Privacy Policy
Last updated: 07.07.2026
Lorelei McKelvey
loreleimckelvey.com
This policy applies to users in the European Union (GDPR), Japan (APPI), and the United States.
1. Introduction
This Privacy Policy explains how Lorelei McKelvey ("I", "me", "my") collects, uses, and protects personal information in connection with this website loreleimckelvey.com.
This is a personal portfolio website for an actress. It does not include contact forms, user accounts, payment processing, or comment sections. Limited technical data may be processed when you visit this website.
This website is hosted on Framer infrastructure, with servers located primarily in the United States. If you access this website from outside the US, your data may be processed in the United States under the conditions described in this policy.
2. Data Controller
Name: Lorelei McKelvey (actress)
Email: contact@loreleimckelvey.com
Website: loreleimckelvey.com
For users in the EU/EEA, I act as the Data Controller within the meaning of Article 4(7) of the GDPR.
For users in Japan, I act as a Personal Information Handling Operator (個人情報取扱事業者) within the meaning of Japan's Act on the Protection of Personal Information (APPI).
Personal Data We Collect
3.1 Data collected automatically
When you visit this website, the following technical data may be automatically collected by the hosting infrastructure (Framer):
IP address (anonymized or truncated)Browser type and versionOperating systemPages visited and time of visitReferring websiteApproximate geographic location based on IP address
I do not have direct access to this data. It is processed by Framer solely for the purpose of delivering and maintaining the website.
3.2 Data you provide voluntarily
If you contact me directly by email, I may collect:
Full nameEmail addressPhone number, if providedCompany or agency name, if providedMessage content and any other information you choose to share
Purpose and Legal Basis for Processing
I process personal data only for the following purposes:
Delivering and maintaining the website
Legal basis (EU): Article 6(1)(f) GDPR — legitimate interest
Legal basis (Japan/US): Legitimate interest of the operator (APPI Art. 15)
Responding to inquiries and professional communications
Legal basis (EU): Article 6(1)(b) GDPR — pre-contractual or contractual steps
Legal basis (Japan/US): Necessary for entering into or performing a contract
Analyzing website traffic and improving the website
Legal basis (EU): Article 6(1)(f) GDPR — legitimate interest
Legal basis (Japan/US): Legitimate purpose of the data operator (APPI Art. 15)
Complying with legal obligations
Legal basis (EU): Article 6(1)(c) GDPR — legal obligation
Legal basis (Japan/US): Compliance with applicable law
I do not process personal data for direct marketing, profiling, or automated decision-making.
5. Hosting and Data Transfers to the United States
This website is hosted on Framer (Framer Inc., United States). Technical data associated with your visit may be processed on US territory.
5.1 Safeguards for data transfers from the EU to the US
Transfers of data from the EU are carried out on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914/EU), as implemented by Framer Inc. Full details are available at framer.com/privacy.
5.2 Data transfers from Japan
Cross-border transfers of personal data are subject to Article 24 of Japan's APPI. Framer Inc. provides an adequate level of data protection through internal policies and mechanisms equivalent to APPI standards. For questions about cross-border data transfers, please contact: contact@loreleimckelvey.com.
6. Sharing Data with Third Parties
I do not sell or rent personal data. Data may be shared only with:
Framer Inc. — website hosting and infrastructure providerGoogle LLC — analytics (GA4 and GTM), cookieless configurationLegal authorities or courts — only where required by applicable law
Cookies and Analytics
This website uses Google Analytics 4 (GA4) and Google Tag Manager (GTM), operated by Google LLC, to analyze website traffic and understand how visitors interact with the website. These tools are configured to operate without cookies — no tracking cookies are set on your device.
Data collected through GA4 includes anonymized information such as pages visited, time spent on the website, approximate geographic location, browser type, and device type. This data is aggregated and cannot be used to identify you personally.
Google LLC is based in the United States. Data processed through GA4 and GTM may be transferred to and stored on Google's servers in the US. These transfers are carried out on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission. For more information, see Google's privacy policy at policies.google.com/privacy.
The Framer platform may also use technically necessary cookies to ensure the website functions correctly. These do not require consent.
You can opt out of Google Analytics data collection at any time by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout.
8. Data Retention
Technical data (server logs, IP addresses): in accordance with Framer's retention policy, typically up to 90 daysEmail correspondence: for as long as necessary to handle the inquiry, and then for up to 12 monthsData required by law: for the periods required by applicable regulations
After the retention period expires, data is securely deleted or anonymized.
9. Your Rights
9.1 Rights under GDPR (EU/EEA users)
Under the GDPR, you have the following rights:
Right of access to your data (Art. 15 GDPR)Right to rectification of inaccurate or incomplete data (Art. 16 GDPR)Right to erasure ("right to be forgotten") (Art. 17 GDPR)Right to restriction of processing (Art. 18 GDPR)Right to data portability (Art. 20 GDPR)Right to object to processing (Art. 21 GDPR)Right not to be subject to automated decision-making (Art. 22 GDPR)
You also have the right to lodge a complaint with your national supervisory authority. In Poland: Prezes Urzędu Ochrony Danych Osobowych (UODO), www.uodo.gov.pl. In Spain: Agencia Española de Protección de Datos (AEPD), www.aepd.es.
9.2 Rights under APPI (users in Japan / 日本の利用者の権利)
Under Japan's Act on the Protection of Personal Information (APPI), you have the following rights:
Disclosure of retained personal data (開示請求) — APPI Art. 33Correction, addition, or deletion of data (訂正・追加・削除) — APPI Art. 34Suspension of use or erasure of data (利用停止・消去) — APPI Art. 35Suspension of third-party disclosure (第三者提供の停止) — APPI Art. 37
To exercise these rights, please contact contact@loreleimckelvey.com. I will respond within 30 days. In justified cases, I may request identity verification.
9.3 Rights of users in the United States
If you access this website from the United States, you may have rights under applicable state privacy laws. California residents may have rights under the California Consumer Privacy Act (CCPA), including the right to know what data is collected and the right to opt out of its sale. I do not sell personal data.
For CCPA requests, please contact contact@loreleimckelvey.com.
10. Data Security
I apply appropriate technical and organizational measures to protect personal data, including:
HTTPS / TLS encryptionUse of trusted hosting infrastructure (Framer)Data minimization — only data necessary for a specific purpose is collectedAccess to personal data limited to myself only
No method of transmitting data over the internet is 100% secure. I cannot guarantee absolute security.
11. Protection of Children's Data
This website is not directed at individuals under the age of 16 (as defined under the GDPR) or under the age of 18 where that threshold applies. I do not knowingly collect data from minors.
If you believe data from a minor has been inadvertently collected, please contact contact@loreleimckelvey.com and it will be deleted immediately.
12. Links to External Websites
This website may contain links to external services such as social media profiles or casting platforms. This Privacy Policy does not apply to those services. I recommend reviewing their privacy policies before sharing any personal data.
13. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect legal, technical, or operational changes. Any updates will be posted on this page with a revised "Last updated" date.
For material changes, a visible notice will be placed on the website.
14. Contact
For any questions, requests, or complaints regarding this Privacy Policy or the processing of your personal data, please contact:
Lorelei McKelvey
contact@loreleimckelvey.com
loreleimckelvey.com
I will endeavor to respond to all inquiries within 30 days of receipt.