Privacy Policy for nathanheintz.com
Last Updated: June 29, 2025
Your privacy matters to us. This isn't just a legal formality - it's a reflection of our core values. We built our websites on Ghost, specifically because it's designed with privacy at its core.
We absolutely do not and will never sell your data to third parties. Period.
This Privacy Policy explains the minimal data we collect, why we need it, and the rights you always maintain over your information.
1. Our Privacy Principles
- Minimal Data Collection: We collect only what's absolutely necessary
- No Tracking: We don't use cookies or tracking technologies to monitor your behavior
- No Data Sales: Your data will never be sold, rented, or shared with third parties for marketing purposes
- User Control: You maintain complete control over your data
- Transparency: We're clear about our practices and will notify you of any changes
2. Information We Collect
2.1 Essential Information
The only personal information we collect is what you voluntarily provide when:
- Subscribing to our newsletter: your email address (and optionally, your name)
- Becoming a member: your email address (and optionally, your name)
- Making a payment: billing information processed securely by our secure payment processor
Ghost uses "magic links" sent to your email instead of passwords, eliminating the security risks associated with password storage.
2.2 Technical Information
Our hosting provider automatically logs basic server information required to keep the websites functioning:
- IP addresses (temporarily stored in server logs)
- Browser request information
- Basic usage patterns for site maintenance and security
This information is not used for tracking, profiling, or marketing purposes.
3. How We Use Your Information
We use your information solely for:
- Sending you the content you specifically requested (newsletters, membership updates)
- Processing your membership or subscription
- Sending you essential service notifications
- Improving our websites' functionality
- Protecting our websites from security threats
4. What We DON'T Do With Your Information
To be absolutely clear:
- We don't use tracking cookies
- We don't run analytics software that builds profiles of your behavior
- We don't use your data for targeted advertising
- We don't sell, trade, or rent your personal information to anyone
5. Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA), we process your data based on:
- Consent: You explicitly opt-in to receive communications
- Contract: When necessary to provide services you've requested
- Legitimate Interests: For essential website operations and security, without overriding your privacy rights
6. Data Retention
We keep your personal information only as long as:
- You wish to remain subscribed to our newsletter or membership
- Required to provide our services to you
- Necessary to comply with legal obligations
When you unsubscribe or request deletion, we permanently remove your data from our active systems.
7. Email Service Provider
We use Mailgun to deliver our bulk emails for newsletters, events annoucements as well as transactional emails like log-in links. When we send you an email, your email address must be shared with Mailgun to complete delivery. Mailgun is contractually prohibited from using your information for any other purpose.
Their privacy policy can be found at: https://www.mailgun.com/privacy-policy/
8. Your Rights
You have the right to:
- Access: Request copies of your personal data
- Rectification: Correct inaccurate information
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit how we use your data
- Data Portability: Receive your data in a structured, machine-readable format
- Objection: Contest our use of your data
- Withdraw Consent: Unsubscribe or opt-out at any time with noquestions asked
- No Automated Decision-Making: We don't make automated decisions or profile you
To exercise any of these rights, simply email us. We will respond promptly to all requests.
9. Security
We implement strong security measures to protect your personal information, including:
- Email authentication using Ghost's secure "magic link" system rather than passwords
- Encrypted connections (HTTPS/SSL) for all website traffic
- Regular security updates
- Secure payment processing through established providers
10. International Data
Our websites and email service are located in the US and therefore process data on servers located outside the European Economic Area (EAA). By using our services, you consent to this processing. We ensure all data handling complies with applicable privacy laws.
11. Changes to This Privacy Policy
If we ever need to change this policy, we'll notify you via email before changes take effect and will never make changes that reduce your privacy rights without your explicit consent.
12. Contact Us
For any privacy-related questions or to exercise your rights, please contact:
Email: hello@nathanheintz.com