Get the newsletter

# privacy

Privacy policy.

This policy explains what personal data Computer Graphics Training collects, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Written in plain UK English, not lawyer-copied filler.

By CGT Editorial Team. Last verified 2026-07-06. Sources cited inline.

# who we are

Data controller.

The data controller for this website is Computer Graphics Training, a UK-based independent editorial publication. Contact for any data protection query: [email protected]. We are registered on the Information Commissioner’s Office public register where required.

# what we collect

What we collect and why.

Two categories of personal data, and the lawful basis for each under UK GDPR Article 6.

Newsletter subscribers

If you subscribe to the newsletter we collect your email address and, optionally, your first name. Lawful basis: consent (UK GDPR Art. 6(1)(a)). We store subscriber records with Kit (formerly ConvertKit), a US-based email service provider that we use to send the newsletter. See “International transfers” below for the safeguards that apply. You can withdraw consent at any time by clicking the unsubscribe link in any email or by emailing us directly.

Analytics

We use Plausible Analytics, a cookieless privacy-preserving analytics service. Plausible does not set cookies, does not collect personal data, and does not track individuals across sites. It counts page views, referrers, and country-level location derived from IP (with the IP itself discarded before storage). Lawful basis: legitimate interest (UK GDPR Art. 6(1)(f)) in understanding which editorial content serves readers. Because no personal data is stored, you do not need to consent to Plausible and we do not display a consent banner for it.

Contact enquiries

If you email us at [email protected] we retain the email and your reply address for as long as needed to respond to and record the enquiry (typically 24 months). Lawful basis: legitimate interest in editorial correspondence.

Server logs

Our web host retains standard server logs (IP address, timestamp, browser user-agent, requested URL) for up to 30 days for security and diagnostic purposes. Lawful basis: legitimate interest in security.

# retention

How long we keep data.

  • Newsletter subscribers: until you unsubscribe, or 24 months after your last engagement (open or click), whichever is sooner.
  • Contact enquiries: 24 months from last correspondence.
  • Server logs: up to 30 days.
  • Analytics: Plausible retains aggregated data for as long as we maintain the account; no individual data is stored.

# your rights

Your rights under UK GDPR.

You have the following rights over personal data we hold about you. Exercise any of them by emailing [email protected]. We respond within one calendar month, per UK GDPR Art. 12.

  • Right of access: request a copy of the data we hold about you.
  • Right to rectification: ask us to correct inaccurate or incomplete data.
  • Right to erasure: ask us to delete your data (“right to be forgotten”), subject to lawful limits.
  • Right to restrict processing: ask us to pause processing while we resolve a query.
  • Right to data portability: receive your data in a machine-readable format for transfer to another service.
  • Right to object: object to processing based on legitimate interest, including direct marketing.
  • Right to withdraw consent: withdraw newsletter consent at any time via the unsubscribe link.
  • Right to complain to the ICO: lodge a complaint with the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

# international transfers

International data transfers.

Kit (our email service provider) is based in the United States. Transfers of UK personal data to Kit rely on the UK Extension to the EU-US Data Privacy Framework (in force as of the UK adequacy decision, October 2023), together with Kit’s own certification under the framework. Where the framework is not in effect for any reason, we rely on Standard Contractual Clauses (International Data Transfer Addendum, ICO version 2022).

Plausible Analytics is EU-hosted (Frankfurt, Germany). No transfer to a third country applies for analytics.

# cookies + updates

Cookies, changes, and how to reach us.

For details of the cookies (if any) used by this site, see our cookies policy. We may update this privacy policy from time to time; the current version and last-updated date are always shown at the top of the page. For any question about your data, email [email protected] with the subject “privacy”.

Last updated: 2026-07-06. Prior versions available on request.