Last updated: September 13, 2026
This policy explains how Olivia Renee Media handles personal information on our website, oliviarenee.media, including our demo sites and our client onboarding portal. The website is run by Olivia Renee Studio, LLC, a company based in the United States, which is responsible for this information (the "controller" under EU and UK data protection law). You can reach us as described in section 13.
In short
- We don't sell your personal information, and we don't use it for advertising.
- Google Analytics runs only if you choose Accept in our cookie banner. You can change your choice at any time with Cookie Settings at the bottom of every page.
- What you send through our forms reaches our email inbox through Web3Forms. The hCaptcha spam check loads only when you start using a form.
- Our server records basic details of each request, including your IP address, to deliver and protect the site. It keeps them for 14 days, and we keep copies for up to 90 days for weekly reports.
- Our fonts and scripts come from our own server, so opening one of our pages, including the demo sites, doesn't contact other companies.
1. Visiting our website
Our website is hosted by DigitalOcean, LLC on servers in San Francisco, United States. Like any web server, ours writes a line to a log file for each request: your IP address, the date and time, the page or file requested, the page that linked to it, your browser and device type (the "user agent") and whether the request succeeded.
We use these logs to deliver the site, keep it secure and fix problems, and to prepare weekly reports with totals such as visits, popular pages and search engine activity. The reports contain no IP addresses. Our legal basis is our legitimate interest in running a secure, working website and understanding how it is used (GDPR Art. 6(1)(f)).
How long: the server keeps its logs for 14 days. We keep copies for up to 90 days to prepare the weekly reports, then delete them.
DigitalOcean acts on our behalf under its Data Processing Agreement. See also DigitalOcean's privacy policy. Our fonts and scripts, including those of the demo sites, are served from our own server, so your browser doesn't contact Google Fonts or any other outside service just to show our pages.
2. Google Analytics (only if you accept)
If you choose Accept in our cookie banner, we use Google Analytics to understand how visitors use our site. If you choose Decline, or make no choice, Google Analytics doesn't load.
When it runs, Google Analytics records:
- the pages you view and how you arrived, for example from a search engine or another website
- your approximate location (country and city), which Google works out from your IP address; Google Analytics doesn't store IP addresses
- your type of device, operating system, browser and screen size
- interactions such as scrolling, clicks on links to other websites, and starting or sending a form (not what you type)
It uses two cookies, _ga and _ga_GEJL0LCB3Z (see section 6), to recognize a returning browser. We keep Google Analytics event data for 2 months and user data for 14 months, a period that restarts when you come back. Google signals is turned off, and we don't use Google Analytics data for advertising.
Legal basis: your consent (GDPR Art. 6(1)(a), and the rules on storing and reading information on your device). You can withdraw it at any time with Cookie Settings at the bottom of every page. If you choose Decline, we delete the Google Analytics cookies, and if analytics was already running on the page, the page reloads so it stops straight away. Withdrawing consent doesn't affect data collected before you withdrew it.
Google Analytics is provided by Google Ireland Limited for visitors in the European Economic Area and Switzerland, and by Google LLC everywhere else. See Google's privacy policy and how Google Analytics safeguards data. You can also block Google Analytics on every website with Google's opt-out browser add-on.
3. Forms and email
You can contact us with the form on our contact page (your name, mobile number, email address and message) or with the email form in the footer of our pages (your email address). We use what you send to reply to you and to discuss our services with you.
- Delivery: our forms are sent through Web3Forms, a form delivery service that emails each submission to our business inbox. See Web3Forms' privacy policy.
- Our inbox: our business email is provided by Zoho Corporation. See Zoho's privacy policy.
- Spam check: our forms use hCaptcha, provided by Intuition Machines, Inc. (United States). It loads only when you start using a form: on oliviarenee.media when you first click, tap or tab into a form, or press Send, and on the demo sites when you first type, click or tap in the pop-up's form. It processes information such as your IP address, browser and device details and how you interact with the check, to tell people from automated spam, and it may set a short-lived security cookie on hcaptcha.com. See hCaptcha's privacy policy.
Legal basis: taking the steps you ask for before a possible contract (GDPR Art. 6(1)(b)), and our legitimate interest in answering messages and keeping out spam (GDPR Art. 6(1)(f)).
How long: we keep your messages for as long as we need them to reply to you, follow up and keep our business records.
4. Client onboarding portal
If we invite you to our client onboarding portal, we store your account email address, contact name and business name, the point-of-contact details and agreement status we record for your business, your progress and notes on onboarding tasks, the acknowledgements you confirm (with their date), and when you last signed in. Your password is stored only in scrambled (hashed) form. This information is kept on our server at DigitalOcean.
Legal basis: providing the services we agreed with you (GDPR Art. 6(1)(b)). How long: while we work together, and afterwards only as long as we need it for our business, tax and legal records.
5. Demo sites
Our demo sites (demo-spa.oliviarenee.media, demo-restaurant.oliviarenee.media and demo-realestate.oliviarenee.media) are example websites for fictional businesses. They don't use Google Analytics.
- After about 20 seconds of browsing, a pop-up offers pricing and next steps. If you enter your email address, it is sent to our inbox as described in section 3. The pop-up remembers when you arrived and whether you closed it in your browser's session storage (
dlm_arrivalanddlm_dismissed), which is cleared when you close the tab. - Maps come from Google Maps and load only if you choose Show map. Google then receives your IP address and browser details, and may set its own cookies. See Google's privacy policy.
6. Cookies and browser storage
Cookies are small text files your browser stores for a website. Local storage and session storage are similar browser features that keep information on your device.
| Name | Type and source | Purpose | How long |
|---|---|---|---|
orm_cookie_consent |
Local storage, oliviarenee.media | Remembers your cookie choice and the date you made it | Until you clear it; we ask again after six months |
_ga |
Cookie, Google Analytics (only after Accept) | Recognizes a returning browser | 2 years, or until you choose Decline |
_ga_GEJL0LCB3Z |
Cookie, Google Analytics (only after Accept) | Keeps track of your visit | 2 years, or until you choose Decline |
__cf_bm |
Cookie on hcaptcha.com, set by hCaptcha's network provider when the spam check loads | Tells people from automated traffic | About 30 minutes |
client_session_id |
Cookie, oliviarenee.media (client portal only) | Keeps invited clients signed in | 30 days |
session_id |
Cookie, oliviarenee.media (staff sign-in only) | Keeps our staff signed in to manage the blog | 24 hours |
dlm_arrival, dlm_dismissed |
Session storage, demo sites | Times the demo pop-up and remembers whether you closed it | Until you close the tab |
Only the Google Analytics cookies need your consent. The others are needed for things you ask for, such as remembering your choice, signing in or using a form. If you choose Show map on a demo site, Google may also set its own cookies (see section 5). You can clear cookies and site data at any time in your browser settings.
7. Links to other websites
Our pages link to other websites, such as our Facebook and Instagram profiles, our booking page on Calendly, our clients' websites, and the App Store and Google Play. Those websites have their own privacy policies. Some of our App Store links carry a campaign label (for example ct=orm_portfolio) that tells us which button was used; the label doesn't identify you.
8. Who receives your information
We share personal information only with the service providers named in this policy, which handle it for us: DigitalOcean (hosting), Google (analytics, only with your consent), Web3Forms (form delivery), Intuition Machines (the hCaptcha spam check) and Zoho (email). If you choose to show a map on a demo site, Google also receives your IP address. We may disclose information when the law requires it. We don't sell personal information or share it for advertising.
9. International transfers
Olivia Renee Studio, LLC is based in the United States, and our service providers process information there too, so your information is processed in the United States. Where the law requires safeguards for information from the European Economic Area, the United Kingdom or Switzerland, our providers rely on the EU-U.S. Data Privacy Framework and its UK and Swiss extensions, or on the European Commission's Standard Contractual Clauses.
10. Your rights
Depending on where you live (for example in the European Union, the United Kingdom, Switzerland or some US states), you can ask us to:
- tell you what personal information we hold about you and give you a copy
- correct it if it's wrong
- delete it
- restrict how we use it, or object to uses based on our legitimate interests
- give it to you in a portable format
Where we rely on your consent, you can withdraw it at any time; for Google Analytics, use Cookie Settings at the bottom of every page. To make a request, contact us as described in section 13. We'll reply within one month. Website statistics are mostly totals that we usually can't link to a particular person, but we'll help as far as we can.
You also have the right to complain to a data protection authority: in the EU and EEA, the authority in your country; in the UK, the Information Commissioner's Office; and in Switzerland, the Federal Data Protection and Information Commissioner.
11. Security, children and Do Not Track
- Security: our site uses HTTPS encryption, portal passwords are stored only in hashed form, and access to our systems is limited to the people who need it. No website is completely secure, but we work to protect your information.
- Children: our website is meant for businesses and isn't directed at children. We don't knowingly collect personal information from children under 16. If you think a child has sent us personal information, contact us and we'll delete it.
- Do Not Track: we don't track you across other websites, and Google Analytics runs only if you choose Accept. Browser "Do Not Track" signals don't change anything else on our site.
12. Changes to this policy
If we change this policy, we'll post the new version on this page and update the date at the top.
13. Contact us
For questions or requests about this policy or your personal information, the quickest way to reach us is our contact form. You can also email us:
