Privacy policy
Last updated: 12 November 2026
Who we are
This website, candisewai.art, is run by Candise Wai, an artist based in Oxfordshire, UK. For any question about your personal information, email [email protected].
We collect as little as possible. You can browse the whole site without giving us anything.
Newsletter
If you sign up, we keep your email address so we can send you occasional news about new paintings, exhibitions and the studio. We rely on your consent: after signing up you receive an email asking you to confirm, and nothing else is sent until you do.
The list is managed by EmailOctopus, a UK-based email service, which also records when and how you signed up and confirmed. Every newsletter has an unsubscribe link, or you can email [email protected] to be removed. Your address stays on the list until you unsubscribe; addresses that are never confirmed are not sent newsletters and are removed from time to time.
To keep spam out, the sign-up form uses Cloudflare Turnstile, which checks technical information about your browser and connection to tell people from bots. It is only loaded once you start using the form.
Visitor statistics
We use Cloudflare Web Analytics to count visits and see which pages are popular. It uses no cookies, does not track you across websites, and does not identify you. We don't use Google Analytics or any advertising trackers.
Emails you send us
Emails to [email protected] are forwarded by Cloudflare to our inbox (Gmail). We use what you send only to reply to you, and keep it for as long as needed for that conversation, for example about a painting enquiry.
Hosting, fonts and sharing
The site is hosted by Cloudflare, which processes your IP address and browser details to deliver pages and protect the site from attacks. The site's fonts are loaded from Google Fonts, so your browser connects to Google, which receives your IP address.
The Share buttons are plain links: nothing is sent to social networks unless you click one, and then you are on that network's own site, under its own privacy policy.
Some of these providers may process data outside the UK. When they do, they use safeguards recognised under UK data protection law.
Your rights
Under UK data protection law you can ask to see the personal information we hold about you, ask us to correct or delete it, object to how we use it, or withdraw your consent at any time. Email [email protected] and we'll reply within one month.
If you're unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.