Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you subscribe to our newsletter, we collect:

• Email Address: Required for sending newsletter updates
• First Name and Last Name: Used to personalize communications

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain technical information:

• IP Address: Used for analytics and security purposes (anonymized where possible)
• Browser and Device Information: User agent, operating system, screen resolution, device type
• Usage Data: Pages visited, time spent on pages, click patterns, scroll depth
• Network Information: Connection type, bandwidth, latency (for performance analysis)
• Session Information: Session ID stored in browser localStorage for analytics
• Referrer Information: The website that referred you to our site
• Geographic Location: Approximate location derived from IP address (country/region level only)

1.3 Cookies and Local Storage

We use browser localStorage and sessionStorage for:

• Session Tracking: A unique session ID to track user sessions across page views
• Email Tracking: Tracking hash from newsletter links to measure email engagement
• Analytics Preferences: Your consent preferences for analytics tracking

2. How We Use Your Information

We use the collected information for the following purposes:

• Newsletter Delivery: To send you email newsletters with new blog posts and updates
• Website Analytics: To understand how visitors use our website and improve user experience
• Performance Monitoring: To measure website performance and identify technical issues
• Security: To detect and prevent fraud, abuse, and security threats
• Legal Compliance: To comply with applicable laws and regulations

3. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on the following legal bases:

• Consent: For newsletter subscriptions and analytics tracking (you can withdraw consent at any time)
• Legitimate Interest: For website analytics and security purposes (we have a legitimate interest in understanding website usage and protecting our services)
• Legal Obligation: To comply with applicable laws and regulations

4. Data Storage and Security

We take data security seriously:

• Encryption: All personal information (email addresses, names) is encrypted at rest using AWS Key Management Service (KMS)
• Hashing: Email addresses are hashed with a salt for privacy protection
• Secure Transmission: All data is transmitted over HTTPS/TLS
• Access Controls: Access to personal data is restricted to authorized personnel only
• Data Retention: We retain your data only as long as necessary for the purposes outlined in this policy

Data Location: Your data is stored on AWS servers located in the United States. By using our services, you consent to the transfer of your data to the United States.

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We use AWS (Amazon Web Services) for hosting and infrastructure. AWS acts as a data processor and is bound by strict data protection agreements.
• Email Delivery: We use Amazon SES (Simple Email Service) to deliver newsletters. Email addresses are shared with Amazon SES solely for the purpose of email delivery.
• Legal Requirements: We may disclose information if required by law or to protect our rights and safety

6. Your Rights (GDPR & CCPA)

You have the following rights regarding your personal data:

6.1 Right to Access

You have the right to request a copy of the personal data we hold about you.

6.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

6.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data. You can unsubscribe from our newsletter at any time using the unsubscribe link in emails or by visiting our unsubscribe page.

6.4 Right to Restrict Processing

You have the right to request restriction of processing of your personal data.

6.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format.

6.6 Right to Object

You have the right to object to processing of your personal data, including for direct marketing purposes.

6.7 Right to Withdraw Consent

If processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

6.8 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA, including:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, please contact us using the information provided in Section 10.

7. Analytics and Tracking

We use first-party analytics to understand website usage. Analytics data includes:

• Page views and navigation patterns
• Time spent on pages
• Device and browser information
• Performance metrics (page load times, etc.)

Opt-Out: You can opt-out of analytics tracking by adjusting your cookie preferences. Note that some basic analytics may still be collected for security and functionality purposes.

8. Email Tracking

Our newsletter emails may contain tracking pixels and links with tracking parameters to measure:

• Email open rates
• Link click-through rates
• Email delivery status

This tracking helps us improve our newsletter content and delivery. You can disable image loading in your email client to prevent pixel tracking, though this may affect email display.

9. Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately and we will delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

• Visit our unsubscribe page to manage your newsletter subscription
• Use the contact information provided on our website

We will respond to your request within 30 days as required by GDPR.

12. Data Protection Officer

For GDPR-related inquiries, you can contact our data protection officer using the contact information provided on our website.