Last updated: 23 October 2026
Who is responsible for your information?
Belief is the Battlefield is a conceptual art project operated by Phil Tyson PhD, a sole trader and the data controller for this website. ICO registration: ZC250735.
Privacy enquiries: beliefisthebattlefie.thesaurus715@passmail.net
Correspondence: Richmond Grove, Manchester, UK, M13 0DH.
This notice covers beliefisthebattlefield.com and our administration of the project’s external supporter community. Psychotherapy services at philtyson.com have a separate privacy notice.
Information we use and our reasons
Website delivery and security. Hosting and technical service providers process information such as your IP address, browser details, requested pages and request times to deliver the website, prevent abuse and resolve faults. We rely on legitimate interests in running a secure, reliable website.
Email enquiries. We use your email address, message and any details you provide to respond and manage your enquiry. Our lawful basis is legitimate interests in communicating with people who contact the project, or steps necessary for a contract where your enquiry concerns a service. Please do not send therapy records or sensitive personal information to this art project.
Visitor statistics. Google Analytics, supplied through Google Site Kit, measures visits and interactions. Analytics cookies require your consent. We use advanced consent mode for all visitors: analytics storage is denied until you accept, and advertising storage is always denied because we do not use Google advertising or remarketing. While analytics storage is denied, Google may receive cookieless measurement signals, including page and technical request information. Rejecting cookies therefore does not block every request to Google. We rely on legitimate interests in limited cookieless measurement and consent for optional analytics cookies. You can object to legitimate-interest processing by contacting us.
Google signals is off, ads personalisation is disabled worldwide, and granular location and device collection is disabled. This website’s Analytics property is not linked to Google Ads or AdSense. See our Cookie Policy for storage and controls.
Sharing and external resources. AddToAny provides sharing buttons. Fonts, images and icons can be delivered by Google, Automattic’s image service and jsDelivr. Loading these resources discloses technical request information to the relevant provider even where no cookie is set. We use these services to display and share the work, relying on legitimate interests for necessary delivery and consent where optional storage requires it. Following a social, podcast or support link takes you to a separate service with its own privacy information.
Support and membership. Buy Me a Coffee handles payments and membership outside this website. We may receive supporter names or display names, email addresses, messages, contribution details and membership status to acknowledge support, provide benefits and keep records. We do not receive full payment-card details. We rely on contract for paid membership benefits, legitimate interests for voluntary supporter administration, and legal obligations for accounting records. Discord handles the external community; usernames, messages and information you post can be visible to members and moderators. Necessary administration and moderation serve our legitimate interests in providing a safe community.
This website does not offer visitor accounts, comments, a contact form or a newsletter signup. We do not add supporters to an email marketing list.
Who receives information?
Our service providers include our web hosting provider, Automattic/Jetpack for website services, Google for Analytics and fonts, AddToAny for sharing, jsDelivr for icon delivery, and Dropbox for website backups. Our privacy-contact address uses Proton’s email-alias service. Buy Me a Coffee, its payment providers and Discord process information when you use those services. Authorised technical support or community moderators may access information where necessary for their role. We may also disclose information where legally required or to professional advisers under confidentiality obligations.
Providers may process data on our behalf or act as independent controllers for their own services. Their notices provide further details: Automattic, Google, AddToAny, jsDelivr, Dropbox, Proton, Buy Me a Coffee and Discord.
International processing
These services may process information outside the UK, including in the United States and other countries where they operate. UK data protection law requires an applicable adequacy arrangement or appropriate safeguards for restricted transfers, such as approved contractual clauses with the UK addendum. Provider arrangements differ by service and recipient. Contact us for information about the safeguards applicable to a particular transfer or to request a copy of relevant safeguards.
How long we keep information
- Ordinary enquiries: up to 12 months after resolution, unless a dispute or legal obligation requires longer retention.
- Google Analytics user and event data: two months, without extending user retention on new activity. Google’s retention controls do not apply to most aggregated standard reports. Changes may take 24 hours to take effect.
- Supporter and membership records: for as long as needed to administer support, access and benefits, resolve queries and meet applicable accounting obligations. We review records when the relationship ends; information required for a dispute or legal obligation is retained for that purpose.
- Hosting, security logs and backups: retained according to operational and recovery needs and the provider’s applicable retention arrangements. Backup copies may remain until the relevant backup expires or is removed, with access restricted to recovery and administration.
Cookie lifetimes are separate from server-side data retention and are described in the Cookie Policy. External platforms apply their own retention rules to information they control.
Your rights and choices
Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your information, and object to processing based on legitimate interests. You can withdraw consent at any time without affecting processing already undertaken. Use Manage consent to change cookie choices, or contact us for other requests. We may need proportionate information to verify your identity.
You can complain to the Information Commissioner’s Office. We welcome the opportunity to resolve concerns, but you do not have to contact us first. We do not use visitor information to make solely automated decisions with legal or similarly significant effects. We will update this notice when the project’s processing changes.
