storage or similar technologies where they are necessary to:
- operate WordPress and website functionality;
- maintain security;
- protect forms against spam or automated abuse;
- remember technical or privacy preferences; or
- provide functionality requested by the visitor.
We do not use cookies for behavioural advertising.
Where a technology is strictly necessary for the operation, security or functionality of the website, it may be used without consent where permitted by law.
If we introduce analytics, marketing or other non-essential cookies or similar technologies, they will not be activated until any consent required by law has been obtained. This notice and any relevant cookie controls will be updated accordingly.
You can also control or delete cookies through your browser settings, although blocking technologies that are necessary for website operation or security may affect the functionality of the site.
7. Who we may share information with
Where reasonably necessary, personal information may be shared with service providers that support the operation of the website and business, including providers of:
- website hosting and infrastructure;
- email and communications services;
- website security and anti-spam services;
- cloud storage;
- project and workflow management;
- payment and banking services;
- accounting and business administration; and
- IT and technical support.
Information may also be disclosed to professional advisers, government authorities, regulators or law-enforcement bodies where required by law or where reasonably necessary to establish, exercise or defend legal rights.
We do not sell personal information.
8. International processing
Some website, communications, security and cloud-service providers may process information outside the United Kingdom.
Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate legal basis and safeguard is used where required by UK data-protection law. This may include an adequacy decision or appropriate contractual safeguards.
9. How long we keep information
Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected and for any applicable legal, accounting or contractual requirements.
As a general approach:
- unsuccessful, inactive or general enquiries may be retained for up to 24 months;
- contact-form submissions may be retained for up to 24 months, unless they develop into an ongoing business relationship;
- project, client, contractual and business correspondence may be retained for up to six years after the relevant engagement ends where reasonably necessary for business records or the establishment, exercise or defence of legal rights;
- accounting, invoicing and tax information will normally be retained for at least six years, or for any longer period required by applicable law; and
- information processed solely on the basis of consent will be reviewed if that consent is withdrawn.
Information may be retained for longer where required by law or where reasonably necessary in connection with an actual or anticipated legal claim or dispute.
10. Security
We take reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, alteration, disclosure or misuse.
No internet-based service can provide an absolute guarantee of security, but access to personal information is restricted where reasonably practicable to those people and service providers who need it for legitimate business purposes.
11. Your rights
Depending on the circumstances, UK data-protection law may give you rights including the right to:
- ask for access to personal information held about you;
- ask for inaccurate or incomplete information to be corrected;
- ask for personal information to be deleted;
- ask for processing to be restricted;
- object to certain processing;
- receive certain information in a portable format; and
- withdraw consent where processing is based on consent.
These rights are not absolute and may be subject to legal exceptions.
To exercise your rights or ask a question about personal information, contact:
12. Automated decision-making
We do not use personal information to make solely automated decisions that produce legal or similarly significant effects on individuals.
Automated security tools may be used to identify spam, bots or potentially malicious activity.
13. Complaints
If you have concerns about how your personal information has been handled, please contact us first so that we can try to resolve the issue.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data-protection regulator.
Further information is available at ico.org.uk.
14. Changes to this notice
We may update this Privacy & Cookie Notice from time to time where our services, website technology, service providers or legal obligations change.
The current version will always be published on this page.
