Effective date: September 14, 2026
This Privacy Policy explains how Ash K Holm ("we," "us," or "our") handles your information when you visit ashkholm.com. If you have any questions after reading it, we would love to hear from you at info@ashkholm.com.
For visitors in the European Economic Area and the United Kingdom, Ash K Holm is the "controller" of the information described in this policy, which means we are the ones who decide why and how it is used. You can reach us about anything in this policy at info@ashkholm.com.
We keep this simple, because the site itself is simple. There are no accounts, no logins, and no purchases on this site today.
What we do not collect: we run no analytics, no advertising trackers, and no tracking cookies on this site. We do not collect payment information, because nothing is for sale on this site today.
We use what you give us for one purpose: to run the list you joined. That means:
If you no longer want our emails, tell us at info@ashkholm.com, or use the opt-out included in the email itself, and we will take you off the list.
Some privacy laws, including the GDPR and the UK GDPR, ask us to name the legal basis we rely on. Ours is simple, because we only do one thing with your information:
We do not rely on your consent for anything beyond the list you joined, because we do not do anything beyond it.
We do not sell your personal information. Form submissions are received and stored by Netlify, our website host and forms provider, and are visible to the small team that runs this site for Ash. We may also disclose information if required to do so by law, or to protect our rights, safety, or property and those of our community.
We set no tracking cookies and run no analytics on this site. The site does keep a few small preferences in your own browser's storage, on your device only: your choice on the "Motion" pause button, and whether you have already seen the page's opening animation. These preferences never leave your device and are not sent to us or to anyone else. You can clear them at any time through your browser's site-data settings.
If our practices ever change, this policy changes first.
We keep sign-up information for as long as you stay on the list, so we can send you what you asked for. Two things end that:
Applications and the answers you send us are kept on the same terms, and are deleted on the same request.
Wherever you live, if you want to know what we hold about you, want it corrected, or want it deleted, write to info@ashkholm.com and we will do it. We may need to verify your identity first, and we will never charge you for a request.
How quickly we answer: we aim to respond within 30 days of receiving your request. If a request is unusually complex and we need longer, we will tell you inside those 30 days, explain why, and give you a date.
Ash is based in California, and California residents have specific rights over their personal information:
You may have additional rights under the GDPR and the UK GDPR, including access, correction, deletion, restriction, objection, withdrawal of consent, and data portability. The same address handles all of them: info@ashkholm.com. Because the list runs on your consent, you can withdraw it at any time, and doing so is never harder than joining was.
Your right to complain. If you think we have handled your information badly, we would rather hear it from you first, but you do not have to come to us. You have the right to complain to your national data protection authority: in the European Economic Area that is the supervisory authority in the country where you live, work, or where you believe the problem happened, and in the United Kingdom it is the Information Commissioner's Office.
Anyone can join the list, and people do, from Europe, the United Kingdom, Asia, and everywhere else. Wherever you are: we collect only what you type into a form, we use it only to run the list you joined, we do not sell it, and you can have it deleted by asking. We honor deletion, correction, and access requests from every visitor, whatever the law where you live says we owe you. Your own country's privacy law may give you further rights, and if it does, we will work with you to honor them. Note that your information is processed in the United States, as the next section explains.
This site is intended for adults and is not directed to anyone under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with their information, please contact us at info@ashkholm.com and we will promptly delete it.
We use 16 as our line everywhere, for every visitor. That is deliberately stricter than the United States children's privacy rule (COPPA), which sets its threshold at 13, and it matches the highest age used by European rules on a child's consent, so one number covers everyone.
The site is served over HTTPS, and form submissions travel encrypted to Netlify. We use reasonable measures to protect your information, but no method of transmission or storage is ever completely secure, and we cannot guarantee absolute security.
We are based in the United States. The site, its forms, and the list are hosted in the United States by Netlify, and that is where your information is stored and read. We have no servers, offices, or staff anywhere else.
This matters if you are writing to us from the European Economic Area, the United Kingdom, Asia, or anywhere outside the United States, because United States data protection law is different from the law where you live, and in some respects offers less protection. We want to be straightforward about it rather than reassuring: if you submit a form on this site, your information travels to and is processed in the United States, and by submitting it you understand that. We have not put a formal cross-border transfer mechanism in place, and we would rather tell you that than imply one exists.
What we can tell you is what we actually do with it, and that does not change with your location: it goes on one list, it is used to email you what you signed up for, it is never sold, and it is deleted when you ask. If you would prefer your information not be processed in the United States, the honest answer is not to join the list, and you are welcome to write to us instead.
Some links on this site, including the ShopMy shelf links, are affiliate links. If you click one and go on to make a purchase, we may earn a small commission, at no extra cost to you. We only point you to what Ash genuinely uses, and an affiliate relationship never changes what she chooses to recommend. Where required, we identify these links in line with applicable advertising and consumer-protection laws, including guidance from the U.S. Federal Trade Commission.
The Institute, our planned membership and education platform, is not open yet, and this site takes no payments. When memberships open, things this policy does not cover today, such as accounts, payment processing, and member content, will begin, and we will update this policy first, with a new effective date, before any of that goes live.
When we make material changes, we will update the effective date at the top of this page and note what changed below.
For any question, concern, or request about this policy or your information, reach us at info@ashkholm.com.