Privacy Policy

For the purposes of data protection law, the data controller is:

In this policy, "we", "us" and "our" refer to Olivia Tarpey and OliviaTarpey.com.

Depending on how you use the website, we may collect:

We may use personal information to:

• Respond to messages, enquiries and collaboration requests
• Discuss or manage professional, commercial or creative projects
• Provide information you have requested
• Send newsletters or marketing communications where you have agreed to receive them
• Operate, secure and maintain the website
• Understand how visitors use the website
• Improve the website, its content and user experience
• Prevent fraud, misuse, security incidents or unlawful activity
• Maintain appropriate business, contractual, financial and legal records
• Establish, exercise or defend legal claims
• Comply with legal and regulatory obligations

We will not sell your personal information.

Under UK data protection law, we must have a lawful basis for using personal information.

Depending on the circumstances, we may rely on:

We will only send direct email marketing where we have an appropriate legal basis to do so.

When consent is required, you will be asked to actively opt in. You can unsubscribe at any time by:

• Using the unsubscribe link in the relevant email
• Contacting us at oliviatarpey@gmail.com

Withdrawing consent will not affect the lawfulness of processing that took place before consent was withdrawn.

We may retain minimal information, such as your email address, on a suppression list to ensure that we respect your request not to receive further marketing.

Cookies are small data files placed on your device when you visit a website. Similar technologies may include local storage, pixels, tags and software development tools.

Where enabled and accepted through the website's cookie controls, analytics services may collect information about how visitors use the website.

This information may help us understand:

• Which pages are visited
• How visitors arrive at the website
• Whether pages load correctly
• Which devices or browsers are being used
• How the site's design and content can be improved

We use analytics information in an aggregated manner wherever reasonably possible.

Google Analytics is not active on the website by default. If Google Analytics or a similar measurement service is introduced later, it will only load and operate after you have actively consented to analytics cookies.

The website may use third-party services to host or deliver images, videos and other media. These may include services such as:

• Mux, for video hosting and playback
• Cloudinary, for image and media delivery
• Social-media platforms where content is embedded
• Content-delivery and website-hosting providers

Embedded content may behave as though you visited the third-party provider's own website. Depending on the provider and your privacy choices, that provider may collect technical information or use cookies and similar technologies.

The current site implementation uses Mux for background video playback without enabling Mux Data analytics. Future third-party embeds such as YouTube, Vimeo, Instagram or similar services will remain disabled until you accept the relevant optional cookie category where consent is required.

Where consent is legally required, non-essential embedded functionality should remain disabled until you accept it.

The website and associated information may be processed by trusted service providers that help us operate the website and our business.

These may include providers of:

• Website hosting and content delivery
• Video and image hosting
• Website analytics
• Email and communications
• Cloud storage
• Cybersecurity and fraud prevention
• Professional, accounting or legal services

Current or anticipated website providers may include Vercel, Mux, Cloudinary and relevant Google services.

These organisations may process information only as permitted by their agreements with us, their own legal obligations and applicable data protection law.

We may share personal information with:

• Website and technology providers
• Email, cloud-storage and communication providers
• Professional advisers, including accountants, insurers or lawyers
• Contractors or representatives assisting with a legitimate project
• Government, regulatory or law-enforcement authorities where legally required
• A purchaser, investor or successor if all or part of the relevant business is sold, transferred or reorganised

We do not sell or rent personal information to third parties.

Some service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate legal safeguard is in place. This may include:

• A UK adequacy regulation
• The UK International Data Transfer Agreement
• The UK Addendum to approved standard contractual clauses
• Another lawful transfer mechanism

You may contact us for further information about the safeguards relevant to your information.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, contractual, tax and accounting requirements.

As a general guide:

• General enquiries may be retained for up to 24 months after the last meaningful communication
• Unsuccessful collaboration enquiries may be retained for up to 24 months, unless a longer period is appropriate
• Contractual, payment and business records may be retained for up to six years after the relevant transaction or relationship ends
• Marketing information may be retained until you unsubscribe or withdraw consent
• Suppression records may be retained for as long as necessary to respect an opt-out request
• Technical security logs may be retained for a limited period required for security and troubleshooting

Information may be retained for longer where required by law or where necessary to establish, exercise or defend a legal claim.

We take reasonable technical and organisational measures to protect personal information from:

• Unauthorised access
• Accidental loss
• Improper disclosure
• Alteration
• Misuse
• Destruction

However, no website, email service or internet transmission can be guaranteed to be completely secure. You provide information online at your own risk.

Depending on the circumstances and the lawful basis used, you may have the right to:

• Ask for access to your personal information
• Ask us to correct inaccurate or incomplete information
• Ask us to delete your information
• Ask us to restrict how your information is used
• Object to certain uses of your information
• Receive certain information in a portable format
• Withdraw consent at any time where processing is based on consent
• Complain about how your information has been handled

These rights are not absolute and may be subject to legal limitations or exemptions.

To exercise a right, email oliviatarpey@gmail.com. We may need to request information to confirm your identity before completing your request.

We will normally respond within one month, although the law permits additional time in certain circumstances.

Please contact us first if you have concerns about how your information has been handled, so that we have an opportunity to resolve the issue.

You also have the right to complain to the UK Information Commissioner's Office:

This website is intended for a general audience and is not designed to knowingly collect personal information directly from children.

Some editorial or portfolio content may depict Olivia Tarpey's family and children. That content is published by or with the authority of the relevant rights holder and must not be downloaded, reproduced, manipulated, republished or used for commercial, artificial-intelligence or other purposes without express written permission.

If you believe that a child has submitted personal information through the website without appropriate permission, please contact us.

The website may contain links to third-party websites, platforms or services.

We do not control those services and are not responsible for their privacy practices, security or content. You should review the privacy policy of any external website you visit.

We may update this Privacy Policy to reflect changes to the website, our services, technology or applicable law.

The latest version will be published on this page, together with its updated date. Significant changes may also be highlighted elsewhere on the website where appropriate.

For questions about this Privacy Policy or the use of your personal information, contact: