Effective date: 24 February 2026 | Last updated: 23 March 2026
1. Who I am
This policy explains what personal information I collect through adriencastelain.studio, why I collect it, and how I use it. I've written it in plain English because that's how I prefer to work. If you have questions or want to exercise any of your rights, email me at adrien@adriencastelain.studio. Adrien Castelain, product design consultant, sole trader. Based in Wellington, New Zealand.
2. What information I collect and why
- Contact form (/contact) — name, email, company. Why: to respond to your message. Lawful basis: legitimate interest.
- Book a Clarity Audit (/book-a-clarity-audit) — name, email, company, role, product URL, challenge description, timeline. Why: to assess fit. Lawful basis: legitimate interest (pre-contractual steps at your request).
- Google Analytics (planned — not yet active) — anonymised IP, pages visited, session duration, browser/device type. Why: to understand how people use the site. Lawful basis: legitimate interest.
3. How long I keep your data
- Enquiry and contact form data: 12 months from date of submission
- Clarity Audit booking data (where an engagement follows): 7 years from end of engagement (NZ tax and record-keeping compliance)
- Clarity Audit enquiries (no engagement): 12 months. Google Analytics data (when active): 14 months (Google’s default).
4. Who I share your data with
- Webflow — website hosting and CMS. Form submissions temporarily stored before forwarding to email. USA (EU Standard Contractual Clauses apply).
- Google Analytics — traffic analytics (when activated). ClickUp — form submissions stored for follow-up tracking. Email (adrien@adriencastelain.studio) — direct contact. All USA-based (EU SCCs apply) except email (New Zealand).
5. Your rights
- I do not sell your data. I share it only with service providers (Webflow, Google Analytics, ClickUp) who help me operate the site. All are required to handle your data securely and only for the purposes described.
- Access, Correction, Deletion, Portability, Objection, Restriction — email adrien@adriencastelain.studio to exercise any right. Response within 20 working days (NZ Privacy Act 2020) or 30 days (GDPR). EU/EEA: you may also complain to your local DPA. NZ: privacy.org.nz
6. Cookies
- Currently, adriencastelain.studio does not use any tracking cookies.
- When Google Analytics is activated, the site will use cookies for anonymised traffic data. You can opt out via the Google Analytics Opt-out Browser Add-on.
- No other third-party tracking or advertising cookies are used.
7. Data security & 8. Changes to this policy
For any privacy-related questions or data requests: Adrien Castelain — adrien@adriencastelain.studio — Wellington, New Zealand
adrien@adriencastelain.studio
8. LinkedIn Content Manager
Adrien Castelain operates an AI-powered content scheduling tool ("Content Manager") that connects to LinkedIn via OAuth 2.0 and LinkedIn's Community Management API. When you authorise the Content Manager with your LinkedIn account, the following data is accessed: your profile data (name, email, LinkedIn member ID) for authentication; post content you create and schedule; and comments and engagement data on your published posts, used to display analytics within the tool. All access requires your explicit OAuth authorisation.
9. LinkedIn data retention
Scheduled post content is retained until published or deleted by you. Member social activity data (comments, reactions, engagement from other LinkedIn members) is retained for a maximum of 48 hours. Member profile data from other members is retained for a maximum of 24 hours. These limits comply with LinkedIn's Marketing API data storage requirements. Your OAuth access token is stored securely on a private server and is never shared. You can revoke access at any time via LinkedIn Settings > Data Privacy > Permitted Services, or by emailing adrien@adriencastelain.studio.
10. LinkedIn data use restrictions
LinkedIn member data accessed through the Content Manager is used solely to manage your LinkedIn profile and content. It is not used for advertising, sales, recruiting, lead generation, audience building, or ad targeting. Member data is not exported, transferred, or combined with any third-party data. The Content Manager complies with LinkedIn's Marketing API Terms and restricted use cases policy.
