Home/Privacy Policy
Legal Disclaimer — This Privacy Policy is a structural template designed to reflect the privacy practices of alexherek.com. While formatted to align with the EU GDPR, UK GDPR, US CAN-SPAM Act, US COPPA, US CCPA/CPRA, and Canadian PIPEDA, it does not constitute formal legal advice.

1. Introduction & Data Controller

Welcome to alexherek.com (the "Site"), operated by Alex Herek ("we," "us," "our"). We value your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, store, and protect your data when you visit our Site, request free printable samples, or subscribe to updates.

For the purposes of applicable data protection legislation—including the European Union General Data Protection Regulation (EU GDPR), the United Kingdom GDPR (UK GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA)—Alex Herek serves as the Data Controller responsible for your personal data.

2. Information We Collect

We intentionally practice data minimization, collecting only what is strictly necessary to deliver requested materials and updates.

A. Information Provided Directly by You

  • Identity & Contact Information: First name, last name, and email address when you fill out a subscription form or request free printables.
  • Consent & Verification Records: Date, timestamp, IP address, and confirmation status generated during the subscription process.

B. Method of Collection: Double Opt-In Verification

To protect your inbox from unauthorized registration and ensure maximum security:

  1. When you enter your name and email on our Site, an automated confirmation message is dispatched to your email address.
  2. Your subscription is only activated once you click the confirmation link inside that email (Double Opt-In). Unconfirmed entries are automatically discarded.

C. Information Collected Automatically (Technical Data)

When visiting our Site, automated standard web tools may log non-identifying technical information, such as your browser type, operating system, general country-level location, referring pages, and visit timestamps.

3. Legal Bases for Processing (EU / UK GDPR Compliance)

Under GDPR regulations, we process your personal data based on the following legal grounds:

  • Explicit Consent (Art. 6(1)(a) GDPR): You provide affirmative consent via our Double Opt-In process to receive requested free printable samples, newsletters, and announcements regarding new book releases.
  • Legitimate Interests (Art. 6(1)(f) GDPR): To collect basic anonymized analytics and maintain website security, integrity, and operational health.

4. How We Use Your Information

Your information is used strictly for the following purposes:

  • To deliver the free printable coloring pages, sample chapters, or extra activities you requested.
  • To occasionally email you about new book releases (for kids and seniors), website articles, or subscriber extras.
  • To analyze aggregated traffic data so we can continuously improve our content and layout.
  • To satisfy legal obligations and prevent fraudulent activity.

5. Data Sharing & Third-Party Processors

We DO NOT sell, rent, trade, or share your personal database with any third party for commercial or marketing purposes.

We share minimal data exclusively with trusted third-party Data Processors necessary to host our Site and send automated emails. These providers are contractually bound by strict privacy standards and Data Processing Agreements (DPAs):

  • Email Service Provider: to manage list subscriptions and dispatch emails (e.g., MailerLite, ConvertKit, or Mailchimp — update once your provider is finalized).
  • Website Hosting Provider: Cloudflare, Inc. (Cloudflare Pages) — to securely serve website files.
  • Privacy-Centric Analytics: (e.g., Plausible Analytics or Google Analytics with IP anonymization) to assess aggregate visitor trends, if enabled on the Site.

6. International Data Transfers

Our website operational tools utilize servers located globally (including in the United States). Whenever personal data originating from the European Economic Area (EEA) or UK is transferred internationally, we ensure appropriate safeguards are active, such as Standard Contractual Clauses (SCCs).

7. Children's Privacy (COPPA & GDPR Compliance)

Our Site features content intended for parents, caregivers, educators, and adult readers (including activity and brain-training books for seniors).

  • Not Directed to Children: The Site is not intended for direct use by children under 13 years of age (or 16 within certain EU member states).
  • No Direct Collection: We do not knowingly collect personal information directly from children. If you believe a child has submitted personal information to us without parental consent, please contact us immediately at hello@alexherek.com for prompt deletion.

8. Cookies & Analytics

We use essential cookies for core website operation and non-intrusive analytics cookies to review aggregate traffic patterns. You can disable or block cookies in your web browser settings at any time without impacting your ability to browse basic content on our Site.

9. Third-Party Links & Retailers

Our pages contain hyperlinks to external online book retailers (such as Amazon, Barnes & Noble, or independent booksellers). Once you click an external link and leave alexherek.com, third-party privacy policies govern your interactions. We hold no responsibility or liability for third-party practices.

10. Data Retention & Unsubscribe

We retain your personal data (name and email) only for as long as you choose to remain subscribed.

  • Every email we send contains a visible, automated Unsubscribe link in the footer.
  • You may opt out at any time. Upon unsubscribing, your personal data is permanently deleted from our active mailing databases.

11. Your Privacy Rights & Choices

Depending on your geographical location, you possess enforceable privacy rights:

  • Global Rights: Right to opt-out instantly, right to request access to your stored personal data, and right to request deletion.
  • EU & UK Residents (GDPR): Right to Access (Art. 15), Rectification (Art. 16), Erasure / Right to be Forgotten (Art. 17), Restriction (Art. 18), Data Portability (Art. 20), and the Right to Lodge a Complaint with a national Data Protection Authority (e.g., UODO in Poland or ICO in the UK).
  • California & US Residents (CCPA/CPRA): Right to Know, Right to Delete, and Right to Non-Discrimination. We confirm we do not sell or share your personal information.

12. Email Marketing Compliance (CAN-SPAM Act)

In compliance with the US CAN-SPAM Act, all email communications dispatched by us will:

  • Accurately identify the sender and provide truthful subject lines.
  • Include a valid physical postal address in the email footer.
  • Provide a clear, one-click mechanism to unsubscribe from future messages.

13. How to Contact Us

If you have questions, concerns, or wish to exercise your privacy rights, please contact us:

  • Data Controller: Alex Herek
  • Email: hello@alexherek.com
  • Postal Address: ul. St. Kostki Potockiego 11, 02-958 Warsaw, Poland