Last updated: 29 May 2026
Who we are
This website is operated by Shelby Carr Neuhauser ("I", "me", "my"). I am the data controller for personal data collected through this site. You can contact me via the contact page with any privacy-related queries.
What data this site collects
This site does not use analytics tools, advertising networks, or tracking pixels. I do not run a mailing list or store form submissions. The data this site handles is limited to:
- Server logs. The site is hosted on Cloudflare Pages, which processes IP addresses, request times, and basic technical metadata as part of routing, caching, and protecting the site from abuse. This is standard for any website and is the minimum required to serve pages over the internet.
- Content delivery. Images, audio, and other media are served by Sanity, the content management system that powers this site. Your browser fetches these assets from
cdn.sanity.io, which means Sanity processes your IP address when delivering them. - Email correspondence. The contact page provides a direct email link. If you email me, your email address and message contents are received and stored in my personal email account. I use this data only to respond to your enquiry.
- Third-party embed cookies. The Debutante page embeds TikTok content via Curator.io, which may set cookies on your device — including cookies placed by TikTok. These cookies are only set if you consent via the cookie banner shown on your first visit. If you decline, the embed does not load and no third-party cookies are placed.
- Embedded videos. Some pages embed videos from YouTube, Vimeo, or Cloudflare Stream. YouTube embeds use the
youtube-nocookieprivacy-enhanced mode, which prevents tracking cookies unless you press play. Vimeo and Cloudflare Stream embeds load when the page loads. In all cases, your IP address is transferred to the relevant video host so that the video can be delivered to you.
Legal basis for processing
Under UK GDPR and US privacy principles:
- Email correspondence is processed on the basis of legitimate interests (responding to direct enquiries you initiate).
- Third-party embed cookies are loaded only on the basis of your explicit consent, which you can withdraw at any time by clearing your browser cookies and declining on your next visit.
How long data is kept
Email correspondence is kept for as long as is reasonably necessary to manage our communication. I do not retain it indefinitely. I do not transfer email data to third parties.
Third-party services and where data goes
This site relies on the following third-party services:
- Cloudflare — hosting, content delivery, and security. Processes IP addresses and request metadata.
- Sanity — content management and media delivery via
cdn.sanity.io. Processes IP addresses when serving images and audio. - YouTube, Vimeo, Cloudflare Stream — video hosting for embedded videos. Your IP is transferred to whichever service hosts a video you view. YouTube/Google policy · Vimeo policy.
- Curator.io and TikTok — only loaded if you consent via the cookie banner. Used to display the Latest Posts gallery on the Debutante page.
International data transfers
Some of these providers (notably Cloudflare, Sanity, and Curator.io) are based in or transfer data to the United States. Where this happens, transfers are made under appropriate safeguards — including Standard Contractual Clauses and, where applicable, the UK Extension to the EU-US Data Privacy Framework. You can find details in each provider's privacy policy linked above.
Your rights
Under UK GDPR, you have the right to access, correct, or request deletion of any personal data I hold about you. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).
Under applicable US state privacy laws (including the California Consumer Privacy Act where relevant), you may have additional rights regarding personal information. As this site collects minimal personal data and does not sell data to third parties, most CCPA obligations do not apply — but you are welcome to contact me with any requests.
Cookies
This site sets one first-party cookie — cc_cookie — which simply remembers your cookie banner choice so the banner doesn't reappear on every page. It contains no personal data and is exempt from consent requirements under the ePrivacy Directive's "strictly necessary" provision. It expires after 182 days.
Third-party cookies from Curator.io and TikTok are only set with your consent. You can review or change your cookie preferences at any time by clicking the link below, or by clearing your browser's cookies for this site.
Changes to this policy
I may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the site does not constitute acceptance of changes — where required by law, I will seek fresh consent.
Contact
For any privacy-related questions, please email me directly via the contact page.