Privacy Policy

Who we are and what this policy covers

This policy explains what personal information is collected when you use jillianladage.com, why it is collected, how long it is kept, who it is shared with, and what you can ask us to do about it.

The data controller is Jillian LaDage, trading as Tarith Cote, 1102 River Drive, Moorhead, MN 56560, United States. Enquiries about this policy, and all requests to exercise the rights described below, should go to [email protected].

This policy covers this website, the mailing list, the shop and any enquiry you send through the contact form. It does not cover third-party websites you reach by following a link from here — including social platforms, video hosts and any payment provider used to complete an order. Those services have their own policies and you should read them.

The information we collect

We collect as little as we can. In practice that means three categories.

Information you give us deliberately

• Contact form. Your name, email address, the subject you selected, any date or deadline you supplied, and the content of your message. The confirmation checkbox is also recorded.
• Mailing list. Your email address, the date of subscription, and the fact that you confirmed it by clicking the link in the confirmation email.
• Orders. Your name, delivery address, email address, the items ordered and any note you attach. We do not receive or store your card details — payment is completed on the payment provider's own systems and we are told only whether it succeeded.
• Lessons and commissions. Where a working relationship begins, we keep the correspondence, the agreed brief, invoices and, for lessons, any recordings or notes made during sessions. Lesson recordings are made only with your agreement and are deleted on request.

Information collected automatically

• Server logs. Our hosting provider records the IP address, the time of the request, the page requested, the referring page and the browser user-agent string. These are used for security and diagnostics only and are held for a maximum of 30 days.
• Local browser storage. A single key, jl-cookies, records that you have dismissed the cookie notice. It stays in your own browser, is never transmitted to us, and can be cleared through your browser settings at any time.

Information we deliberately do not collect

• No advertising or cross-site tracking pixels.
• No fingerprinting or behavioural profiling.
• No sale or rental of any personal information to anybody, ever.
• No sensitive-category data (health, beliefs, political opinion and so on) is requested. If you volunteer such information in a message — for instance, about access needs — it is used only to answer you and is not recorded separately.

Why we process it, and on what legal basis

Where the GDPR or equivalent legislation applies, these are the bases we rely on.

Where we rely on consent, you may withdraw it at any time and it costs you nothing to do so. Withdrawing consent does not affect processing that already happened lawfully before you withdrew.

How long we keep it

• Enquiries that go nowhere: deleted within 24 months of the last message.
• Enquiries that become work: kept for the duration of the project and for six years afterwards, because that is how long a contractual claim may be brought and how long tax records must be retained.
• Newsletter subscription: kept until you unsubscribe, plus a suppression record of your email address afterwards so that we do not accidentally add you again.
• Order records: seven years, for tax purposes.
• Lesson recordings and notes: 12 months after the last lesson, or immediately on request.
• Server logs: 30 days.

Who else sees your information

Your information is shared only with the service providers needed to run the site and the business, and only to the extent each one needs. At the time of writing, these categories are:

• Website hosting — serves the pages and keeps the short-lived server logs described above.
• Email delivery and mailing-list provider — stores subscriber addresses and sends the newsletter. Their systems record whether a message was delivered and, if you have not disabled remote images in your email client, whether it was opened.
• Payment provider — processes card payments on their own systems. They are an independent controller of your payment data and their own privacy policy governs it.
• Shipping carriers — receive the delivery name and address for physical orders.
• Accountant — receives transaction records for tax filing.

We may also disclose information where we are legally required to do so, or where it is necessary to establish, exercise or defend a legal claim. We will tell you if that happens unless we are prohibited from doing so.

An up-to-date list of the specific providers currently in use is available on request from [email protected].

International transfers

The business operates from the United States, and some of the providers listed above store data on servers in the United States and elsewhere. If you are in the United Kingdom, the European Economic Area or another region with transfer restrictions, your information will therefore be transferred outside that region.

Where such a transfer occurs, we rely on appropriate safeguards — ordinarily the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or a provider's certification under an approved framework. A copy of the relevant safeguard can be requested.

Your rights

Depending on where you live, you have some or all of the following rights. We honour all of them for everybody, regardless of where you live, because maintaining two standards would be more trouble than it is worth.

• Access — ask for a copy of the personal information we hold about you.
• Rectification — have inaccurate information corrected.
• Erasure — ask us to delete information, except where we must keep it for a legal obligation such as tax records.
• Restriction — ask us to pause processing while a dispute is resolved.
• Portability — receive the information you gave us in a structured, machine-readable format.
• Objection — object to processing carried out on the basis of legitimate interests.
• Withdraw consent — unsubscribe at any time using the link in every email, or by writing.
• Non-discrimination — exercising any of these rights will never result in worse service, higher prices or refusal to deal with you.

To exercise any right, write to [email protected]. We will respond within 30 days. We may ask one or two questions to confirm that the request genuinely comes from you; we will not ask for identity documents unless the request is unusually sensitive.

If you are unhappy with how we have handled a request, you may complain to your national data protection authority — in the United Kingdom, the Information Commissioner's Office; in the European Economic Area, the supervisory authority in your country of residence. We would rather you raised it with us first, but you are not obliged to.

Security

The site is served over HTTPS. Access to email, order records and correspondence is protected by strong unique passwords and two-factor authentication. Files relating to client work are stored on encrypted drives, and backups are encrypted at rest.

No system is perfectly secure, and anyone who tells you otherwise is selling something. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and will tell affected individuals directly and promptly where the risk is high.

Children's privacy

This site is not directed at children and we do not knowingly collect personal information from anyone under 16. Where a minor takes voice lessons, all correspondence, invoicing and record-keeping is conducted with a parent or guardian, and any recording of a lesson requires their explicit agreement.

If you believe a child has given us information, write to us and it will be deleted promptly.

Changes to this policy

This policy may be updated as the business changes or as the law does. The date at the top of the page always reflects the current version. Material changes — anything that alters what we collect, why, or who we share it with — will be announced in the newsletter and noted prominently on this page for at least 30 days.

Previous versions are retained and a copy of any earlier version can be requested from [email protected].

This page is written in plain English and is intended to be read, not merely accepted. It is provided for information and does not constitute legal advice; where a matter is genuinely important to you, take advice from a qualified lawyer in your own jurisdiction.