Last Updated: November 17, 2025
Effective Date: November 17, 2025
Data Controller:
Idril Orden (professional name of Sarah Orden)
Email: contact@idrilorden.com
This Privacy Policy explains how Idril Orden ("I," "me," or "my") collects, uses, shares, and protects personal information from visitors to my professional portfolio website (the "Site") and subscribers to my personal newsletter. By using the Site or subscribing to the newsletter, you consent to the data practices described in this policy.
This Site is intended for professional networking, recruitment, collaboration, and portfolio display purposes. It does not involve commercial transactions, consulting services, or payment processing.
This Privacy Policy applies to personal information collected in connection with:
Information collected when you visit or interact with the Site (hosted on Google Sites)
Information you provide through contact forms, inquiries, or communications initiated through the Site
Information collected automatically through analytics, cookies, and tracking technologies
Professional contact information maintained for networking purposes
Personal newsletter subscription information (managed via Kit)
I may collect personal information that you voluntarily provide when you:
Submit a contact form or inquiry
Send an email or other direct communication
Subscribe to the personal newsletter
Share information during professional networking or collaboration discussions
Types of personal information collected may include:
Full name
Email address
Phone number (optional)
Professional affiliation or company name
Message content or inquiry details
When you visit the Site, certain technical information is automatically collected through Google Sites hosting and Google Analytics, including:
IP address and approximate geographic location
Browser type, version, and language settings
Device type and operating system
Pages visited, time spent on pages, and navigation patterns
Referral source
Session data and user engagement metrics
Note: Google Analytics anonymizes IP addresses for EU visitors to comply with GDPR.
This Site uses cookies and similar tracking technologies provided by Google Sites and Google Analytics. Cookies are small text files stored on your device that help improve Site functionality and gather analytics data.
This Site is hosted on Google Sites, which automatically displays a cookie consent notice to EU visitors in compliance with GDPR requirements. The notice allows users to accept or reject nonessential cookies, including Google Analytics cookies
Types of cookies used:
Essential cookies: Required for basic Site functionality
Analytics cookies: Used to understand how visitors interact with the Site (Google Analytics)
Performance cookies: Help improve Site speed and user experience
You can manage or disable cookies through your browser settings. However, disabling cookies may affect certain Site features.
For more information, see Google's Cookie Policy: https://policies.google.com/technologies/cookies
To maintain professional relationships and facilitate networking, recruitment, and collaboration opportunities, I use a customer relationship management (CRM) tool (Clay) to organize contact information and interaction history.
Information stored in my professional CRM may include:
Name and professional title
Email address and LinkedIn profile URL
Company/organization affiliation
Notes about professional interactions, projects, or shared interests
Communication history metadata
Publicly available professional information
Sources of this information:
Information you provide directly (via email, contact forms, or in-person introductions)
Publicly available professional profiles (LinkedIn, company websites, conference directories)
Metadata from our professional correspondence
Legal basis: I process this information based on my legitimate interest in maintaining professional relationships and managing my career network. Note: While you may request deletion of your contact information at any time, I may retain minimal internal notes about our professional interactions under legitimate business interest. These notes are limited to business-relevant context (e.g., project discussions, meeting summaries, collaboration history) necessary for maintaining accurate professional records.
I operate a personal newsletter for friends and family, hosted on Kit (formerly ConvertKit).
Information collected when you subscribe:
Email address (required)
Name (if provided during signup)
Email engagement data (opens, clicks)
Legal basis: Subscription is based on explicit consent. You may unsubscribe at any time.
How information is used:
To send personal updates and newsletters
To understand content engagement
To manage subscriptions and honor unsubscribe requests
Data sharing: Your subscription information is shared only with Kit, which processes and delivers emails on my behalf. Kit does not use your data for its own purposes or share it with third parties.
Your rights: You may unsubscribe at any time by clicking the "Unsubscribe" link in any newsletter email or by contacting me at contact@idrilorden.com.
Kit Privacy Policy: https://kit.com/privacy
I use the information collected for the following purposes:
Respond to contact form submissions, emails, or professional inquiries
Provide information about my work, experience, or availability
Facilitate networking, collaboration, or recruitment opportunities
Understand how visitors use the Site and which content is most valuable
Improve Site design, functionality, and user experience
Identify technical issues or performance problems
Maintain and organize professional contacts and networking connections
Track interaction history to provide context for ongoing professional relationships
Facilitate introductions, collaborations, and career opportunities
Send personal updates and communications to subscribers
Understand newsletter engagement to improve content
Manage subscriptions and honor unsubscribe requests
Comply with applicable laws, regulations, or legal processes
Protect against fraud, abuse, or security threats
Enforce the Terms of Service and Privacy Policy
I may share your information with trusted third-party service providers that help operate the Site, manage professional communications, and deliver the personal newsletter:
Google Sites & Google Workspace:
Hosts the Site and provides infrastructure
Privacy Policy: https://policies.google.com/privacy
Google Analytics:
Provides website analytics and visitor insights
Privacy Policy: https://policies.google.com/privacy
Tally.so (Contact Forms):
Processes contact form submissions and inquiries
Privacy Policy: https://tally.so/help/privacy-policy
GDPR Compliance: Tally is EU-based and GDPR-compliant. Data is encrypted and stored in Europe
Email and Cloud Storage Providers:
Facilitates communication and secure storage of professional materials (Gmail, Zoho, Google Drive, Notion, Microsoft OneDrive, Dropbox)
Gmail Privacy Policy: https://policies.google.com/privacy
Zoho Privacy Policy: https://www.zoho.com/privacy.html
Clay (Professional CRM):
Stores and organizes professional contact information
Privacy Policy: https://library.clay.earth/hc/en-us/articles/7485741581339-Security-and-Privacyw
Note: Clay does not share your data with third parties or use it for AI training purposes.
Kit (formerly ConvertKit) — Personal Newsletter Platform:
Hosts and manages email newsletter subscriptions
Privacy Policy: https://kit.com/privacy
GDPR Compliance: Kit is GDPR-compliant and provides data processing agreements.
Additional Service Providers:
I may use other third-party tools, platforms, and services as needed to operate the Site and manage communications. I work only with service providers that comply with applicable privacy laws.
I may disclose your information if required to do so by law or in response to:
Valid legal processes (subpoenas, court orders, government requests)
Enforcement of Site policies or protection of rights and property
Prevention of fraud, abuse, or security threats
Protection of public safety or prevention of serious harm
I do not sell, rent, or trade your personal information to third parties for marketing or commercial purposes.
I take reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:
Secure hosting infrastructure (Google Sites)
Encrypted communication channels (HTTPS)
Limited access to personal information on a need-to-know basis
Use of reputable third-party service providers with strong security practices
Two-factor authentication on CRM and cloud storage accounts
However, no method of transmission or storage is 100% secure. While I strive to protect your information, I cannot guarantee absolute security.
I retain personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law.
Retention periods:
Contact form inquiries and emails: Retained until no longer needed (typically 1-2 years of inactivity) or until deletion is requested
Google Analytics data: Retained according to Google's data retention settings (typically 14-26 months)
Professional CRM contacts (Clay):
Active relationships: Retained as long as the professional relationship is active
Inactive contacts: Reviewed annually; may be deleted after 2-3 years of no interaction unless there's a reasonable expectation of future professional engagement
Newsletter subscriptions (Kit): Retained as long as you remain subscribed or as required by Kit's data retention policies
Legal compliance and security records: Retained as required by applicable law, including records necessary for fraud prevention and business security
You may request deletion of your personal information at any time by contacting me at contact@idrilorden.com. Deletion requests will be honored except where retention is required for legal, security, or legitimate business purposes.
Depending on your location, you may have certain rights regarding your personal information:
Access: Request a copy of the personal information I hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information (subject to legal exceptions)
Objection: Object to processing of your personal information for certain purposes
Portability: Request transfer of your data to another service provider (where technically feasible)
To exercise any of these rights, please contact me at:
Email: contact@idrilorden.com
Subject Line: "Privacy Request – [Your Name]"
I will respond to verified requests within a reasonable timeframe as required by applicable law (typically 30-45 days).
To unsubscribe from the personal newsletter, click the "Unsubscribe" link in any newsletter email. You may also contact me at contact@idrilorden.com to request removal from the newsletter list or deletion of your subscription data.
If you wish to access, correct, or delete your contact information stored in my professional CRM (Clay), please contact me at contact@idrilorden.com. I will respond to your request in accordance with applicable privacy laws. However, I may retain internal notes about our professional relationship under legitimate business interest in managing my network and maintaining accurate business records.
If you are located in the European Union (EU) or European Economic Area (EEA), the General Data Protection Regulation (GDPR) provides additional rights and protections.
I process your personal information based on the following legal grounds:
Contact form data: Legitimate Interest - Responding to professional inquiries and networking
Email communications: Legitimate Interest - Professional correspondence and collaboration
Professional CRM contacts: Legitimate Interest - Maintaining professional relationships and career networking
Newsletter subscriptions: Consent - Explicit opt-in to receive personal newsletter
Google Analytics data: Consent (via cookie banner) - Website improvement and user experience optimization
In addition to the rights listed in Section 8, GDPR provides:
Right to restrict processing: Limit how I use your data under certain circumstances
Right to object: Object to processing based on legitimate interests
Right to lodge a complaint: File a complaint with your local data protection authority
Your information may be transferred to and processed in the United States, where I am located. By using this Site or subscribing to the newsletter, you consent to such transfers. I take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy and applicable law.
If you are a California resident, the California Consumer Privacy Act (CCPA) provides additional rights.
In the past 12 months, I have collected the following categories of personal information:
Identifiers: Name, email address, IP address, LinkedIn profile URL
Professional information: Company name, job title, professional affiliation
Internet activity: Browsing behavior, pages visited, interaction data, newsletter engagement data
Communication records: Email correspondence, contact form submissions, professional interaction notes
Personal information is used for:
Responding to inquiries and professional communication
Website analytics and improvement
Professional networking and relationship management
Sending personal newsletter to subscribers
Legal compliance and security
Personal information is shared with service providers listed in Section 5 and with legal authorities as required by law.
California residents have the right to:
Know: Request disclosure of personal information collected, used, and shared
Delete: Request deletion of personal information (subject to exceptions)
Opt-out: Opt out of the "sale" of personal information (Note: I do not sell personal information)
I do not sell personal information to third parties. No opt-out mechanism is required.
To exercise your CCPA rights, contact me at contact@idrilorden.com with the subject line "CCPA Request – [Your Name]." I will verify your identity before processing your request.
This Site is not directed to children under the age of 13. I do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA).
If a parent or guardian believes their child has submitted personal information through this Site, please contact me immediately at contact@idrilorden.com, and I will promptly delete such information.
Note: While this Site is intended for professional audiences (age 18+), if you are under 18, you may view general portfolio content, but you should not submit contact forms or provide personal information without parental consent.
I may update this Privacy Policy from time to time to reflect changes in my practices, legal requirements, or Site functionality. The "Last Updated" date at the top of this document indicates when the most recent changes were made.
Notification of Changes:
Minor updates will be posted on the Site without additional notice
Material changes will be reflected by updating the effective date
Your continued use of the Site or continued subscription to the newsletter after changes are posted constitutes your acceptance of the updated Privacy Policy
This Site is operated from the United States. If you are accessing the Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Site or subscribing to the newsletter, you consent to such transfers.
For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact:
Idril Orden
Email: contact@idrilorden.com
Website: idrilorden.com
For GDPR-related inquiries, you may also contact your local data protection authority.