Journey to change logo

Privacy Policy

This privacy policy describes how we collect, use, and protect the information you provide when you visit and use our website, Journey to Change.

1. The Personal Data We Collect

How Do We Collect Personal Data?

You are not required to provide personal information to browse our website. However, we collect personal data in the following situations:

  • Posting Comments: When you comment on a blog article, we collect your name, email address, and optionally, your website name.
  • Newsletter Subscription: If you subscribe to our newsletter, we collect your first name, last name, and email address.
  • Contact: If you contact us via email or our contact form, we collect the information you provide.

List of Personal Data Collected

  • First and last name
  • Email address
  • Website name (optional)

2. Legal Basis for Processing Personal Data

We process personal data based on the following legal grounds:

  • Consent: When you subscribe to our newsletter, submit a comment, or contact us, you provide explicit consent.
  • Legitimate Interest: To improve website functionality and security (e.g., spam filtering, analytics, performance tracking).
  • Contractual Necessity: To provide services such as newsletter updates.

You have the right to withdraw consent at any time.

3. Retention of Personal Data

We retain personal data only as long as necessary or required by law:

  • Newsletter Subscription Data: Retained for up to 2 years from the last interaction, unless you unsubscribe earlier.
  • Contact Form Data: Retained for 12 months after responding to your inquiry.
  • Comment Data: Retained indefinitely unless deleted upon user request.

To request data deletion, contact us at ninastrauss@hotmail.com.

4. Data Protection Measures

We use security measures, including:

  • Brute-force protection to prevent unauthorized access.
  • Spam filtering using Akismet.
  • DDoS protection and malware detection.
  • SSL encryption to secure communications.

5. Data Sharing with Third Parties

We may share your personal data with trusted third-party providers who comply with GDPR. These include:

  • WordPress (Automattic) – Content management system
  • Akismet (Automattic) – Spam protection
  • Jetpack (Automattic) – Website functionality
  • Google Analytics – Audience measurement

All third-party providers process your data strictly under GDPR-compliant agreements. We do not sell your data.

6. Cookies & Analytics

We use cookies to enhance website functionality and measure performance. Cookies fall into these categories:

  • Essential Cookies: Required for website operation.
  • Performance Cookies: Analyze site usage.
  • Functional Cookies: Enhance user experience.
  • Marketing Cookies: Used for targeted ads.

We use Google Analytics, but IP anonymization is enabled.

Managing Cookies

You can control cookie settings via our cookie consent banner or change browser settings to block cookies.

7. Your Rights Under GDPR

You have the right to:

  • Access your data (request a copy of personal data we hold).
  • Rectify inaccurate data.
  • Withdraw consent at any time.
  • Request erasure (“Right to be Forgotten”).
  • Object to processing (e.g., analytics tracking).

To exercise your rights, contact us at ninastrauss@hotmail.com. We will respond within one month.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
ICO Website

By continuing to use our website, you acknowledge and agree to this Privacy Policy. If you have any concerns, contact us at ninastrauss@hotmail.com.