Privacy Policy

Introduction

Natalie Lorenz ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our contact form. This policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

Information We Collect

We collect information that you provide directly to us when you:

• Fill out our contact form (name, email address, phone number, message content)
• Subscribe to our newsletter or communications
• Communicate with us via email or other channels

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to analyze website traffic and optimize your experience. The types of cookies we use include:

• Essential Cookies: Required for the website to function properly. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website through Vercel Analytics. These are only activated with your consent.

You can manage your cookie preferences through the cookie consent banner displayed when you first visit our website. You can also clear cookies through your browser settings at any time.

How We Use Your Information

We process your personal data based on the following legal bases under GDPR:

• Consent: When you submit the contact form with the consent checkbox selected
• Legitimate Interest: To respond to your inquiries and improve our services
• Legal Obligation: To comply with applicable laws and regulations

We use the information to:

• Respond to your inquiries and provide customer service
• Send you information about our services and business updates (with consent)
• Improve our website and services
• Comply with legal obligations

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact Form Submissions: Retained for 3 years from the date of submission, or until you request deletion
• Analytics Data: Anonymized and aggregated data may be retained indefinitely for statistical purposes
• Cookie Preferences: Stored locally in your browser until you clear your browser data

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted service providers who assist us in operating our website and conducting our business, provided they agree to keep this information confidential. These include:

• Formspree: Processes contact form submissions
• Vercel: Hosts our website and provides analytics (when consented)

Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including encryption in transit (HTTPS), secure form processing, and limited access controls. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights:

• Right of Access: Request a copy of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at natalie@casanovay.com. We will respond to your request within 30 days.

Your Rights Under CCPA

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your CCPA rights

International Data Transfers

Your information may be transferred to and processed in the United States, where our service providers are located. By using our website and submitting information, you consent to this transfer. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

Third-Party Services

Our contact form is powered by Formspree. When you submit the form, your information is processed according to Formspree's privacy policy. Our website analytics are provided by Vercel, subject to Vercel's privacy policy.

Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us at:

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.