Privacy Policy
This privacy policy describes how Adrian Isfan ("I", "me", or "my") collects, uses, and protects the information you provide when you visit adrianisfan.com or subscribe to my newsletter. I take privacy seriously and only collect what I actually need to deliver the content and services on this site.
Information I collect
When you subscribe to the newsletter, I collect your email address. If you send me a message through the contact form, I collect your name, email address, and the content of your message. I never collect payment information on this site.
Like most websites, adrianisfan.com also receives standard technical data from your browser, such as your IP address, device type, browser version, referring URL, and pages visited. This data is used in aggregate form to understand traffic patterns and improve the site.
How I use your information
- To send you newsletter emails about my work, products, and writing.
- To respond to inquiries sent through the contact form.
- To analyze site traffic and improve content and user experience.
- To comply with legal obligations when required.
I do not sell, rent, or trade your personal information with third parties. Ever.
Third parties I use
- Amazon SES and Inteli-Send for newsletter delivery
- Plausible Analytics for privacy-respecting, cookieless analytics
- Cloudflare for DNS, CDN, and hosting
Email and newsletter
By subscribing, you agree that your email address may be stored and processed by my email provider for the sole purpose of delivering the newsletter. Every email includes a one-click unsubscribe link. When you unsubscribe, your email is removed from active sending lists.
Cookies and analytics
This site uses Plausible Analytics, which does not set cookies and does not track you across sites. No personal profile of your activity is built.
Data retention
I retain your email address for as long as you remain subscribed to the newsletter. Contact form submissions are kept for up to 24 months, after which they are deleted unless there is an ongoing business conversation. You can request earlier deletion at any time.
Your rights under GDPR
Depending on your jurisdiction (including the EU under GDPR and California under CCPA), you may have the right to:
- Access the personal data I hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict how your data is processed
- Request a portable copy of your data
To exercise any of these rights, email adrian@adrianisfan.com. I will respond within 30 days.
Security measures
The site is served over HTTPS with modern TLS. Sensitive data in transit is always encrypted. I use reputable third-party providers with their own security controls for email, analytics, and hosting.
Children's privacy
This site is not directed to children under the age of 16. I do not knowingly collect personal information from children.
Changes to this policy
I may update this policy from time to time to reflect changes in the services or applicable law. The "Last updated" date above will change. Material changes will be announced via the newsletter.
Contact
Questions about this policy or how your data is handled? Email adrian@adrianisfan.com.