1. Overview
Natural Remedy Guides ("we", "us", "our") operates naturalremedyguides.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site. We comply with global privacy regulations including the GDPR (EU), CCPA/CPRA (California), and other applicable privacy laws.
Quick Summary: We collect only what we need: your email (if you subscribe), anonymized analytics, and technical data (IP, browser). We do not sell your data. You control your data — access, correct, or delete on request.
2. Information We Collect
We collect information you provide directly and information collected automatically through your use of the Site.
2.1 Information You Provide Directly
- Newsletter subscriptions: Email address, name (optional)
- Contact forms: Name, email, message content
- Feedback & surveys: Responses, preferences
2.2 Information We Collect Automatically
- Log data: IP address, browser type, operating system, referral URLs, pages visited, timestamps
- Device information: Device type, operating system, screen resolution, language settings
- Analytics data: Via Google Analytics (GA4) — aggregated and anonymized usage patterns
- Cookies & similar tech: Session IDs, consent preferences, affiliate tracking cookies
2.2 Data Categories Table
| Category | Examples | Source | Purpose |
|---|---|---|---|
| Identifiers | Email address, name | You (forms, subscriptions) | Newsletter delivery, communications |
| Internet/Network Data | Pages visited, IP address, referral URLs, timestamps | Automatic (server logs, GA) | Analytics, security, fraud prevention |
| Device Information | Device type, OS, screen resolution, language | Automatic (browser headers) | Optimization, debugging |
| Cookies & Similar Tech | Session ID, consent preferences, affiliate tracking | Automatic (browser storage) | Functionality, analytics, affiliate attribution |
3. How We Use Your Information
We process personal data only for specific, legitimate purposes with a valid legal basis.
| Purpose | Data Used | Legal Basis (GDPR) |
|---|---|---|
| Newsletter delivery | Email address | Consent |
| Content improvement & personalization | Usage data, analytics | Legitimate Interest |
| Security & fraud prevention | IP address, log data | Legitimate Interest |
| Legal compliance | Contact info, log data | Legal Obligation |
| Affiliate attribution | Affiliate tracking cookies | Contractual Necessity |
4. Cookies & Tracking Technologies
We use cookies and similar technologies to ensure the Site works properly, understand how it's used, and attribute affiliate purchases.</
5. Data Sharing & Disclosure
We do not sell your personal information.
We only share data under strict conditions:
- Service providers: Cloudflare (hosting, security, CDN), Google Analytics (analytics), email service providers (newsletter delivery). All processors operate under data processing agreements.
- Legal requirements: Court orders, government requests, or regulatory investigations where legally compelled.
- Vital interests: To protect the safety of users or the public.
- Business transfers: In a merger, acquisition, or sale of assets, data may transfer as part of the business (subject to this policy).
6. Data Retention
We retain personal data only as long as necessary for the purposes outlined above.
| Data Type | Retention Period |
|---|---|
| Newsletter email & preferences | Until unsubscribe + 30 days for purge |
| GA analytics data (aggregated) | 14 months |
| GA user-level data | 28 months |
| Server logs (IP, access logs) | 30 days |
| Email inquiry data | 2 years from last contact |
| Cookie consent records | 12 months |
7. Your Rights
Under GDPR, CCPA/CPRA, and other privacy laws, you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit how we process your data
- Portability: Receive your data in a portable format
- Objection: Object to processing based on legitimate interest
- Withdraw consent: For consent-based processing (e.g., newsletter)
To exercise any right, email [email protected]. We respond within 30 days (GDPR) or 45 days (CCPA).
8. California Privacy Rights (CCPA/CPRA)
California residents have additional rights:
- Right to Know: Request categories of personal information collected, sources, business purposes, and third parties with whom we share data
- Right to Delete: Request deletion of personal information (with exceptions)
- Right to Opt-Out: Opt out of the "sale" or "sharing" of personal information
- Non-Discrimination: No denial of goods/services for exercising rights
We do not "sell" or "share" personal information as defined under CCPA/CPRA. Affiliate tracking cookies are for attribution, not sale.
9. International Data Transfers
Our hosting provider (Cloudflare) and analytics provider (Google) operate servers in the United States. Your data may be transferred to the US and other countries. Transfers rely on Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework where applicable. We only engage processors that provide adequate safeguards.
10. Security
We implement appropriate technical and organizational measures:
- HTTPS/TLS encryption for all traffic
- Cloudflare WAF and DDoS protection
- Secure headers (HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy)
- Access controls and least-privilege access
- Regular security reviews and dependency scanning
No method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
11. Third-Party Services
The Site integrates with the following third-party services (each has its own privacy policy):
- Cloudflare: Hosting, CDN, WAF, DNS
- Google Analytics (GA4): Anonymized analytics
- Google Fonts: Self-hosted fonts (no external requests)
- Affiliate Networks: ShareASale, CJ, Rakuten Advertising, Digistore24, ClickBank — each places cookies for purchase attribution
12. Children's Privacy
The Site is not directed to children under 13 (or 16 in the EU/EEA). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date. For material changes, we will provide notice via the Site or email (if you subscribed).
14. Contact
For privacy questions, data requests, or concerns: