Privacy Policy

Who runs this site

This site is run by Carol Monroe, with services delivered through Moonshot Labs LLC (Delaware, USA). For anything privacy-related, write to hello@carolmonroe.com.

What this site collects

• Newsletter: your email address, only if you subscribe. It is stored in my database (Supabase) and emails are sent through Resend. Legal basis: your consent. Every email includes an unsubscribe link, and you can also just reply asking to be removed.
• Contact forms and project briefs: the name, email, optional phone number and project details you send, used only to reply, prepare a quote and deliver the service you request. Legal basis: taking steps at your request.
• Comments and the Logbook: the public name and message you choose to leave. Comment email addresses are optional, stored privately and never displayed. Reactions are stored as anonymous totals. Legal basis: your consent when you post.
• Payments: if you reserve a service or book a session, payment is processed by Stripe. Card details never touch this site.
• Hosting logs: the hosting infrastructure (Lovable, served via Cloudflare) may briefly process your IP address to deliver the site securely, as all websites do.

What this site never does

• No tracking cookies. No ad networks. No profiling.
• No selling or sharing of personal information, to anyone.
• Fonts and assets are self-hosted: visiting this site sends no requests to third-party trackers.

Who processes data on my behalf

Supabase (database and storage), Resend (newsletter delivery), Stripe (payments) and Lovable/Cloudflare (hosting and CDN). Where data is transferred internationally, these providers rely on standard contractual clauses or equivalent safeguards.

How long data is kept

Newsletter emails: until you unsubscribe. Form messages and project briefs: as long as needed to handle your request and provide the service. You can ask for deletion at any time.

Your rights (GDPR)

If you are in the EU/EEA or UK you can ask for access, correction, deletion, restriction, portability, or object to processing, and you can withdraw consent at any time. Email hello@carolmonroe.com and I will answer within 30 days. You also have the right to complain to your local supervisory authority.

California residents (CCPA/CPRA)

You have the right to know what personal information is collected, to have it deleted, to correct it, and to opt out of its sale or sharing. To be clear: this site does not sell or share personal information as defined by the CCPA/CPRA, and it never has. You will never be discriminated against for exercising your rights. Requests: hello@carolmonroe.com.

Referral links

The resources page includes referral links to tools I use. Clicking one takes you to a third-party site with its own privacy policy; this site passes no personal data to them.

Children

This site is not directed at children under 16 and does not knowingly collect their data.

Changes

If this policy changes, the effective date above changes with it. Significant changes will be mentioned in the newsletter.