pRIVACY pOLICY

The Site is primarily a portfolio showcasing my work. It does not include an online booking system, e-commerce checkout, or newsletter sign-up. I collect personal information only in the following limited circumstances:

A) INFORMATION YOU SEND ME DIRECTLY: If you contact me by email (including via the mailto link on the Contact page) or by direct message on Instagram to enquire about my services, I will receive whatever personal information you choose to include — typically your name, email address, and any details about your enquiry (for example, the production, brand, publication or event you are contacting me about).

B) INFORMATION COLLECTED AUTOMATICALLY: Like most websites, the Site is hosted on the Squarespace platform, which may automatically collect limited technical information when you visit, such as your IP address, browser type, device type, pages viewed, and referring website, typically via cookies and similar technologies. This is used for basic site functionality, security, and aggregate analytics (for example, to understand how many people visit the Site). See Section 5 (Cookies) for more detail.

I do not knowingly collect any special category data (such as health information) or financial/payment information through the Site.

I use personal information collected through the Site only to:

• Respond to enquiries about my availability and services as a hair, make-up and SFX artist

• Correspond with clients, agencies, brands, productions and collaborators about bookings and projects

• Maintain the Site, keep it secure, and understand general visitor numbers

• Comply with legal or accounting obligations (for example, retaining records of paid work for tax purposes)

I do not sell, rent, or trade your personal information to third parties, and I do not use your information for automated decision-making or profiling.

Under UK GDPR, I rely on the following legal bases:

• Legitimate interests: to respond to enquiries, run my freelance business, and maintain the Site (this legitimate interest is balanced against your rights and does not override them)

• Contract: where processing is necessary to perform or take steps towards a contract for my services (for example, a booking)

• Legal obligation: where I need to keep records for tax, accounting or other legal requirements

• Consent: where you have separately given consent (for example, choosing to message me on Instagram)

The Site is built on Squarespace, which may set cookies for core functionality, security, and analytics purposes (for example, to distinguish unique visitors and measure site performance). These cookies are managed by Squarespace as my website host/platform provider.

You can control or delete cookies through your browser settings at any time. Restricting cookies may affect how the Site displays or functions, though the Site's core content (my portfolio) will remain accessible.

I do not share your personal information with third parties for their own marketing purposes. Information may be shared only with:

• Squarespace, Inc.: my website hosting provider, which processes limited technical/analytics data as described above

• Instagram/Meta:  if you choose to contact me via Instagram direct message, that exchange is also governed by Instagram's own privacy policy

• Professional advisors (e.g. an accountant), where necessary for legal or accounting purposes

• Authorities, where required by law

Some of these third parties (such as Squarespace) may store or process data outside the UK/EEA. Where this happens, appropriate safeguards (such as Standard Contractual Clauses or an adequacy decision) are relied upon to protect your information.

I keep enquiry and booking-related correspondence for as long as reasonably necessary to manage the relevant working relationship, and afterwards for as long as required to meet legal, accounting or tax obligations (in the UK, financial records are typically kept for at least six years). Casual enquiries that do not lead to work are deleted within a reasonable period once no longer needed.

Under UK data protection law, you have the right to:

• Access the personal information I hold about you

• Ask me to correct inaccurate or incomplete information

• Ask me to delete your information, where applicable

• Object to, or ask me to restrict, certain processing

• Request a copy of your information in a portable format

• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, please contact me at katefoshea@gmail.com. I will respond within one month, as required by law.

You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at www.ico.org.uk, if you believe your data has been mishandled.

The Site is a professional portfolio and is not directed at children. I do not knowingly collect personal information from children.

I take reasonable steps to protect personal information sent to me, including relying on Squarespace's platform-level security measures for the Site itself. However, no method of transmission over the internet or email is completely secure, and I cannot guarantee absolute security.

I may update this Privacy Policy from time to time, for example to reflect changes in how the Site works or changes in the law. The "Last updated" date at the top of this page shows when it was last revised. Please check back periodically.

If you have any questions about this Privacy Policy or how your personal information is handled, please get in touch:

Kate O'Shea

Email: katefoshea@gmail.com

Website: www.kateosheamakeupartist.com