Privacy policy
Last updated: 1 October 2026.
This policy explains what personal data rwsantosa.com collects when you visit this site, why we collect it, how long we keep it, and what rights you have. It is written for a general audience and tries to avoid legal jargon.
Who the controller is
The controller is the operator of rwsantosa.com. Postal address available on request to [email protected].
What we collect
- Server logs — IP address, user agent, requested URL and timestamp, retained for 14 days for security and operational monitoring (fraud prevention, denial-of-service response, debugging). Legal basis under GDPR: legitimate interests in running a secure website.
- Cookies — see our cookie policy. No non-essential cookie is set before you consent via the banner.
- Analytics — if you consent, we use Google Analytics 4 to understand which pages are read. Analytics data is sent to Google LLC with IP anonymisation enabled. Legal basis: consent.
- Advertising measurement — if you consent, Google Ads conversion tags and remarketing tags may fire. Legal basis: consent.
- Email you send us — if you write to
hello@orprivacy@, we store the message and your email address until the inquiry is resolved and for a reasonable period afterwards for recordkeeping (typically 12 months).
What we do NOT do
- We do not sell your data to third parties.
- We do not run on-site tracking fingerprinting that identifies you across devices.
- We do not host behavioural ads from exchanges outside the Google ecosystem.
Your rights (EEA/UK)
Under the GDPR and the UK GDPR you have the right to request:
- access to your data (what we hold),
- correction of inaccurate data,
- erasure (where no overriding legal basis),
- restriction and portability,
- to object to processing based on legitimate interests, and
- to withdraw consent at any time (which does not affect past lawful processing).
Write to [email protected]. We respond within 30 days.
Your rights (California)
Under the CCPA/CPRA, California residents have the right to know, delete, correct and opt out of sale/sharing of personal information. We do not sell personal information. To exercise rights, email [email protected].
International transfers
Our hosting is in the European Union. Analytics and advertising data are transferred to the United States under Google LLC’s Standard Contractual Clauses and the EU–US Data Privacy Framework.
Changes
If we make material changes to this policy, we update the Last updated date and, where appropriate, notify users via the cookie banner.