Effective: August 2025
Website: shellyshulman.com
Contact: hello@shellyshulman.com
Who We Are
We’re committed to protecting your personal data and respecting your privacy in line with UK GDPR and the 2025 Data (Use and Access) Act.
Our website address is: https://shellyshulman.com
Comments
When you leave a comment on the site, we collect the data shown in the comment form, as well as your IP address and browser user agent to help with spam detection.
An anonymised string (hash) of your email address may be sent to the Gravatar service to check if you’re using it. Their privacy policy is here: https://automattic.com/privacy. After your comment is approved, your profile picture is publicly visible alongside your comment.
Media
If you upload images to the site, avoid uploading ones with embedded location data (EXIF GPS), as visitors may be able to download and extract that info.
Cookies
We use cookies to make our site work properly and improve your experience.
- If you leave a comment, you may opt-in to saving your name, email and website in cookies for convenience. These last for 1 year.
- A temporary cookie is set when visiting the login page to check if your browser accepts cookies (no personal data is stored).
- Login cookies last for 2 days (or 2 weeks if “Remember Me” is selected); display preference cookies last for 1 year.
- If you edit or publish a post, an extra cookie will be stored (expires in 1 day).
DUAA 2025 Cookie Update:
Under the 2025 Act, cookies used for analytics, performance, site optimisation, and essential functionality (like security or remembering preferences) do not require prior consent. You can still control cookies via your browser settings.
Embedded Content from Other Sites
Articles may include embedded content (e.g. videos, images). Embedded content behaves as if you visited the source site directly.
These third-party sites may collect data about you, use cookies, and track your interaction—especially if you’re logged in to that site.
Who We Share Your Data With
If you request a password reset, your IP address will be included in the reset email.
We may also use third-party tools (like email providers or CRMs) to manage services—only with providers who meet UK data standards.
How Long We Retain Your Data
- Comments and their metadata are stored indefinitely.
- For registered users, we store the personal info provided in your user profile.
- Users can view, edit, or delete their info at any time (except usernames).
- Website admins can also view and edit that information.
Your Rights
Under UK GDPR and the 2025 Data (Use and Access) Act, you have the right to:
- Request a copy of the personal data we hold about you
- Ask us to correct or delete your data
- Object to certain types of processing
- Request that we restrict or pause processing
- Request data portability
- Withdraw your consent where we rely on it
Need to make a request?
Just email us at hello@shellyshulman.com. We may need to verify your identity first. If more info is needed (like date range or context), we’ll pause the timeline until we’ve got what we need.
Automated Decision-Making
We do not currently use automated decision-making that produces legal or significant effects. If that ever changes, we’ll update this policy and let you know your rights to request a human review.
Legal Basis for Processing
We process personal data using a combination of:
- Your consent
- Our contractual obligations
- Legal requirements
- Recognised legitimate interests, such as site security, email updates for existing customers, service improvement, and fraud prevention—as supported under the DUAA 2025 framework.
International Data Transfers
We may store or process your data using trusted third-party providers (such as email software or payment processors) located outside the UK.
These transfers are only made to providers with data protection measures that are not materially lower than UK GDPR standards, in line with the 2025 Act.
Complaints
If you’re unhappy with how your data is handled, contact us at hello@shellyshulman.com.
We’ll:
- Acknowledge your complaint within 30 days
- Aim to resolve it as soon as possible
You can also contact the Information Commissioner’s Office (ICO):
https://ico.org.uk/make-a-complaint
Where Your Data Is Sent
Visitor comments may be checked through an automated spam detection service.
Some data may also be processed by third-party platforms we use to run our business—only those who meet UK data standards.
Questions?
We’re not out to trick you with hidden clauses or endless forms. If you have questions about your data or how it’s handled, just email us: hello@shellyshulman.com.