Privacy Policy

1. Who we are

We operate SelfPeak Digest (the "Site") as an independent health education publication. For data protection purposes, we are the data controller for personal information collected through this Site.

If you have questions about this policy or your data, contact us at hello@yourdomain.com.

2. What data we collect

2.1 Newsletter subscription

When you subscribe to our newsletter, we collect your email address and, optionally, your first name. We also record a timestamp of your consent and the IP address from which the subscription was submitted, for legal compliance purposes.

2.2 Analytics

We may use privacy-friendly analytics tools (such as Plausible, Fathom, or similar) that do not use cookies and do not track you across websites. These tools collect aggregated, anonymized data such as page views, referral sources, browser type, and country-level location. This data cannot be used to personally identify you.

2.3 Contact correspondence

If you email us directly, we retain that correspondence (including your email address and message content) to respond to your inquiry and for our records.

2.4 Cookies and tracking

We do not use advertising cookies or cross-site tracking technologies. If we use analytics, they are cookie-free and do not target ads. Essential cookies (such as those required for basic site functionality) may be used and do not require consent under applicable law.

3. How we use your data

• Newsletter delivery: To send you our email digest.
• Site improvement: To understand how visitors use our site and improve our content.
• Communication: To respond to questions, feedback, or correction requests you send us.
• Legal compliance: To comply with legal obligations, such as maintaining records of consent.

4. Legal bases for processing (GDPR)

We process your personal data on the following legal bases:

• Consent (Article 6(1)(a) GDPR): For newsletter subscription. You provide explicit consent by checking the consent box and submitting the form. You may withdraw consent at any time by unsubscribing.
• Legitimate interests (Article 6(1)(f) GDPR): For analytics (understanding site usage) and for maintaining our systems. We have assessed that these interests do not override your rights and freedoms.

5. Data processors and third parties

We may share your data with the following categories of processors:

• Email service provider: We use a third-party email service to manage our mailing list and deliver newsletters. Your email address and first name are shared with this provider solely for the purpose of email delivery. They process data under a Data Processing Agreement (DPA) in accordance with GDPR.
• Hosting provider: Our site is hosted on Cloudflare Pages. Cloudflare may process minimal technical data (IP addresses, request logs) as part of providing hosting and security services.
• Analytics provider: If used, our analytics provider processes anonymized, aggregated data only.

6. Data sharing

We do not sell, rent, or trade your personal information to any third party. We do not share your data with advertisers. We only share data with processors as described above, and only to the extent necessary to operate this Site and deliver our newsletter.

7. Data retention

• Active subscribers: We retain your subscription data for as long as you remain subscribed.
• Unsubscribed users: Upon unsubscribing, your email address is moved to a suppression list to ensure we do not contact you again. Suppression list data is retained indefinitely for compliance purposes. Other personal data is deleted within 30 days of unsubscription.
• Contact correspondence: We retain email correspondence for up to 24 months after the last message, unless a longer retention period is required by law.
• Analytics data: Aggregated analytics data does not contain personal information and may be retained indefinitely.

8. Your rights

Under GDPR and applicable data protection laws, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (subject to legal obligations).
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Withdraw consent for newsletter subscription at any time by clicking "unsubscribe" in any email or by contacting us.

To exercise any of these rights, contact us at hello@yourdomain.com. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

9. International data transfers

Our service providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or reliance on the provider's certification under an adequate framework.

10. Security

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS), access controls, and regular review of our data processing practices. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Children's privacy

Our Site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will indicate the date of the most recent update at the top of this page. If changes are significant, we will notify subscribers via email. Continued use of the Site after changes constitutes acceptance of the updated policy.

13. Contact

For all privacy-related inquiries, data requests, or concerns, contact us at:
hello@yourdomain.com