Privacy Policy

When you submit the contact form on our website, we collect:

• Your name
• Your email address
• The subject of your message
• The content of your message
• The date and time of submission

Legal basis (GDPR):Legitimate interest — we need this information to respond to your inquiry, and we could not communicate with you without it.

If you subscribe to our newsletter, we collect:

• Your email address
• The date and time of subscription

Legal basis (GDPR):Consent — you explicitly opt in by submitting your email address. You may withdraw this consent at any time by unsubscribing (see Section 7).

We store your light/dark mode preference in your browser’s localStorage. This data never leaves your device and is not transmitted to our servers.

Like nearly all websites, our hosting and infrastructure providers automatically generate technical logs when you visit. These may include your IP address, browser user-agent string, the pages requested, and timestamps. We use this data solely to keep the site running, to diagnose errors, and to detect and block spam, automated abuse, and denial-of-service attempts against our contact and newsletter forms.

We do not use this data to build a profile of you, to track you across websites, or for any advertising purpose. We do not attempt to identify individual visitors from it. These logs are generated and retained by our providers under their own retention schedules, typically 30 days or less.

Legal basis (GDPR):Legitimate interest — network and information security, as recognised in GDPR Recital 49.

We do not collect:

• Behavioral analytics, page-view tracking, session recordings, or heatmaps
• Payment or financial information of any kind
• Social media account data
• Advertising or cross-site tracking identifiers
• Any special categories of personal data (health, biometrics, race, religion, political opinions, sexual orientation)
• Any data we know to be from a child (see Section 10)

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure:Request that we delete your personal data (“right to be forgotten”).
• Right to restrict processing: Ask us to limit how we use your data.
• Right to data portability: Request your data in a structured, commonly used, machine-readable format.
• Right to object: Object to processing carried out on the basis of legitimate interest.
• Right to withdraw consent: Where processing is based on consent (e.g., the newsletter), you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.

• Right to know the categories and specific pieces of personal information we collect, use, and disclose.
• Right to delete personal information we have collected from you.
• Right to correct inaccurate personal information.
• Right to non-discrimination— we will never treat you differently, or offer you a lesser service, for exercising your privacy rights.

We do not sell or share your personal information. We do not sell your data, share it for cross-context behavioral advertising, or otherwise monetize it. There is nothing for you to opt out of.

Do Not Track (CalOPPA): Our website does not track visitors across third-party websites and does not use behavioral advertising. Because we do not engage in the tracking that Do Not Track signals are designed to prevent, we do not respond differently to DNT browser signals.

Note that we do not currently meet the applicability thresholds of the California Consumer Privacy Act. We honour these rights as a matter of policy regardless.

Texas residents have rights to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, sale of personal data, and certain profiling. We do not engage in any of those activities. We believe we qualify as a small business as defined by the U.S. Small Business Administration and are therefore largely exempt from the TDPSA; we honour these rights as a matter of policy regardless.

• You have the right to access your personal information and challenge its accuracy.
• You may withdraw consent for commercial electronic messages at any time. Every newsletter email we send includes an unsubscribe link and our postal mailing address, as required by CASL.
• We will respond to privacy requests within 30 days, as required by PIPEDA.

Email us at hello@everminimal.com with the subject line “Privacy Request”. We will respond within 30 days, or within the timeframe required by applicable law, and will tell you if we need a reasonable extension.

We may need to verify your identity before processing your request — usually by confirming that you can access the email address associated with the data. We will not ask you for more information than is necessary to do this.

If you use an authorized agent to submit a request on your behalf, we may ask for proof of that authorization.

If we decline to act on your request, we will tell you why. You may appeal that decision by replying to our response, or by emailing hello@everminimal.com with the subject line “Privacy Appeal”. We will respond to your appeal within 45 days with a written explanation of our reasoning.

If your appeal is denied, you may contact your state attorney general to submit a complaint. For Texas residents, complaints may be filed with the Office of the Texas Attorney General.

EU/EEA residents:If you believe we have not adequately addressed your concern, you have the right to lodge a complaint with the supervisory authority in your member state (for example, the CNIL in France, the Garante in Italy, or the Datenschutzbehörde in Austria).

UK residents:You may lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

Canadian residents: You may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.