Privacy Policy

Introduction

Dane Griggs ("we," "us," or "our") operates the website danegriggs.com (the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other relevant privacy regulations.

Data Controller

Information We Collect

Personal Information You Provide

• Newsletter Subscriptions: Email address, name (optional), reading preferences
• Contact Forms: Name, email address, message content
• Account Information: If you create an account, we collect username, email, and password
• Communications: When you contact us directly, we collect the information you provide

Information Collected Automatically

• Website Usage Data: Pages visited, time spent, click patterns, referral sources
• Device Information: Browser type, operating system, screen resolution, device type
• Location Data: Approximate location based on IP address (country/region level)
• Cookies and Tracking: See our Cookie Policy for detailed information

Third-Party Information

• Social Media: If you interact with our social media content, we may receive information from those platforms
• Analytics Partners: Aggregated and anonymized data from Google Analytics and Meta Pixel
• Book Retailers: Purchase conversion data (anonymized) when you buy books through our affiliate links

How We Use Your Information

Legal Basis for Processing (GDPR)

Specific Uses

• Book Marketing: Promote new releases, provide personalized book recommendations
• Newsletter Communications: Send updates about new books, exclusive content, and reading recommendations
• Website Improvement: Analyze user behavior to improve content and user experience
• Customer Support: Respond to inquiries and provide assistance
• Security: Protect against fraud, spam, and unauthorized access
• Legal Compliance: Meet legal obligations and protect our rights

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

Service Providers

• Email Marketing: Services like Mailchimp or ConvertKit for newsletter delivery
• Analytics: Google Analytics for website performance analysis
• Advertising: Meta (Facebook) for targeted book marketing campaigns
• Hosting: Web hosting and content delivery network providers
• Payment Processing: For any paid services or products

Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or website notice of any such change.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption: Data transmission is secured using SSL/TLS encryption
• Access Controls: Limited access to personal data on a need-to-know basis
• Regular Updates: Security systems and software are regularly updated
• Data Minimization: We collect only the data necessary for our purposes
• Secure Storage: Data is stored in secure, regularly backed-up systems

Data Retention

Your Privacy Rights

GDPR Rights (EU/UK Users)

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent for consent-based processing

CCPA Rights (California Users)

• Right to Know: Information about data collection and use
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of sale of personal information (we don't sell data)
• Right to Non-Discrimination: Equal service regardless of privacy choices

How to Exercise Your Rights

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and analyze website performance. For detailed information about our cookie practices, please see our Cookie Policy.

Managing Your Preferences

You can manage your cookie preferences at any time through:

• The cookie consent banner when you first visit our site
• Your browser settings to block or delete cookies
• Contacting us directly at privacy@danegriggs.com

International Data Transfers

Your information may be transferred to and processed in countries other than your own. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Adequacy Decisions: Transfers to countries with adequate data protection
• Standard Contractual Clauses: EU-approved contracts for data protection
• Certification Schemes: Partners with recognized privacy certifications

Children's Privacy

Our website is intended for users aged 18 and over. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately at privacy@danegriggs.com so we can delete such information.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify users via email for material changes (if you've subscribed)
• Display a prominent notice on our website
• For significant changes, obtain fresh consent where required

Contact Information

Supervisory Authority

If you are in the EU/UK and have concerns about our data practices that we cannot resolve, you have the right to lodge a complaint with your local data protection authority. You can find contact information for EU data protection authorities at https://edpb.europa.eu/about-edpb/board/members_en .