Privacy Policy
Effective Date: August 11, 2026
1. Information We Collect
We may collect the following information:
Personal Information:
- Name and email address when you complete the contact form, or when you subscribe to our Substack newsletter (subscription is processed on Substack's platform).
Technical Information:
- Aggregated website usage data including page views, click timing, and general device/browser types (managed via Cloudflare Web Analytics). This data does not track or identify individual users.
Cookies and Similar Technologies:
We do not use cookies, but links hosted on external sites (e.g., Substack, LinkedIn) may.
2. How We Use Your Information
We use your information to:
- Monitor website performance and health via aggregated, non-identifying technical data
- Comply with legal obligations
- Deliver subscription content
3. How Long We Keep Your Information
Email addresses are retained until you request deletion or unsubscribe from communications. You may request deletion of your personal information at any time (see Section 6).
4. Sharing Your Information
We do not sell or rent your personal information. We share limited information with third-party service providers only as necessary:
Website Hosting:
- Netlify hosts our website and administers the contact form: https://www.netlify.com/privacy/
- Substack manages newsletter subscriptions and delivery: https://substack.com/privacy
Legal Compliance:
- We may disclose information to comply with legal obligations or respond to valid requests from authorities
5. International Data Transfers
Our service providers may store and process data in the United States and other countries. When your data is transferred internationally, we rely on these providers' compliance with applicable data protection frameworks, including:
- Standard Contractual Clauses (SCCs) for EU data transfers
- Adequacy decisions where applicable
By using our services, you acknowledge and consent to these international transfers.
6. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
For All Users:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data (subject to legal retention requirements)
- Opt-out: Unsubscribe from marketing communications at any time
Additional Rights for EU/UK/EEA Users (GDPR):
- Data Portability: Receive your data in a machine-readable format
- Restrict Processing: Request that we limit how we use your data
- Object: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
- Lodge a Complaint: File a complaint with your local data protection authority
Additional Rights for California Users (CCPA):
- Know what personal information is collected, used, shared, or sold
- Request deletion of personal information
- Opt-out of the "sale" of personal information (Note: We do not sell personal information)
- Non-discrimination for exercising your privacy rights
To exercise any of these rights, please contact us using this form. We will respond to your request within 30 days (or as required by applicable law).
7. Legal Basis for Processing (GDPR)
For users in the EU/UK/EEA, we process your personal data based on the following legal grounds:
- Consent: Where you've provided explicit consent (e.g., submitting the contact form)
8. Security
We take reasonable technical and organizational measures to protect your information from unauthorized access, use, or disclosure. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
9. Children's Privacy
Our website is not intended for children under 13 (or 16 in the EU). We do not knowingly collect information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.
10. Data Breach Notification
In the event of a data breach that affects your personal information, we will notify you and any applicable supervisory authorities as required by law, typically within 72 hours of becoming aware of the breach.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Updates are effective immediately upon posting to this page with a revised "Effective Date." For material changes, we will provide prominent notice on our website or via email. We encourage you to review this policy periodically.
12. Contact
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us using this form.
By using Project Janna LLC's website, you acknowledge that you have read and agree to this Privacy Policy.