PRIVACY NOTICE
Your Together — A Public Artwork by Frank Styles
Wembley Park, London
Last updated: April 2026
---
1. Who Is Responsible for Your Data
Frank Styles ("the Artist", "we", "us", "our") is the sole data controller and data processor for all personal data collected through this photo submission platform. The Artist is registered with the Information Commissioner's Office (ICO).
Contact: franco@frankstyles.com
---
2. What Data We Collect
When you submit a photograph through this platform, we collect the following personal data:
- Your first name and last name
- Your email address
- Your country of residence
- Your submitted photograph (which may contain images of you and others)
- Any optional information you choose to provide about your photo or the people in it
- Your submission reference code
- The date and time of your submission
---
3. Why We Collect Your Data and the Legal Basis
We collect and process your personal data on the following legal bases under UK GDPR:
Consent (Article 6(1)(a) UK GDPR) — You provide explicit, freely given, informed consent at the point of submission by confirming the consent statements on the submission form. This consent covers:
- Use of your photograph as part of the public artwork
- Use of your email address to send you updates about the artwork, including the location of your photo within it
- Use of your photograph in associated press, promotional, and media materials
Legitimate Interests (Article 6(1)(f) UK GDPR) — We may process basic submission data for the purposes of record-keeping, moderation, and compliance with our contractual obligations to our commissioning partners, where this does not override your fundamental rights and freedoms.
---
4. How We Use Your Data
We use your personal data for the following specific purposes:
- To review, moderate, and process your photo submission
- To incorporate your photograph into the public artwork
- To document and promote the artwork and the artist's practice
- To send you updates about the artwork, including when it goes live and where your photo can be found within it
- To maintain records of processing activities as required under UK GDPR
- To respond to any data subject rights requests you may make
We will not use your data for any other purpose without first obtaining your consent.
---
5. Who We Share Your Data With
We do not sell, share, or transfer your personal data to any third party for marketing or commercial purposes.
Your data may be accessed by:
- Tally.so — the form platform used to collect your submission, acting as a data processor on our behalf. Tally processes data in accordance with UK GDPR. For details, see Tally's privacy policy at tally.so/privacy.
- Google LLC — submission data is logged to Google Sheets and photos may be stored in Google Drive. Google acts as a data processor on our behalf. Google's servers are located in the EU and are covered by appropriate UK GDPR transfer safeguards.
- Wembley Park (Quintain Estates and Development Ltd) — the Commissioner may receive anonymised or aggregated data (such as the total number of submissions received) for reporting purposes only. No personal data will be disclosed to the Commissioner.
No personal data is transferred outside the United Kingdom unless adequate safeguards are in place in accordance with UK GDPR Article 46.
---
6. How Long We Keep Your Data
We retain your personal data only for as long as is necessary for the purposes described in this Notice.
Specifically:
- Submitted photographs and associated personal data will be retained for the duration of the public display of the Work and any associated exhibitions
- All personal data, including submitted photographs, will be securely deleted within 90 days of the conclusion of the Work's public display, unless a longer retention period is required by law or agreed in writing
- Submission records required for compliance purposes will be retained for a period of no longer than 6 years in accordance with applicable legal requirements
---
7. Your Rights Under UK GDPR
Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the following rights:
Right of access — You have the right to request a copy of the personal data we hold about you.
Right to rectification — You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to erasure — You have the right to request that we delete your personal data. Please note that where your photograph has already been incorporated into the public artwork, it may not be technically possible to remove it from the physical Work. We will honour erasure requests to the fullest extent possible in these circumstances.
Right to restrict processing — You have the right to request that we pause or limit processing of your personal data in certain circumstances.
Right to data portability — You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to withdraw consent — You have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. To withdraw consent, contact us at franco@frankstyles.com.
Right to object — You have the right to object to processing based on legitimate interests.
To exercise any of these rights, please contact us at franco@frankstyles.com. We will respond to all requests within one calendar month of receipt, in accordance with UK GDPR Article 12. This period may be extended by a further two months where the request is complex or where we receive a number of requests, in which case we will notify you within the first month.
---
8. How We Protect Your Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or damage. These measures include:
- Secure encrypted connections (HTTPS) for data transmission
- Access controls limiting who can view submission data
- Secure cloud storage with access restricted to authorised personnel only
- Secure deletion of data at the end of the retention period
---
9. Cookies
This Platform may use essential cookies to operate correctly. No tracking, advertising, or non-essential cookies are used without your consent. For more information, see the site-wide cookie notice at frankstyles.com.
---
10. Changes to This Notice
We may update this Privacy Notice from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this Notice periodically.
---
11. How to Complain
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113