Privacy, security and your GDPR rights

The data controller is Kelechi Adiuku O. You can reach me any time at adiukukelechi@gmail.com.

• Contact form: your name, email and message, so I can reply to you. Legal basis: your consent.
• Newsletter: your email address, so I can send you updates. Legal basis: your consent. You can unsubscribe at any time.
• Free workbook: your first name and email, so I can send you the workbook and relevant follow-ups. Legal basis: your consent.
• Admin accounts: email and an encrypted password, used only to manage this site.

No advertising trackers, no analytics profiling and no selling of data to third parties.

This site uses only strictly necessary storage: a session token when an admin signs in, and a small flag remembering that you dismissed the privacy notice. No marketing or tracking cookies are used, so no cookie consent banner is required beyond that notice.

Contact messages are kept for up to 24 months after our last exchange. Newsletter data is kept until you unsubscribe or ask for deletion. After that, records are permanently deleted.

• All traffic is served over HTTPS.
• Data is stored in a managed EU-hosted database with row level security enabled.
• Only authenticated admin accounts can read submissions or subscribers.
• Passwords are hashed, never stored or visible in plain text.
• Admin accounts can only be created by an existing admin; public sign-up is disabled.
• Form inputs are validated and rate-limited against spam and injection attempts.

Hosting, database and authentication are provided by the platform running this site. Email delivery is handled by my email provider. Each processor handles data only on my instructions and under a data processing agreement.

• Access a copy of the data I hold about you.
• Correct anything inaccurate.
• Ask for erasure (the right to be forgotten).
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting past lawful processing.
• Lodge a complaint with your supervisory authority (in Sweden, IMY).

To use any of these rights, email adiukukelechi@gmail.com and I will respond within 30 days.

If you spot a vulnerability on this site, please email adiukukelechi@gmail.com with the details rather than sharing it publicly. I will acknowledge responsible reports and fix issues as quickly as I can.