Privacy
Last updated: 23 October 2026
This site shows Karen Welsh's paintings. It has no account to create and no shop. This page says what it takes.
Who we are
The site is Karen Welsh's, trading as Karen Welsh Creative Arts. To ask anything about this page, email karen@karenwelshartist.co.uk.
If you send Karen a message
The contact form keeps your name, your email address and your message, with the painting you asked about if you came from one. Karen reads it, and replies by email. It's kept until you ask for it to be deleted.
If you join the mailing list
The sign-up keeps your email address, your first name if you give it, and the words you agreed to and when. You're sent a link to confirm first, and you're on the list only once you've opened it. Karen uses it for the occasional email about new paintings and exhibitions, and every one has a link to stop them. You're on it until you unsubscribe. After that your address is kept only to note that you said no, so you're never added again - unless you ask for that to be deleted too.
Neither is shared with anybody else or sold.
What the server records
Each request is recorded with the page asked for, the time, your IP address and your browser's user agent, to keep the site secure and running. Those records are kept for two months and then deleted.
Cookies and analytics
Analytics is the one choice you're asked to make. With your agreement, PostHog records which pages you look at and what you click, so Karen can see which paintings people come to see. It sets a cookie to recognise you between visits. Until you choose, it counts the page you're on without writing anything to your device. If you say no, it records nothing at all. You can change your mind at any time with Manage cookies at the foot of every page.
The only other cookies remember your cookie choice and keep Karen signed in to the site's behind-the-scenes pages, which visitors never see.
Her workshops site, karenwelshworkshops.co.uk, uses the same analytics. If you've agreed on both and follow a link from one to the other, the two visits are joined up.
Nothing here follows you to any other website, and there is no advertising.
Things loaded from somewhere else
- Six of her painting videos play from her YouTube channel, through youtube-nocookie.com. Nothing is fetched from YouTube until you press play; after that, YouTube's own privacy policy applies.
- The rest of her videos stream from her Wix site's video host, video.wixstatic.com, when you press play.
- The contact form and the mailing-list sign-up are checked by Cloudflare Turnstile, so that a bot can't fill Karen's inbox. Cloudflare looks at the browser you're using to decide whether you're a person, and is given nothing you type into the form. Its privacy addendum says what it keeps.
The typefaces, the paintings and everything else are served from here.
Who else sees it
The company that built and runs this website for Karen, under a written agreement that lets them use your information only to run it, keep it secure and do what she asks. The servers it runs on are in London, and backups are kept, encrypted, on their own equipment in the UK. Your connection passes through a network that protects the site from attack, wherever in the world is nearest, and it keeps nothing.
If you agree to analytics, PostHog holds it, on their servers in the EU and under the same kind of agreement. Your browser sends it to this site first and it's passed on, so it never talks to PostHog directly, and your IP address isn't kept. It's held against a random id, not your name or email address.
Your rights
You can ask what we hold about you, or for it to be deleted, at the email above. You can also complain to the Information Commissioner's Office.