Privacy notice

Last updated: 5th October 2026

Hensby Workshop Ltd is responsible for your personal information. Company number: 16076248. Registered office: 19 Station Road, London E17 8AA.

For questions or requests about your information, email info@hensbyworkshop.com.

Enquiries, commissions and orders

We use the contact details, messages, project information and files you provide to answer enquiries, prepare quotations and manage commissions or orders, including payment and delivery.

For private clients and shop customers, our legal basis is taking steps you request before a contract, or carrying out that contract. For general enquiries, business contacts and administration, it is our legitimate interests in responding and running the workshop. Tax and accounting records are kept to meet legal obligations.

Without the necessary contact or project information, we may be unable to respond or prepare a quotation.

Residency applications and support

Matthew Hensby reviews applications. We use your details, answers and supporting information to assess applications, communicate decisions and organise the Residency. Our legal basis is our legitimate interests in running the programme and considering applications fairly. If you enter a Residency agreement, we use the information needed to carry out that contract. Required fields are needed to consider your application.

For help applying, attending an interview or participating, email us privately. Please contact us first without a diagnosis or medical history. Before you share health or disability information, we will ask you to explicitly confirm that you consent to us using it to discuss and arrange the support you request.

Support information is optional and used only for that support, with your consent, including explicit consent for health information. You can withdraw consent by emailing us; this does not affect earlier lawful use, but may affect support needing that information. You do not need to share health information to apply.

With your consent, we use your email address and any optional signup details to send workshop updates. Unsubscribe using the link in a newsletter or email us. We may keep a minimal opt-out record under our legitimate interests in respecting your preferences.

Website and cookies

We and our website providers receive technical information, such as your IP address, browser, device and site activity. Necessary website operation, security and spam protection through Google reCAPTCHA Enterprise rely on our legitimate interests in maintaining a working, secure website.

Optional cookies and related information rely on your consent. Google Analytics helps us understand site use; Google Ads measures advertising and its results. Both may use technical identifiers and visit or action information. Accept, decline or change optional cookie choices through Cookie Preferences.

See Google's privacy information and reCAPTCHA's data-processing information.

Who handles your information

Squarespace hosts the website and stores form and newsletter submissions. Google Workspace handles business email. Squarespace Payments handles shop payments, using Stripe for payment processing and Sift for fraud checks. Payment processing relies on the order contract; fraud prevention relies on our legitimate interests.

We share relevant information with delivery providers, professional advisers or authorities where needed for delivery, business or legal purposes. We limit it to what is needed.

Providers may process information outside the UK, including in the US. We use approved safeguards where required, including the UK Extension to the EU–US Data Privacy Framework where applicable, and contractual protections. Contact us for details of the safeguards relevant to your information.

Provider information: Squarespace, Google Workspace, Stripe and Sift. Payment providers also explain uses for their own purposes.

How long we keep information

Enquiries that do not become commissions: 12 months after the last meaningful contact.
Unsuccessful Residency applications and selection notes: six months after selection and reserve places are settled.
Successful Residency administration: until programme completion, plus 12 months.
Support information: only while needed to discuss and arrange the relevant support.
Newsletter details: while subscribed, with a minimal opt-out record where needed.

We keep contract and project records as needed to fulfil agreements and handle queries or claims. Accounting records are normally kept for six years from the end of the last company financial year they relate to, or longer if legally required. Funding records follow the relevant agreement's requirements.

Relevant records may be kept longer for a complaint, dispute or specific requirement. We review information and delete or anonymise it when no longer needed.

Your choices and rights

Depending on the circumstances, you can request access, correction, deletion, restricted use or a portable copy of your information. You can object to use based on legitimate interests and withdraw consent where we rely on it. Some information may need to be kept by law.

Email us to make a request. You can also complain to the Information Commissioner's Office; you do not need to contact us first.

We update this notice when our handling of information changes.