This privacy policy explains how Elia Acheri ("we," "us," or "our") collects, uses, and protects your personal information when you visit eliaacheri.com.
Data controller: Elia Acheri —
[email protected]
Personal data collected:
• Email address (when you subscribe to the newsletter).
• Browsing data collected automatically: IP address (anonymized), browser type, operating system, pages visited, visit duration.
Purposes and legal bases:
• Newsletter delivery: your explicit consent (Art. 6(1)(a) UK GDPR / GDPR), collected via double opt-in.
• Statistical analysis of web traffic: your explicit consent.
• Marketing and remarketing: your explicit consent.
Third-party data processors:
• MailerLite: UAB MailerLite, Vilnius, Lithuania (EU). Email marketing service.
• Google Analytics 4: Google Ireland Limited, Dublin, Ireland, with data transfers to the US under the EU-US and UK-US Data Privacy Frameworks (UK Extension).
• Meta Platforms: Meta Platforms Ireland Limited, Dublin, Ireland. Tracking pixel for advertising measurement.
• TikTok: TikTok Technology Limited, Dublin, Ireland. Tracking pixel for advertising measurement.
• Amazon: Amazon Associates Program (amazon.com / amazon.co.uk).
International data transfers: Transfers to the US (Google, Meta) rely on the EU-US Data Privacy Framework and its UK Extension (adequacy regulations under UK GDPR Art. 45 equivalent). For users in the EEA, transfers are based on the European Commission's adequacy decision.
Your rights under UK GDPR (UK residents): You have the right to access, rectify, erase, restrict processing, data portability, and object to processing. Contact
[email protected] to exercise these rights. You may lodge a complaint with the Information Commissioner's Office (ICO), ico.org.uk.
Your rights under CCPA/CPRA (California residents): Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CPRA), California residents have the right to: know what personal information is collected, request deletion of personal information, opt out of the sale or sharing of personal information. We do not sell your personal information. To exercise your CCPA/CPRA rights, contact
[email protected]. We will respond within 45 days of receiving a verifiable consumer request.
CAN-SPAM Act compliance (US): Our newsletter complies with the CAN-SPAM Act (15 U.S.C. § 7701 et seq.). Every marketing email includes: a clear identification that the message is an advertisement (where applicable), our valid contact information, and a clear and conspicuous unsubscribe mechanism. Unsubscribe requests are honored within 10 business days. We do not use deceptive subject lines or false header information.
UK PECR compliance (UK): In accordance with the Privacy and Electronic Communications Regulations 2003 (PECR), we only send marketing emails to individuals who have given their prior consent. Every email contains an unsubscribe link.
Data retention: Personal data is retained only for as long as necessary to fulfill the purposes described above and in accordance with applicable legal requirements.