Website: carlypaoli.com
Last updated: 6th August 2026
This Privacy Policy explains how carlypaoli.com ("we", "us", "our") collects, uses, and protects your personal data when you visit carlypaoli.com (the "Site"), in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
We are the data controller for the personal data described in this policy.
- Contact name: Carly Hopkinson
- Address: Agra Farm, Seend Road, Worton, Devizes, Wiltshire, SN10 1SG
- Email: tina@carlypaoli.com
If you have any questions about this policy or how your data is handled, please contact us using the details above.
2. What Personal Data We Collect
We collect personal data you give us directly through the Site:
We do not knowingly collect financial, payment, or highly sensitive personal data through the Site. We do not currently sell tickets, merchandise, or take payments directly through carlypaoli.com.
We may also collect limited technical data automatically when you browse the Site (IP address, browser type, device type, pages visited, referring site) — see our Cookie Policy for details, as this depends on which cookies and analytics tools are active.
3. How We Use Your Data and Our Legal Basis
We will never sell your personal data.
4. Who We Share Your Data With
We share personal data only where necessary, with:
- Website hosting and security providers who host the Site and keep it running (e.g. our hosting provider and security plugin).
- Mailchimp, which stores and sends newsletter communications on our behalf.
- Form and site plugin providers (e.g. Gravity Forms) that process form submissions.
- Embedded third-party services such as YouTube and Spotify, which may process data if you interact with embedded video or audio players — see our Cookie Policy.
We do not share your data with third parties for their own marketing purposes.
5. International Data Transfers
Some of the tools above (for example, hosting, email marketing, or embedded content from Google/YouTube and Spotify) may store or process data outside the UK, including in the United States. Where this happens, we rely on the provider's UK GDPR-compliant safeguards, such as the UK's International Data Transfer Addendum or equivalent adequacy protections.
6. How Long We Keep Your Data
- Newsletter data: kept until you unsubscribe or ask us to delete it.
- Contact form enquiries: kept for as long as reasonably needed to resolve the enquiry and for a short period afterwards for record-keeping, then deleted.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time (e.g. unsubscribe from the newsletter using the link in any email)
- Complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk, if you believe we have not handled your data properly
To exercise any of these rights, contact us at tina@carlypaoli.com.
8. Children's Privacy
This Site is not directed at children, and we do not knowingly collect personal data from anyone under 13.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it was last revised.
10. Contact Us
Carly Hopkinson
Agra Farm
Seend Road, Worton
Devizes
Wiltshire
SN10 1SG
tina@carlypaoli.com