Privacy Policy

PLACEHOLDER DOCUMENT — every [TODO] below marks a fact that must be confirmed and filled in before this page goes live. This is not a substitute for review by someone qualified to advise on GDPR compliance for your specific setup.

Who we are

This website is operated by Heather Kanost ("we", "us"), the data controller for the personal data described below. [TODO: add registered business name/entity if one exists, and a registered address if required in your jurisdiction.]

What we collect, and why

Contact form

When you submit the contact form, we collect your name, email address, and message. This is used solely to respond to your enquiry. We only process this data because you have given consent via the checkbox on the form — you can withdraw that consent at any time by emailing us (see Contact, below).

Booking a call

Booking is handled by Calendly, a third-party service. When you book a call, Calendly collects your name, email address, and chosen time directly — we receive a copy of that booking. See Calendly's own privacy policy for how they handle your data.

Analytics

We use Plausible Analytics, which does not use cookies and does not collect or store any personal data or personally-identifying information. Because no personal data is processed, no cookie consent banner is required or shown on this site — this is a deliberate choice, not an oversight.

Cookies

This site does not set any cookies. The only client-side storage used is a single non-identifying preference (whether you've dismissed a banner, if applicable) — no tracking identifier, no consent required.

Who else sees your data (processors)

• Web hosting / content management: [TODO: name the WordPress hosting provider once selected — it processes contact form submissions and stores blog content.]
• Email delivery: [TODO: name the SMTP provider used to deliver contact form notification emails, e.g. Brevo.]
• Calendly, Inc. (United States) — booking and scheduling. [TODO: confirm Calendly's Data Processing Addendum has been accepted in the Calendly admin console.]
• Plausible Analytics — cookieless website analytics. Plausible is EU-hosted and does not process personal data as defined under GDPR.

How long we keep your data

[TODO: decide and state an actual retention period — e.g. contact form submissions are deleted after 12 months unless an ongoing relationship continues. This is currently undecided and must be set before launch.]

Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data
• Restrict or object to our processing of your data
• Receive your data in a portable format
• Lodge a complaint with your local data protection supervisory authority

To exercise any of these rights, contact us using the details below.

AI transparency

The content on this website is written and reviewed by Heather Kanost. AI coding assistants may have been used as a development tool to help build this website's code and infrastructure — this does not involve processing visitor data, and no AI system is used to generate published content or to process personal data submitted through this site.

Contact

For any privacy question or to exercise your rights, contact us at privacy@heatherkanost.com. You can also reach Heather Kanost, owner, directly at the same address.

Last updated: [TODO: date this page when it goes live.]