Privacy and cookies
Last updated: 11 October 2026
This website presents the Art and Architectural Trust’s study of Rocky Forest Pool. This notice explains how information is handled when you visit the site or contact the Trust.
Information when you visit
You can read the study and use the image viewers without registering or submitting personal details. The site does not include account registration, online payment facilities or contact forms.
The website is hosted by UK Cheapest. When your browser requests a page, the hosting service receives technical information such as your IP address, the requested address and browser information. Server logs may record this information, together with the time of the request, to deliver the website, investigate errors and protect it from misuse. This is separate from cookies stored on your device.
Analytics and your choice
On this website, the Art and Architectural Trust uses optional Google Analytics 4 to understand how visitors use the study and its viewing features. We rely on your consent for this analytics processing.
Google Analytics loads only after you select Accept analytics, or when your browser holds a valid saved acceptance. No Google Analytics requests are sent before consent or while analytics is rejected. Accept analytics and Reject analytics are offered with equal prominence. All website content and viewing features remain available if you reject analytics.
You can change your choice at any time through Analytics preferences in the footer. Withdrawing consent removes this site’s Google Analytics cookies and refreshes the page to stop further collection. It does not automatically erase information already sent to Google or affect the lawfulness of processing carried out before withdrawal. You can contact us separately about erasure.
Cookies and browser storage
| Name | Purpose | Duration |
|---|---|---|
_ga | Google Analytics identifier used to distinguish browsers. Set only after analytics acceptance. | Configured to expire after 30 days, without automatic renewal on subsequent visits. |
_ga_MMY5RY4STJ | Maintains Google Analytics session state on this website. Set only after analytics acceptance. | Configured to expire after 30 days, without automatic renewal on subsequent visits. |
rfp.analytics-consent.v1 | Local storage that remembers acceptance or rejection. Contains the choice and expiry information, not a visitor identifier. | The choice is valid for 180 days. Expired entries are ignored. |
rfp.analytics-return | Temporary session storage that restores your page position after withdrawing consent. | Removed after the page refresh. |
Browser restrictions or your own browser settings may remove cookies sooner. You can also manage cookies and site storage through your browser settings. If browser storage is unavailable, your choice may not persist between pages. Choices saved on this website are separate from choices on the development website.
What analytics measures
After consent, analytics measures:
- Page views, engagement time and whether visitors reach approximately 90% of a page.
- Opening painting and supporting-image viewers, zooming, panning and resetting the view.
- Selecting Explore the painting, numbered painting details and images in the mobile preparatory-sketch comparison.
- Approximate country and region.
Granular location and device data collection is disabled, including city-level location. This does not prevent Google from receiving technical connection information needed to receive analytics requests.
Our custom tracking uses artwork identifiers, detail numbers and interaction types. It does not record typed text or gesture coordinates. The page addresses configured for analytics exclude query strings and fragments.
Google receives browser identifiers and technical connection information, including your IP address when receiving requests. Google states that GA4 does not log or store IP addresses. Analytics information is not completely anonymous: browser identifiers and related usage information can constitute personal data.
Google signals, user-provided data collection and advertising personalisation are disabled. We do not use advertising or remarketing integrations, or the User-ID feature.
Google’s processing and international transfers
The Trust determines why analytics information is collected and how analytics is configured. Google processes analytics data on our behalf under its data processing terms, using its infrastructure and service providers.
Information may be processed outside the UK, including in the United States. Google describes its transfer arrangements as including applicable adequacy decisions, the UK Extension to the EU–US Data Privacy Framework for relevant transfers to certified US organisations, and contractual safeguards where applicable.
Details of these arrangements and safeguards are available in Google’s international data transfer information. You can also contact us for information about the safeguards relevant to our use of Google Analytics. Google explains its handling of information from websites using its services in its partner sites privacy information.
Analytics retention
Detailed event and user data is configured for a two-month retention period, with reset on new activity disabled. Google removes expired information through its scheduled deletion process, so this is not a promise of deletion at the exact two-month point.
The setting does not govern standard aggregated reports. Analytics cookie expiry and the period for remembering your consent choice are separate from Google’s data-retention settings.
If you contact us
If you email the Trust, your email address, name and the information you choose to provide will be used to respond to your enquiry and manage any follow-up correspondence. Please provide only information relevant to your enquiry.
Why information is used
Routine enquiries and website administration are handled on the basis of legitimate interests: responding to visitors, providing the study and keeping the website secure. Where information must be kept or disclosed to comply with the law, the relevant legal obligation applies.
Service providers and retention
Hosting and email providers may process information as part of delivering their services. Information may also be disclosed where required by law. Personal information should be retained only for as long as needed for its purpose, taking account of unresolved enquiries, security incidents and applicable legal requirements.
Website access and error logs managed by Plesk are rotated daily, with a maximum of seven rotated files retained for each log, alongside the current active log. This normally represents approximately seven previous daily logs plus the current log.
This rotation setting applies to the website logs managed by Plesk. It does not determine how long separate backup copies are retained or guarantee the immediate removal of older archived logs created before rotation was enabled.
Your rights
Depending on the circumstances, you can ask to access, correct or erase your personal information, restrict its processing or receive a portable copy where that right applies. You also have the right to object to processing based on legitimate interests. These rights are subject to the conditions and exceptions in data protection law.
You can withdraw analytics consent at any time through Analytics preferences in the footer.
For privacy questions or to exercise your rights, contact curator@artandarchitecturaltrust.org. Because analytics uses browser identifiers rather than names, we may need additional information to locate records relating to your browser. We will explain what is needed when responding to your request.
You also have the right to complain to the UK Information Commissioner’s Office through ico.org.uk/make-a-complaint/.
Other websites
Links to museums, reference sources and other external websites take you to services with their own privacy and cookie notices. Those services may collect information when you visit them.