Effective Date: June 17, 2025
Last Updated: June 17, 2025

1. Introduction

Oliphant Digital LLC ("Oliphant Digital," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes who we collect information from (visitors, newsletter subscribers, and individuals who contact us), what information we collect, how we use, share, and secure it, and what rights you have over your information. By accessing https://oliphantdigital.com (the "Site") or submitting information via our forms, you acknowledge the practices described in this Policy.

2. Information We Collect

Context	Categories of Data	Purpose
Newsletter Sign‑Up	Name, email address	Deliver requested newsletters and occasional service updates.
Contact Form	Name, email address, message content (free‑text)	Respond to your inquiries and keep a record for follow‑up.
Server Logs & Automatic Data	IP address, browser type/version, operating system, referring URLs, pages viewed, time stamps	Security, fraud prevention, and aggregated analytics. To our knowledge we do not set cookies or tracking pixels on the Site; if that changes we will update this Policy.

3. How We Use Your Information

Send the email newsletters you request.
Respond to and manage your inquiries.
Operate, maintain, and improve our Site and services (using only aggregated and/or anonymized data for analytics).
Comply with legal obligations and protect our legal rights.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Legal Basis for Processing (GDPR / UK GDPR)

Data	Purpose	Legal Basis (Art. 6 GDPR)
Name & Email (Newsletter)	Send newsletters	Consent — Art. 6 (1)(a)
Contact‑Form Details	Respond to inquiries	Legitimate Interests — Art. 6 (1)(f)
Server Log IP & metadata	Security / anti‑abuse	Legitimate Interests — Art. 6 (1)(f)

5. Disclosure to Service Providers

We share data only with third‑party processors necessary to run the Site—currently Mailchimp (newsletters) and Formspree (contact form). Each provider:

Acts under a written data‑processing agreement;
Processes your data solely on our instructions and for no other purpose;
Implements security measures and, where applicable, participates in the EU‑U.S. Data Privacy Framework or executes Standard Contractual Clauses.

We do not otherwise disclose your personal information unless required by law or to protect our rights.

6. Data Retention

Category	Retention Period
Newsletter data	Until you unsubscribe or request deletion.
Contact‑form messages	24 months after we resolve your inquiry.
Server logs	180 days from the date of collection.

When retention periods expire, data are securely deleted or anonymized.

7. Security

We use commercially reasonable administrative, technical, and physical safeguards—including SSL/TLS encryption in transit, encrypted storage at rest, and strict access controls—to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Subject to local law, you may have the right to:

Access the personal information we hold about you;
Correct inaccurate or incomplete information;
Delete or erase your data;
Restrict or object to certain processing;
Data portability (receive a copy in a structured, machine‑readable format);
Withdraw consent at any time (e.g., via the unsubscribe link in any newsletter);
Lodge a complaint with a supervisory authority.

To exercise any right, email privacy@oliphantdigital.com. We will respond within 30 days and may request verification of your identity.

9. Children’s Privacy

The Site is not directed to children under 13 (COPPA) or under 16 in the EEA/UK, and we do not knowingly collect personal information from minors. If you believe we have done so, please contact us immediately for removal.

10. International Data Transfers

If you access the Site from outside the United States, your data may be transferred to, stored, or processed in the U.S., where our servers and third‑party processors are located. We protect such transfers through providers certified under the EU‑U.S. Data Privacy Framework and/or by executing Standard Contractual Clauses and conducting Transfer Impact Assessments, as applicable.

11. California Privacy Notice (CCPA / CPRA)

Oliphant Digital LLC is below the CPRA applicability thresholds and does not sell or share personal information as defined by the CCPA/CPRA. California residents may still submit requests to access, correct, or delete their information by emailing privacy@oliphantdigital.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

Revise the “Last Updated” date above;
Post the new version on this page; and
For material changes, provide prominent notice (e.g., banner or email) at least 30 days before they take effect.
Your continued use of the Site after any change constitutes acceptance of the revised Policy.

13. Contact Us / Data Controller

Oliphant Digital LLC (Data Controller)
Willoughby, Lake County, Ohio 44094 USA
Email: privacy@oliphantdigital.com

14. Governing Law & Venue

This Policy is governed by the laws of the State of Ohio, USA, without regard to conflict‑of‑law principles. Any dispute shall be brought in the state or federal courts located in Lake County, Ohio. Nothing in this clause overrides mandatory rights under your local data‑protection laws.

15. Revision History

Version	Date	Notes
v1.0	17 Jun 2025	Initial version

By continuing to use the Site, you acknowledge that you have read and understood this Privacy Policy.