Last Updated: January 2026

I am committed to protecting your privacy. This Privacy Policy explains how I collect, use, disclose, and safeguard your personal information when you visit my website c-shamrock.com, subscribe to my newsletter, or submit an application to join the ARC team.

By using the website or providing your information, you consent to the practices described in this policy.

1. Who I Am (Data Controller)

I am the operator and data controller responsible for this website:
Caitlyn Shamrock
Email: caitlyn@c-shamrock.com
Otto-Dick-Straße 7
51674 Wiehl
GERMANY

Please contact me at the email address above with any questions regarding this policy or the processing of your personal data.

2. Information I Collect

a) Newsletter Subscription

When you subscribe to my newsletter, I collect:

1. Your email address
2. Optional: first name or other details you voluntarily provide<
3. Subscriptions use a double opt-in process. After you submit your email, I send a confirmation message. You must click the link in that email to complete your subscription.

b) ARC Team Application

When you submit the ARC team application form, I collect the following:

Required fields:

1. Name
2. Email address
3. I agree to the coven rules (checkbox – required)
4. How do you want to spread the magic? (options: Write a review / Post on social media / Both)

Optional fields:

1. I agree that you may use quotes from my social media posts or my reviews for advertising purposes (checkbox)
2. Social Media (e.g., handles or profile links)
3. How did you find your way here? (Newsletter / Social Media / Other)
4. Free-text field for any additional message

Processing of application data:

1. I temporarily store the submitted information on my server.
2. I send a confirmation email to you (and to myself) containing the application details.
3. You must click the confirmation link in the email to verify and finalize your submission.

Upon confirmation:

1. I permanently retain the application data (including the consents provided) to administer your membership in the ARC team (e.g., communication, coordination, internal records).
2. Where relevant and with your newsletter consent, I add you to the corresponding group in MailerLite.
3. The required consents regarding the coven rules form an integral part of the application and membership process.

3. How I Use Your Information

I use the information I collect to:

1. Deliver the newsletter to which you have subscribed
2. Process and manage ARC team applications and ongoing membership
3. Communicate with you regarding your application, team activities, or coven-related matters
4. Use approved quotes from your social media posts or reviews for promotional purposes (only where you have given explicit consent by checking the relevant box)
5. Prevent fraud, abuse, or unauthorized access
6. Comply with applicable legal obligations

I do not sell your personal information.

4. Legal Bases for Processing

Where applicable (e.g., under GDPR or similar frameworks):

1. Newsletter subscriptions: Your consent, given through the double opt-in confirmation.
2. ARC team applications and membership: Performance of steps you have requested prior to entering into a membership arrangement, or my legitimate interests in securely processing applications and managing team operations (balanced against your rights and freedoms).
3. Use of quotes for advertising: Your explicit consent provided via the checkbox.

You may withdraw consent for newsletter communications or object to further processing of your ARC data at any time (see Your Rights section below).

5. Service Providers

MailerLite
I use MailerLite to manage newsletter subscriptions and subscriber groups. MailerLite acts as my data processor and stores data in secure data centers within the European Union (primarily Germany and the Netherlands). See MailerLite’s Privacy Policy: https://www.mailerlite.com/legal/privacy-policy and Data Processing Addendum: https://www.mailerlite.com/legal/data-processing-agreement

ALL-INKL (Hosting Provider)
The website is hosted by ALL-INKL, a German provider. They act as my processor and store server data, including temporary form submissions and access logs, in Germany. Access logs are automatically deleted after 7 days (unless retained longer for specific security incidents). ALL-INKL does not use visitor data for marketing purposes. Further information: https://www.all-inkl.com/datenschutz/

Data Retention

1. Unconfirmed newsletter subscriptions or ARC applications: Automatically deleted after 7–30 days.
2. Confirmed newsletter subscribers: Retained until you unsubscribe.
3. Confirmed ARC team members: Retained for the duration of your membership and for any additional period required by law (e.g., record-keeping obligations).
4. Data is deleted or anonymized when no longer necessary.

7. Disclosure of Information

I disclose personal information only:

1. To MailerLite (for email services) and ALL-INKL (for hosting), both acting as processors under contractual obligations
2. If required by law, court order, or to protect rights, property, or safety

No advertising trackers, pixels, or data sales take place on the website.

8. Your Rights and Choices

You have the right to:

1. Access, correct, update, or request deletion of your personal data
2. Withdraw consent (where processing is based on consent)
3. Object to or request restriction of certain processing
4. Unsubscribe from newsletters (via the link in every email or by contacting me)

California residents may also exercise rights under the CCPA/CPRA, including the right to know what personal information is collected, to request deletion, to opt out of any sale of personal information (I do not sell personal information), and to non-discrimination for exercising these rights.

To exercise any of these rights, please contact me at [your@email.com]. I will respond within the timeframes required by applicable law.

9. Security

I implement reasonable technical and organizational measures (such as encryption in transit via HTTPS and access controls) to protect your information. However, no method of transmission over the internet is completely secure.

10. International Data Transfers

Data is primarily processed in the European Union (Germany and the Netherlands via ALL-INKL and MailerLite). Where relevant, transfers comply with applicable safeguards, including the EU-U.S. Data Privacy Framework where MailerLite is certified.

11. Children’s Privacy

The website and services are not directed to children under the age of 13. I do not knowingly collect personal information from children.

12. Changes to This Privacy Policy

I may update this policy from time to time. The revised version will be posted here with an updated “Last Updated” date. Your continued use of the website following any changes constitutes acceptance of the updated policy.

Thank you for your trust.
Caitlyn