Privacy Policy
This is the privacy policy for CheekySkirt Media, owned and operated by Kate Tulloch-Hammond, based in Clearwater, Florida, USA. CheekySkirt is a one-person service business — no storefront, no shopping cart, no payment processing. Just a real human doing real work.
This policy explains what information this site collects, why, and what happens to it. I've written it in plain English on purpose. You deserve to actually understand it.
If you have questions, concerns, or just want to chat about it — reach out through cheekyskirt.com.
What I know about you (probably not much)
There are two ways your information ends up with me.
You gave it to me directly. If you fill out the contact form on this site, I collect your name and email address. That's it. I don't ask for your phone number, your birthday, your shoe size, or anything else I don't actually need.
Your browser handed it over automatically. Like every website on the internet, this one collects some data passively — things like which pages you visited, how long you stayed, what device and browser you used, and your general location (think "Tampa, Florida," not your street address). This happens through Google Analytics and standard browser cookies. More on that below.
That's the full list. No secret data collection, no hidden forms.
Why I'm even collecting it
The contact form data — your name and email — exists for one reason: so I can write you back. Full stop. I'm not adding you to a list, selling your info, or sending you newsletters you didn't sign up for.
The analytics data helps me understand how the site is performing. Are people finding what they're looking for? Which pages are actually useful? Is the site slow on mobile? That kind of thing. It's about making the site better, not tracking you personally.
Who else sees it
Nobody's buying your data from me. That's not something I do, and it's not something I'd ever do.
Google Analytics does process analytics data on my behalf — that's the nature of the tool. Google has its own privacy policy, and if you want to know exactly what they do with data, here it is. You can also opt out of Google Analytics tracking entirely using Google's opt-out browser add-on.
This site is hosted on WordPress, which means Automattic's infrastructure is involved in keeping it running. They're not doing anything creepy with your data — it's just how the plumbing works.
Outside of Google Analytics and WordPress hosting, I don't share your information with anyone. No marketing partners, no data brokers, no "carefully selected third parties" (a phrase that should always make you suspicious).
Cookies — they're not the good kind, but they're not that bad either
A cookie is a tiny text file that a website stores on your device. It helps the site remember things — like whether you've visited before, or to keep track of how you're navigating around. They're not malware. They're not reading your emails.
This site uses cookies primarily through Google Analytics. Those cookies collect anonymous information about how visitors use the site — page views, session duration, traffic sources. They don't identify you as a specific person. WordPress also sets some functional cookies to keep the site running properly.
Want out? You can block or delete cookies through your browser settings — usually under Settings → Privacy or Settings → Cookies. You can also use the Google Analytics opt-out add-on specifically for GA tracking. Heads up: blocking all cookies may affect how some sites function, though it shouldn't break anything here in any meaningful way.
How long I keep your stuff
Contact form submissions — your name and email — are kept for as long as they're relevant to an active inquiry or project. Once our conversation is wrapped up and there's no reason to hold onto it, it goes away.
Analytics data is retained according to Google Analytics' default settings, which you can review in their privacy policy. I don't archive it separately.
I'm not hoarding your information. I don't want to manage data I don't need.
Your rights (and I actually mean this)
EU & UK — GDPR
You have the right to know what personal data I hold, ask me to correct it, delete it, object to how it's processed, and request a portable copy. You can also lodge a complaint with your local data protection authority. I'll respond within 30 days, with a possible 60-day extension for complex requests.
California — CCPA/CPRA
You have the right to know what I've collected, request deletion, and opt out of the sale of your data — though for the record, I don't sell it. I'll acknowledge your request within 10 business days and respond fully within 45 days.
Everyone Else
Just ask. If you want to know what I have, want it corrected, or want it deleted — send me a message through cheekyskirt.com and I'll handle it promptly. No runaround, no hoops, no form to fill out in triplicate.
Security — I take it seriously, without pretending I'm a tech giant
This site uses standard security practices: SSL encryption (that little padlock in your browser), secure WordPress hosting, and sensible access controls. I don't store payment information because there's nothing to pay for here.
No website can promise 100% security — anyone who does is lying. But I've taken reasonable steps to keep your data safe, and I'm not cavalier about it.
This policy might change
If I update this policy in a meaningful way, I'll update the "Last Updated" date at the top and make sure any significant changes are clearly reflected. It's worth checking back occasionally if you're curious, though I'm not planning a major overhaul anytime soon.
Questions? Just ask.
Privacy questions, data requests, concerns — all of it goes through cheekyskirt.com. I read everything and I respond.
You read the whole thing. I respect that.
— Kate