Privacy Policy
Cristin O'Loughlin · Last updated: May 2026
Cristin O'Loughlin is an Irish figurative painter. This website is a portfolio for my paintings and a place to read about my practice. It is not a shop. Any sales or commissions are arranged directly by email or through galleries that represent me.
I am the data controller responsible for the personal information collected through this website and direct interactions with you. If you have any questions about this policy or how I handle your data, please contact me at cristinoloughlin@gmail.com.
I only collect the information I need to respond to your enquiry or share updates if you have asked to be on my mailing list. This may include:
- Contact information such as your name and email address.
- Message details if you send me an enquiry through the contact form or via email.
- Newsletter sign-up details if you choose to join the mailing list — typically your name and email address.
- Technical information collected automatically through cookies, such as your IP address and browser type. See the Cookie Policy for more details.
I do not collect any information from you that you have not chosen to share with me.
I collect personal information in the following ways:
- When you submit the contact form on this website.
- When you sign up to the mailing list through the form on this website.
- When you email me directly.
- When you message me through Instagram or other social media platforms.
- When a gallery introduces a collector to me on your behalf.
- Automatically through cookies when you visit the website.
I use the personal information you provide for the following purposes:
- To respond to your enquiries about my paintings, commissions, or exhibitions.
- To communicate with you about work you have asked about or expressed interest in.
- To send occasional updates about new paintings, exhibitions, or studio news, but only if you have signed up to the mailing list.
- To keep simple records for accounting and tax purposes.
- To understand how the website is used so I can improve it.
Under GDPR, I rely on the following legal bases to process your data:
- Consent — when you actively give permission, for example by submitting the contact form or signing up to the mailing list.
- Contract — when processing is necessary to deliver a painting, print, or commission you have requested.
- Legitimate interest — when there is a clear reason that does not override your rights, such as responding to your enquiry.
- Legal obligation — when I am required to retain certain records by law, such as for tax purposes.
I use a small number of trusted third-party tools to run my practice. Each operates under its own privacy policy. I do not sell your data to any third party.
- Elementor by Elementor Ltd. The website builder used to create this site. Functional cookies only, no personal data collected.
- WPForms by WPForms LLC. The contact and newsletter form plugin used on this site. When you submit a form, your name, email, and any message you write are sent to me by email and stored securely in the WordPress backend. WPForms Privacy Policy ↗
- Gmail by Google Ireland Limited. Used to send and receive emails and to store correspondence about my work. Google Privacy Policy ↗
- Google Fonts by Google Ireland Limited. Fonts are loaded from Google servers. Minimal connection data is logged by Google.
- Instagram by Meta. Used when you message me through Instagram. Meta Privacy Policy ↗
- Galleries. If a gallery is involved in a sale or commission, I may share necessary information with them to complete the transaction. Any gallery I work with handles your data under its own privacy policy.
I only keep your personal data for as long as I need it to respond to you, manage our communication, or meet legal obligations.
- Enquiries: kept for as long as is reasonable to follow up on your interest, then deleted.
- Newsletter subscribers: kept for as long as you remain subscribed. You can unsubscribe at any time.
- Buyer and commission records: kept for as long as needed to deliver the work, plus 7 years for accounting and tax purposes.
You can ask me to delete your data at any time by emailing cristinoloughlin@gmail.com.
If you have signed up to my mailing list, I may send you occasional updates about new paintings, upcoming exhibitions, prints, or studio news.
You can unsubscribe at any time by replying to any email I send and asking to be removed, or by emailing me directly at cristinoloughlin@gmail.com. I will action your request promptly.
I never share your email address with any third party for their marketing purposes.
Some of the third-party tools used on this site are based outside the European Union, including in the United States. When your data is transferred to these providers, I rely on safeguards approved by the European Commission, such as Standard Contractual Clauses and adequacy decisions where applicable.
These transfers are necessary to run the website and communicate with you. I choose providers who have clear data protection commitments and recognised certifications.
As a person based in Ireland or the EU, you have the following rights regarding your personal data:
- Right of access — you can request a copy of the personal data I hold about you.
- Right to rectification — you can ask me to correct inaccurate or incomplete data.
- Right to erasure — you can ask me to delete your data in certain circumstances.
- Right to restrict processing — you can ask me to limit how I use your data.
- Right to data portability — you can ask for a copy of your data in a machine-readable format.
- Right to object — you can object to certain types of processing.
- Right to withdraw consent — where I rely on consent, you can withdraw it at any time.
- Right to lodge a complaint — you can complain to the Data Protection Commission.
To exercise any of these rights, contact me at cristinoloughlin@gmail.com. I will respond within 30 days as required by law.
You can also lodge a complaint directly with the Data Protection Commission, the supervisory authority for data protection in Ireland. Visit www.dataprotection.ie ↗ or call 01 765 0100.
I take the security of your personal data seriously. I use industry-standard measures to protect it from unauthorised access, accidental loss, alteration, or disclosure.
This includes an encrypted website connection (HTTPS), secure email, strong password practices, and limited access to personal information on a need-to-know basis.
While I do everything I reasonably can to protect your data, no system on the internet is completely secure. If you believe your data has been compromised, please contact me immediately at cristinoloughlin@gmail.com.
This policy may be updated from time to time to reflect changes in technology, legislation, or how I work. When that happens, the date at the top of this page will be revised.
Please check back occasionally. Continued use of this website after any changes are published means you accept the updated policy.