Privacy Policy

1. About this policy

This Privacy Policy describes how Kirsten Wylin (“we,” “us,” or “our”) collects, uses, and shares information when you visit kirstenwylin.com (the “Site”) or interact with related social media accounts and content.

By using the Site, you agree to the collection and use of information in accordance with this policy.

2. Age requirement

The Site is intended only for individuals who are 18 years of age or older. We do not knowingly collect information from anyone under 18. If you believe a minor has provided information to us, please contact us at privacy@kirstenwylin.com and we will delete the information promptly.

3. Information we collect

Information you provide directly:

• Email address (when you sign up for our mailing list)

Information collected automatically:

• IP address and approximate location (country level)
• Browser type and version
• Device type and operating system
• Referring website
• Pages viewed and time spent on the Site
• UTM parameters from links you clicked to reach us

Information from third-party platforms:

We use analytics and advertising pixels (Meta Pixel, TikTok Pixel) that collect information about your interactions with the Site for advertising and analytics purposes.

4. How we use your information

We use the information we collect to:

• Send you email updates if you've signed up for our mailing list
• Understand how visitors interact with the Site
• Improve the Site and our content
• Measure the effectiveness of our advertising and content
• Comply with legal obligations
• Prevent fraud and abuse

5. How we share your information

We do not sell your personal information.

We may share your information with:

• Service providers who help us operate the Site (e.g., hosting providers, email service providers, analytics providers, database providers)
• Advertising platforms (Meta, TikTok) for measuring ad performance and retargeting
• Legal authorities when required by law, court order, or to protect our legal rights
• Successors in the event of a merger, acquisition, or sale of assets

6. Third-party services we use

The Site relies on the following third-party services that may process your data according to their own privacy policies:

• Vercel (hosting) — vercel.com/legal/privacy-policy
• Supabase (database) — supabase.com/privacy
• Meta (Facebook/Instagram pixel) — facebook.com/privacy/policy
• TikTok (pixel) — tiktok.com/legal/privacy-policy

7. Cookies and tracking

We use cookies and similar tracking technologies for:

• Essential site functionality (e.g., remembering you've confirmed your age)
• Analytics
• Advertising and retargeting

You can control cookies through your browser settings. Disabling cookies may affect Site functionality.

8. Your rights

For EU/UK residents (GDPR):

• Right to access your data
• Right to correct inaccurate data
• Right to delete your data (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

For California residents (CCPA/CPRA):

• Right to know what personal information we collect
• Right to delete your personal information
• Right to opt out of the sale or sharing of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your rights
• Right to correct inaccurate information
• Right to limit use of sensitive personal information

To exercise any of these rights, contact us at privacy@kirstenwylin.com. We will respond within 30 days.

9. Data retention

We retain your email address and associated data for as long as you remain subscribed to our mailing list. If you unsubscribe, we will retain your data for up to 90 days for compliance and audit purposes before permanent deletion.

Analytics data is retained according to the policies of our analytics providers, typically 24–26 months.

10. Data security

We use industry-standard security measures to protect your information, including encryption in transit (HTTPS), encryption at rest, and access controls on our database. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. International data transfers

The Site is operated from the United States, and your information may be processed in the United States and other countries where our service providers operate. By using the Site, you consent to the transfer of your information to these countries.

12. Email communications

If you've signed up for our mailing list, you can unsubscribe at any time by clicking the unsubscribe link in any email we send. We comply with the CAN-SPAM Act, GDPR, and other applicable email marketing laws.

13. Do Not Track signals

Some browsers offer a “Do Not Track” feature. We currently do not respond to Do Not Track signals, but we honor opt-out requests submitted directly to us.

14. Children's privacy

The Site is not directed to anyone under 18, and we do not knowingly collect information from minors. If we learn we have collected information from a person under 18, we will delete it.

15. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this policy reflects the most recent revision. We encourage you to review this policy periodically. Your continued use of the Site after changes constitutes acceptance of the revised policy.

16. Contact us

For questions, concerns, or to exercise your privacy rights:

Email: privacy@kirstenwylin.com

Subject line: “Privacy Request”

For data deletion requests, please include the email address you signed up with so we can locate your records.