Privacy Policy

I keep collection deliberately minimal. Depending on how you use the Site:

• Email signups. When you request the NYC Shopping Map — through the popup or the footer form — I store your email address, the place you signed up from, and the date.
• Personal shopping requests. Your name, email, a description of what you are looking for, budget range, occasion and any date you need it by.
• Partnership and booking enquiries. Your name, company, email, enquiry type and message.
• Technical and analytics data. Aggregate, non-identifying information such as pages viewed, referring site, approximate region, and browser or device type, collected by the hosting platform and privacy-conscious analytics.
• Shopping link clicks. When you click one of my shopping links, the Site counts the click — recording only which product and which page it came from — so I can see which recommendations are actually useful. No personal data is stored with it: no IP address, no device details and no identifier that could point back to you.
• Local device storage. A small flag in your browser’s localStorage records that the email popup has already been shown, so you are never asked twice.

I do not collect payment card details on this Site, and I do not knowingly collect sensitive personal information.

• To send the NYC Shopping Map you requested, and — if you signed up for it — occasional emails about new finds, edits and NYC recommendations.
• To respond to your personal shopping or partnership enquiry and, where relevant, to provide the service.
• To keep records of enquiries so I can follow up and track their status.
• To understand which pages and edits are useful, and to keep the Site secure and working.

Where the GDPR or UK GDPR applies, I rely on: consent for marketing emails (withdrawable at any time); performance of a contract or steps taken at your request for personal shopping and partnership enquiries; and legitimate interests for basic analytics, security and business records, balanced against your privacy.

This Site does not use advertising cookies or cross-site behavioural profiling. It uses strictly necessary storage to operate, plus the localStorage flag described above for the email popup. Analytics are collected in aggregate and are not used to identify you personally.

When affiliate auto-linking is enabled, a script provided by our affiliate partner runs on the Site to format shopping links, and that partner may set its own cookies under its own privacy policy. See the affiliate links and commissions section above for more detail.

You can clear or block cookies and site storage in your browser settings. Doing so may mean the email popup appears again.

Shopping links are often affiliate links operated by a partner such as ShopMy. When you click one, that partner and the destination retailer may set their own cookies or tracking identifiers to attribute a purchase, and may process your data under their own privacy policies — which I do not control.

I receive only aggregate reporting from these partners (for example, clicks and commissionable orders). I do not receive your payment details, and I do not match affiliate reporting to individual email subscribers.

Your information is never sold, rented or traded. I share it only with service providers who help operate the Site and my business, and only as needed to do so:

• Hosting and database providers that store the Site’s content and form submissions.
• Email delivery providers used to send the NYC Shopping Map and newsletters.
• Analytics providers, in aggregate form.
• The Gersh Agency, for partnership, press and booking enquiries you submit.
• Professional advisers, or authorities where disclosure is legally required or necessary to protect rights and safety.

Email subscribers are kept until you unsubscribe or ask to be removed. Personal shopping and partnership submissions are kept for up to three years after our last contact so I have a record of the enquiry, unless you ask me to delete them sooner. Aggregate analytics are retained in non-identifying form.

Wherever you live, you may ask me to access, correct, export or delete the personal information I hold about you, and you may unsubscribe from emails at any time using the link in any email.

• GDPR / UK GDPR: rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, plus the right to complain to your supervisory authority.
• California (CCPA/CPRA): rights to know, delete, and correct personal information, and to opt out of sale or sharing. I do not sell or share personal information as those terms are defined, and I will never discriminate against you for exercising a right.

To make a request, email snolan.asst@gersh.com from the address you used, or describe the submission. I respond within 30 days, or 45 days for California requests where an extension is needed.

The Site is not directed to children under 13 and I do not knowingly collect their personal information. If you believe a child has submitted information, email me and I will delete it promptly.

Submissions are stored with reputable providers using encryption in transit and access controls, and only I and my team can read enquiry and subscriber records. No method of transmission or storage is perfectly secure. My providers are based in the United States, so if you contact me from outside the U.S. your information is transferred there under appropriate safeguards.

This policy may be updated as the Site evolves. Material changes will be reflected in the effective date at the top of this page, and significant changes affecting subscribers will be announced by email.

Privacy questions and requests: snolan.asst@gersh.com. Partnerships, press and booking are handled by The Gersh Agency at teamvictoriahiegel@gersh.com.