Who we are
Our website address is https://evegarden.eu (“Site”, “we”, “us”).

1. Data we collect

  • Information you provide: name, email address, social‑media handle, and any personal data included in comments, contact‑form messages, or checkout fields.
  • Comments: When visitors leave comments we collect the data shown in the comments form plus the visitor’s IP address and browser user‑agent string for spam detection. An anonymised hash derived from your email may be sent to the Gravatar service (see their Privacy Policy); once your comment is approved, your profile photo becomes public next to your comment.
  • Media: If you upload images, avoid including embedded location data (EXIF GPS). Site visitors can download and extract location data from publicly displayed images.
  • Automatic technical data: IP address, browser type, referring pages, device information, and Pinterest referral tags gathered through first‑party and third‑party cookies (Google Analytics, Kadence blocks performance scripts, etc.).
  • Advertising & affiliate identifiers: anonymised IDs from Google AdSense, Amazon Associates, Impact Radius, or similar programs.

2. Cookies & similar technologies
We use essential, functional, analytics, advertising, and social‑sharing cookies. You may manage non‑essential cookies via the Cookie Settings banner. Specific cookie lifespans include:

  • Comment convenience cookies: 1 year.
  • Temporary login test cookie: until browser close.
  • Login cookies: 2 days (or 2 weeks with “Remember Me”); screen‑options cookie: 1 year.
  • Post‑edit identifier cookie: 1 day.
    Analytics cookies expire after 26 months unless you clear them sooner.

3. How we use your data

  • Respond to comments or enquiries.
  • Send opt‑in newsletters and freebies.
  • Analyse traffic to improve content relevance.
  • Display contextual or personalised ads.
  • Prevent spam, brute‑force log‑in attempts, and fraud.

4. Embedded content & external links
Articles may include embedded content (e.g., YouTube videos, Instagram images, Pinterest pins). Embedded content behaves exactly as if you visited the other site and may collect data, use cookies, and monitor interaction—particularly if you have an account there.

5. Who we share your data with
We never sell your personal data. Limited sharing occurs with:

  • Automated spam‑filtering services (e.g., Akismet/CleanTalk).
  • Gravatar (email hash).
  • Email marketing provider (Flodesk/Mailerlite) for subscribers only.
  • Payment processors (Stripe, PayPal) for shop transactions.
    If you request a password reset, your IP address is included in the reset email.

6. Legal bases for processing
Consent, legitimate interest, contract performance, and legal obligation—as detailed above.

7. Data retention

  • Comments and their metadata are stored indefinitely so we can auto‑approve follow‑ups.
  • Registered‑user profiles retain the data provided until the user edits or deletes it (admins can also view/edit).
  • Newsletter subscriber data: until you unsubscribe.
  • Analytics logs: 26 months.
  • Purchase records: 7 years (accounting law).

8. Your rights
EU/UK residents (and, where applicable, California residents) may request access, rectification, erasure, restriction, data portability, or objection to processing. You can also request an exported file of the personal data we hold or deletion of personal data (exceptions: data kept for legal or security reasons).

9. Where your data is sent
Visitor comments may be examined by automated spam‑detection services and stored on EU‑based or US‑EU Data Privacy Framework‑certified servers.

10. Contact
For privacy‑specific enquiries or to exercise your rights, email privacy@evegarden.eu