Poems Rethabile Likes Privacy Policy
Privacy Policy
Last updated: April 2026
Welcome to Poems Rethabile Likes. Your privacy is important to me. This Privacy Policy explains what personal data may be collected from visitors to this personal blog, how it is processed, and your rights under applicable data protection laws, including the EU General Data Protection Regulation (GDPR).
1. Data Controller
This is a personal blog curated by Rethabile Masilo (the "Controller"). As the site owner, I determine the purposes and means of processing certain personal data collected through the blog, even where third-party providers handle storage and technical processing on my behalf or under their own terms.
For questions or to exercise your rights, please use a contact form (recommended) or the details provided in the "Contact" section below. Direct email publication is avoided to reduce spam risks.
2. What Personal Data Is Collected
I may collect or facilitate the collection of the following types of personal data:
- Newsletter subscriptions: Email address (and optional name) when you subscribe via Buttondown.
- Visitor analytics and logs: Limited data such as IP address (potentially anonymized), browser type, device information, pages visited, and general location, via Blogger/Google services or similar audience-measurement tools.
- Comment data: If you leave a comment, your name, email (if provided), and any profile or content information. Comments may be moderated before publication.
- Cookies and similar technologies: Used by Blogger, AddToAny (sharing), Google services (e.g., Fonts if used), and other embedded features for essential functionality, security, audience measurement, and social sharing.
No other personal data (such as payment details) is collected. I do not knowingly collect data from children under 15; this blog is not directed at them.
3. Purposes and Legal Bases for Processing
Personal data is processed only for specific purposes, on the following legal bases under the GDPR:
- Consent: For newsletter subscriptions (you actively opt in) and for non-essential cookies/trackers (where required). You can withdraw consent at any time.
- Legitimate interests: For basic site administration, security (e.g., preventing abuse in comments), understanding general audience engagement to improve content, and enabling essential sharing/embedding features. These interests are balanced against your rights and do not override them where your privacy interests prevail.
- Legal obligation: Where required to comply with applicable laws (e.g., responding to lawful requests).
Audience measurement may rely on CNIL-exempt conditions where strictly limited to anonymous/statistical purposes without further reuse by providers. Where consent is needed for analytics or other trackers, it will be obtained via appropriate means (e.g., cookie banner).
4. Third-Party Services and Processors
This blog uses or links to the following services, each acting as a processor or independent controller with their own privacy practices. I encourage you to review their policies:
- Buttondown – Email newsletter service (US-based).
- AddToAny – Social sharing buttons.
- Google/Blogger – Hosting, fonts, potential analytics/embedded content, and related services.
These providers may process data on my behalf (as processors) or independently. I limit third-party widgets to what is necessary to minimize tracking risks.
5. International Data Transfers
Some providers (e.g., Buttondown in the US) are based outside the European Economic Area (EEA). Where personal data is transferred outside the EEA without an adequacy decision, appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission are relied upon, along with any supplementary measures where needed. For details, refer to the providers' policies or contact me.
6. Cookies and Tracking Technologies
This blog and third-party services may use cookies or similar technologies (e.g., pixels) for essential functions (site operation, security), audience measurement, and sharing features.
Strictly necessary cookies do not require consent. Non-essential cookies (including many analytics or social features) should only be placed after you have been informed and, where legally required, given your consent. You can manage or withdraw preferences via your browser settings or any cookie banner implemented on the site. Audience-measurement tools aim to comply with CNIL guidance on limited, statistical use where possible.
7. How Data Is Used and Shared
Data is used to:
- Deliver subscribed email updates (only to consenting subscribers).
- Analyze general site usage to improve content (statistical/aggregated where possible).
- Enable functionality such as comments, sharing, and embedded media.
- Respond to comments or inquiries and maintain site security.
I do not sell personal data. Sharing occurs only with the third-party providers listed (under their terms) or where legally required. No broad sharing with advertisers or unrelated parties occurs.
8. Data Retention
Data is retained only as long as necessary for the purposes described or as required by law. Newsletter emails are managed by Buttondown per their retention policy. I do not maintain separate long-term personal databases.
9. Your Rights (Data Subject Rights)
Under the GDPR, you have the right to:
- Access, rectify, or erase your personal data.
- Restrict or object to processing.
- Receive your data in a portable format (where applicable).
- Withdraw consent at any time (this does not affect prior processing).
- Lodge a complaint with a supervisory authority, such as the CNIL in France (www.cnil.fr) or your local authority.
To exercise these rights, contact me via the recommended contact form or method. I will respond within one month (extendable where permitted). Note that some rights may be limited by legal obligations or legitimate interests.
10. Security
I take reasonable technical and organizational measures to protect personal data, such as limiting collection and relying on reputable providers. However, no system is completely secure, and I cannot guarantee absolute protection against all risks.
11. Children’s Privacy
This blog is not directed to children under 15, and I do not knowingly process personal data from that age group. If I become aware of such data, I will take steps to delete it.
12. Changes to This Policy
This Privacy Policy may be updated occasionally to reflect changes in practices or legal requirements. The "Last updated" date will be revised, and significant changes will be noted. Continued use of the blog after changes constitutes acceptance of the updated policy.
Comments