Your information
Privacy & contributions.
Updated 29 October 2026. This notice explains how we handle contact messages and photograph submissions to Andinoacara.com.
Who is responsible
WhiteFish Creative Limited is the data controller. Your contact is James Studdart. For privacy requests, email policies@whitefishcreative.co.uk. General questions and photograph offers use the website’s forms.
You can also write to WhiteFish Creative Limited, 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE. Company number 11042372, registered in England and Wales.
What we use and why
We use your email, message and any optional name to answer your enquiry. For photograph offers, we also use the species, notes, preferred credit, uploaded file and confirmation that you have permission to offer it. We use this information to assess the contribution and agree any publication with you.
Our lawful basis is legitimate interests: responding to people who contact us, maintaining an accurate fish collection and protecting the website from abuse. We ask only for information needed for these purposes. We do not use submissions for marketing or sell your details.
Your email and correspondence are not published. You may use an alias for a photograph credit. We ask for separate agreement before publishing any new photographs or personal credit. You can change your mind about a public credit by contacting us.
Forms and the security check
Netlify hosts the forms and processes submissions, with Akismet helping filter spam. Security processing may include your IP address, browser information, the form contents and submission time. Automated checks can reject a submission; if you have trouble, complete the security check again and retry.
Netlify provides the form’s CAPTCHA using Google reCAPTCHA. It loads only after you select “Start verification”. It uses the _GRECAPTCHA cookie and processes device, browser, network and interaction information to distinguish people from automated abuse. Your choice to enable it is recorded with your submission.
The security check is required to submit a form. You can decline it and continue reading the website. “Disable CAPTCHA and reset form” reloads the page without Google’s check and clears the unsent form. It does not undo information already sent to Google or remove cookies Google has already set; you can remove those using your browser settings. We ask again on each form visit.
Photograph uploads
Please send only fish photographs. Remove personal and GPS metadata, and do not include identifiable people, private documents or confidential material. Netlify stores uploads at direct file URLs. Anyone with that URL may access the file; it is not a private file vault.
A ZIP may be up to 7 MB. If you need to send larger files, or would prefer a different transfer method, select “Contact me for the photographs”. We review contributions manually and confirm the images, permission and credit before publication.
When information is deleted
We delete enquiries, associated contact details and unused uploads as soon as the enquiry or contribution review is completed. This includes the form record and our working correspondence and copies. Accepted photographs, the agreed public credit and a minimal record of publication permission are kept separately for as long as the photographs are used, so we can respect the owner’s rights.
Removal from third-party caches or backups may take longer than removal from our working records. Netlify warns that an uploaded file can remain accessible at its direct URL for up to 24 hours after its form is deleted. Contact us if you want a published photograph or credit removed.
Service providers and international processing
Netlify, its relevant subprocessors including Akismet, and Google may process information outside the UK and EEA, including in the United States. Their applicable data processing agreements set out safeguards such as adequacy arrangements or standard contractual clauses with UK provisions. Contact us for details of the safeguards applicable to your information.
Provider information: Netlify’s data processing agreement, Netlify’s trust centre and subprocessors, and Google’s reCAPTCHA data processing information.
Your choices and rights
You can ask to access or correct your personal information, request deletion or restriction, and object to processing based on legitimate interests. Rights depend on the circumstances; we will explain any limitation. You can withdraw your choice to use the security check, without affecting processing already carried out. We do not use submissions to make decisions with legal or similarly significant effects.
Contact James Studdart using the details above. You can also complain to the Information Commissioner’s Office or your local data protection authority.