GDPR & Data Rights

Last updated: October 19, 2026

Scope

This notice supplements our Privacy Policy where the EU GDPR, UK GDPR or other privacy laws apply. It does not mean every regulation applies to every visitor or that a complete compliance assessment has been performed.

Potential purposes and legal bases

Depending on the processing and jurisdiction, applicable legal bases may include consent for optional marketing and tracking; contract performance for business accounts and paid plans; legitimate interests for appropriate security and site operations; and legal obligations for records and lawful requests. A documented data-flow review is required to finalize these determinations.

Your possible rights

Where applicable and subject to legal exceptions, individuals may request access, correction, erasure, restricted processing, portability, and object to certain processing; withdraw consent; and submit complaints to a relevant data protection authority.

Google, advertising and cross-border transfers

Google Analytics, Google Ads, hosting, payment and email tools may involve external processors or international data transfers. The operator must assess vendor contracts, data processing terms, transfer safeguards and consent obligations, including Google’s applicable EU User Consent Policy and consent mode configuration, before enabling optional features for affected visitors.

Requests and complaints

Submit requests through our Contact page. We may request reasonable identity verification. The legal controller’s identity, privacy contact, any mandatory representative details, and retention timelines must be finalized before launch.

Related documents

See our Privacy Policy and Cookie Policy.