Privacy Policy


Privacy Policy

This policy explains what I collect, why, how I use it, and the choices you have. It applies to this website, email list, and related features that link to it. It’s written to be clear and practical; it is not legal advice.

Key Information

Effective date: October 14, 2025
Website: www.savanahrodriguez.com
Owner & Data Controller: Savanah Rodriguez (San Tan Valley, AZ, USA)
Contact: [email protected]

What I collect

Information you give me:

  • Comments: the comment, display name, email, and IP (for spam prevention).
  • Contact form & email: name, email, message content.
  • Newsletter sign-ups: name (optional) and email.

Information collected automatically

  • Technical data: IP address, device/browser type, pages viewed, time on page, and general location (city/region) via cookies or similar tech.
  • Cookies & similar tech: used for analytics, preferences, and (where enabled) advertising/affiliate tracking.

If you buy digital products on my site

Orders are processed by third-party payment processors (e.g., Stripe or PayPal if/when enabled). They collect payment information directly; I do not store full card numbers.

Social logins & embeds

I embed or link content from Instagram, Pinterest, YouTube, and others; those services may set their own cookies and collect data per their policies.

You may be able to sign in with Google or Facebook (if enabled). Those providers share basic profile data you authorize.

How I use your information

  • Run the site: display pages, comments, prevent spam, secure the site, and troubleshoot issues.
  • Communicate: reply to messages; send newsletters and product updates (you can unsubscribe any time).
  • Improve content: understand what readers find helpful via analytics.
  • Marketing & affiliates: measure performance of posts and links, including affiliate programs (see “Affiliates & Advertising”).
  • Legal & security: comply with laws, enforce terms, prevent fraud, and protect the site.

Legal bases for processing (EU/UK visitors)

  • Consent: newsletters, non-essential cookies/analytics/ads, social logins.
  • Contract: fulfilling your orders or requests.
  • Legitimate interests: site security, basic analytics, preventing abuse.
  • Legal obligation: tax/accounting records, responding to lawful requests.

Cookies & analytics

  • I use cookies to remember preferences and (when enabled) to run Google Analytics 4 and similar tools.
  • In the EU/UK, I will obtain consent for non-essential cookies.
  • You can change your cookie choices anytime via the “Manage Cookies” link (see footer language below).

Affiliates & advertising

  • This site uses affiliate links, including Amazon Associates, ShareASale, Etsy Affiliates, and similar networks. Clicking an affiliate link may set a cookie so the merchant can attribute a purchase and pay a commission.
  • Required disclosure: As an Amazon Associate, I earn from qualifying purchases.
  • I may also add Google AdSense/ads and the Meta Pixel in the future to measure interest in content and show relevant ads. Where required, I will request your consent first.

Sharing your information

I share data only with service providers who help run the site and only as needed for that purpose:

  • Hosting/CDN/Security: Bluehost (and similar).
  • Email service provider (ESP): a reputable provider such as ConvertKit/Mailchimp (to be finalized).
  • Payment processors: Stripe/PayPal (if selling directly on-site).
  • Analytics/ads: Google Analytics, Google/Meta advertising tools (if/when enabled).
  • Spam prevention: tools that may process IPs to block bots.
    These providers must keep your data secure and use it only to provide their services.

Data retention

  • Emails/newsletters: kept until you unsubscribe or your email bounces.
  • Contact form messages: typically kept for up to 24 months (longer if needed for support or legal reasons).
  • Comments: kept to preserve conversation history.
  • Orders/receipts (if applicable): kept as required by tax/accounting laws (commonly 7 years).
  • Analytics data: commonly retained up to 26 months (or the platform default).

Your choices

  • Unsubscribe from emails anytime via the link in the email or by writing me.
  • Cookies: adjust via your browser and the “Manage Cookies” link.
  • Global Privacy Control (GPC): I honor browser GPC signals as an opt-out of sale/sharing for that browser.

Your privacy rights

EU/UK (GDPR/UK-GDPR): you can request access, correction, deletion, restriction, portability, and object to certain processing. Where consent is the basis, you can withdraw consent at any time (doesn’t affect prior processing).

United States (including California CPRA and similar state laws):

  • You can request access (categories and specific pieces of personal information), correction, deletion, and information about disclosures.
  • You can opt out of “sale” or “sharing” of personal information (which can include cross-context behavioral advertising).
  • I do not sell personal information for money. Affiliate linking and advertising technologies may be considered “sharing” under some state laws. You can opt out via GPC or the “Do Not Sell/Share My Personal Information” instructions below.
  • If I deny your request, you may appeal by replying to my email with “Privacy Appeal” in the subject.

How to exercise rights (all regions):

Email [email protected] with your request and the region/state you’re in. I may ask for information to verify your identity. You may use an authorized agent as allowed by law.

Do Not Sell/Share My Personal Information (US state laws)
To opt out of “sale”/“sharing” (including targeted ads/affiliate tracking where applicable):
1) Turn on Global Privacy Control (GPC) in your browser; I honor it.
2) Use the “Manage Cookies” link to disable advertising/affiliate cookies.
3) Or email me with the subject “Do Not Sell/Share My Personal Information” and your browser/device details so I can help apply the choice.

Children’s privacy

This site is not directed to children under 13, and I don’t knowingly collect data from them. If you believe a child provided personal information, please contact me to delete it.

International transfers

Data may be processed in the United States (where my hosting and tools are generally located). If you are outside the U.S., your data may be transferred to and processed in the U.S. I use appropriate safeguards where required.

Security

I use SSL (HTTPS), strong passwords, limited access to admin areas, and reputable providers. No method is 100% secure, but I work to protect your data.

Third-party links

My site contains links to other websites and embedded content. Their privacy practices are their own; please review their policies.

Changes to this policy

If I make material changes, I’ll update this page and revise the effective date.

Contact

Questions or privacy requests: [email protected]

Scroll to Top