Your privacy is critically important to me. malvarezphd.wordpress.com is a website that is powered by WordPress.org and uses their available data collection features. Automattic Inc., is the parent company of WordPress and has provided me with a copy of their privacy policy, which I have adjusted to the needs of this website. Consequently, I have a few fundamental principles:
I am thoughtful about the personal information I ask you to provide and the personal information that I collect about you through the operation of my services. I store personal information for only as long as I have a reason to keep it and so, I aim for full transparency on how I gather, use, and share your personal information. Below is my Privacy Policy, which incorporates and clarifies these principles:
Who I am and What This Policy Covers
This Privacy Policy applies to information that I collect about you when you use:
This website (malvarezphd.wordpress.com).
Throughout this Privacy Policy we’ll refer to my website, and other products and services collectively as “Services.” Below I explain how I collect, use, and share information about you, along with the choices that you have with respect to that information.
Information I Collect
I only collect information about you if I have a reason to do so — for example, to provide my Services, to communicate with you, or to make my Services better. I collect this information from three sources: if and when you provide information to me, automatically through operating my Services, and from outside sources. Let’s go over the information that I collect:
Information You Provide to Me
It’s probably no surprise that I collect information that you provide to me directly. Here are some examples:
Basic information: I ask for basic information from you in order for you to interact with this website. For example, I require individuals who comment to provide a username or name and email address.
Payment and contact information: If you buy something from me through malvarezphd (for example via the Payments feature or through my Ko-Fi.com site), I’ll collect personal and payment information like your name, credit card information, and contact information to process those payments and contact you. I will also keep a record of the purchases you’ve made. You may also provide me with financial details to set up a payments integration, like the email address for your Stripe or PayPal account or your bank account information.
Content information: You might provide me with information about you in draft and published content (a blog post or comment that includes biographic information about you, or any media or files you upload).
Communications with me (hi there!): You may also provide me with information when you communicate with me via form, email, phone, laflorsabia.com comment, or otherwise, and if I store a copy of our communications (including any call recordings as permitted by applicable law).
Information I Collect Automatically
I also collect some information automatically:
Log information: Like most online service providers, I collect information that web browsers, mobile devices, and servers typically make available, including the browser type, IP address, unique device identifiers, language preference, referring site, the date and time of access, operating system, and mobile network information. I collect log information when you use my Services — for example, if you create an user account on WordPress.com.
Usage information: I collect information about your usage of my Services. I use this information to, for example, provide my Services to you, get insights on how people use my Services so I can make my Services better, and understand and make predictions about user retention.
Location information: I may determine the approximate location of your device from your IP address. I collect and use this information to, for example, calculate how many people visit my Services from certain geographic regions. I may also collect information about your precise location via the WordPress mobile app if you allow me to do so through your mobile device operating system’s permissions.
Information from cookies & other technologies: A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. Pixel tags (also called web beacons) are small blocks of code placed on websites and emails. WordPress uses cookies and other technologies like pixel tags to help me identify and track visitors, usage, and access preferences for my Services, as well as track and understand email campaign effectiveness and to deliver targeted ads. For more information about the use of cookies and other technologies for tracking, including how you can control the use of cookies, please see the WordPress Cookie Policy.
Information I Collect from Other Sources
I may also get information about you from other sources. For example, if you create or log in to your WordPress.com account through another service (like Google) or if you connect your website or account to a social media service (like Twitter). The information I receive depends on which services you use or authorize and what options are available.
How and Why I Use Information
I use information about you for the purposes listed below:
To provide my Services. For example, to allow you to interact with the website, process payments and orders, and verify user information.
To protect my Services, my users, and the public. For example, by detecting security incidents; detecting and protecting against malicious, deceptive, fraudulent, or illegal activity; fighting spam; complying with my legal obligations; and protecting the rights and property of malvarezphd and others, which may result in me, for example, declining a transaction or terminating Services.
To fix problems with my Services. For example, by monitoring, debugging, repairing, and preventing issues.
To customize the user experience. For example, to personalize your experience by serving you relevant notifications and advertisements for my Services.
To communicate with you. For example, by emailing you to ask for your feedback, share tips for getting the most out of my products, or keep you up to date on malvarezphd; texting you to verify your payment; or calling you to share offers and promotions that I think will be of interest to you. If you don’t want to hear from me, you can opt out of marketing communications at any time.
Legal Bases for Collecting and Using Information
A note here for those in the European Union about my legal grounds for processing information about you under EU data protection laws, which is that my use of your information is based on the grounds that:
(1) The use is necessary in order to fulfill my commitments to you under the applicable terms of service or other agreements with you; or
(2) The use is necessary for compliance with a legal obligation; or
(3) The use is necessary in order to protect your vital interests or those of another person; or
(4) I have a legitimate interest in using your information — for example, to provide and update my Services; to improve my Services so that I can offer you an even better user experience; to safeguard my Services; to communicate with you; to measure, gauge, and improve the effectiveness of my advertising; and to understand my user retention and attrition; to monitor and prevent any problems with my Services; and to personalize your experience; or
(5) You have given me your consent — for example before I place certain cookies on your device and access and analyze them later on, as described in the WordPress Cookie Policy.
Sharing Information
How I Share Information
I share information about you in limited circumstances, and with appropriate safeguards on your privacy. These are spelled out below:
Third-party vendors: I may share information about you with third-party vendors who need the information in order to provide their services to me, or to provide their services to you. This includes vendors that helps me provide my Services to you (like Stripe, which powers WooCommerce Payments, payment providers that process your credit and debit card information, payment providers you use for your own ecommerce operations, fraud prevention services that allow us to analyze fraudulent payment transactions, cloud storage services, postal and email delivery services that help me stay in touch with you, customer chat and email support services that help me communicate with you), those that assist me with my marketing efforts (e.g., by providing tools for identifying a specific marketing target group or improving our marketing campaigns, and by placing ads to market our services); those that help me understand and enhance my Services (like analytics providers); those that make tools to help me run my operations (like programs that help me with task management, scheduling, word processing, email and other communications, and collaboration among my teams); other third-party tools that help me manage operations; and companies that make products available on my website (like extensions), who may need information about you in order to, for example, provide technical or other support services to you. Automattic requires vendors to agree to privacy commitments in order to share information with them.
Legal and regulatory requirements: I may disclose information about you in response to a subpoena, court order, or other governmental request.
To protect rights, property, and others: I may disclose information about you when I believe in good faith that disclosure is reasonably necessary to protect the property or rights of malvarezphd, third parties, or the public at large. For example, if I have a good faith belief that there is an imminent danger of death or serious physical injury, I may disclose information related to the emergency without delay.
Business transfers: In connection with any merger, sale of company assets, or acquisition of all or a portion of our business by another company, or in the unlikely event that Automattic (parent company of WordPress) goes out of business or enters bankruptcy, user information would likely be one of the assets that is transferred or acquired by a third party. If any of these events were to happen, this Privacy Policy would continue to apply to your information and the party receiving your information may continue to use your information, but only consistent with this Privacy Policy.
With your consent: I may share and disclose information with your consent or at your direction. For example, I may share your information with third parties when you authorize me to do so.
Aggregated or de-identified information: I may share information that has been aggregated or de-identified, so that it can no longer reasonably be used to identify you. For instance, I may publish aggregate statistics about the use of my Services, or share a hashed version of your email address to facilitate customized ad campaigns on other platforms.
Site owners: If you have a WordPress.com account and interact with another site using our Services, your information may be shared with the administrators of the site. For example, if you leave a comment on a site created on WordPress.com or running Jetpack, your IP address and the email address associated with your WordPress.com account may be shared with the administrator(s) of the site where you left the comment. Or if you make a payment (like via the Payments feature) to a site, your public display name, user name, and email address may be shared with the administrator(s) of the site.
Published support requests: If you send me a request for assistance (for example, via a support email or one of our other feedback mechanisms), I reserve the right to publish that request in order to clarify or respond to your request, or to help me support other users.
I do not sell users’ data. I am not a data broker, I don’t sell your personal information to data brokers, and I don’t sell your information to other companies that want to spam you with marketing emails.
I might show ads on my website, and the revenue they generate lets me offer free access to some of my Services so that money doesn’t become an obstacle to having a voice.
Under a new California law, the California Consumer Privacy Act (“CCPA”), some personalized advertising you see online and on my services might be considered a “sale” even though I don’t share information that identifies you personally, like your name or email address.
Information Shared Publicly
Information that you choose to make public is — you guessed it — disclosed publicly.
That means information like your public profile, posts, other content that you make public on your website, and your “Likes” and comments on other websites are all available to others — and we hope they get a lot of views! Public information may also be indexed by search engines or used by third parties. Please keep all of this in mind when deciding what you would like to share publicly.
How Long I Keep Information
I generally discard information about you when it’s no longer needed for the purposes for which I collect and use it — described in the section above on How and Why I Use Information — and I’m not legally required to keep it.
For example, Automattic keeps web server logs that record information about a visitor to one of their websites, like the visitor’s IP address, browser type, and operating system, for approximately 30 days. They retain the logs for this period of time in order to, among other things, analyze traffic to Automattic’s websites (including malvarezphd!) and investigate issues if something goes wrong on one of their websites.
Security
While no online service is 100% secure, Automattic works very hard to protect information about you against unauthorized access, use, alteration, or destruction, and take reasonable measures to do so. They monitor my Services for potential vulnerabilities and attacks.
Choices
You have several choices available when it comes to information about you:
Limit the information that you provide: You can choose not to provide your information when interacting with this website. Please keep in mind that if you do not provide this information, certain features of my Services — for example, commenting in posts or the payments feature — may not be accessible.
Limit access to information on your mobile device: Your mobile device operating system should provide you with the option to discontinue my ability to collect stored information or location information via WordPress mobile apps.
Opt out of marketing communications: You may opt out of receiving promotional communications from ,e. Just follow the instructions in those communications or let me know.
Set your browser to reject cookies: You can usually choose to set your browser to remove or reject browser cookies before using Automattic’s websites (including malvarezphd!), with the drawback that certain features of Automattic’s websites may not function properly without the aid of cookies.
Your Rights
If you are located in certain parts of the world, including California and countries that fall under the scope of the European General Data Protection Regulation (aka the “GDPR”), you may have certain rights regarding your personal information, like the right to request access to or deletion of your data.
European General Data Protection Regulation (GDPR)
If you are located in a country that falls under the scope of the GDPR, data protection laws give you certain rights with respect to your personal data, subject to any exemptions provided by the law, including the rights to:
Request access to your personal data;
Request correction or deletion of your personal data;
Object to our use and processing of your personal data;
Request that we limit our use and processing of your personal data; and
Request portability of your personal data.
You also have the right to make a complaint to a government supervisory authority.
California Consumer Privacy Act (CCPA)
The California Consumer Privacy Act (“CCPA”) requires me to provide California residents with some additional information about the categories of personal information I collect and share, where I get that personal information, and how and why I use it.
The CCPA also requires me to provide a list of the “categories” of personal information I collect, as that term is defined in the law, so, here it is. In the last 12 months, Automattic collected the following categories of personal information from California residents, depending on the Services used:
Identifiers (like your name, contact information, and device and online identifiers);
Commercial information (your billing information and purchase history, for example);
Characteristics protected by law (for example, you might provide your gender as part of a research survey for us);
Internet or other electronic network activity information (such as your usage of their Services)
Geolocation data (such as your location based on your IP address);
Audio, electronic, visual or similar information (such as your profile picture, if you uploaded one);
Professional or employment-related information (for example, your company and team information if you are a Happy Tools user, or information you provide in a job application); and
Inferences we make (such as likelihood of retention or attrition).
You can find more information about what they collect and sources of that information in their privacy policy page.
I collect personal information for the business and commercial purposes described in the How and Why I Use Information section. And I share this information with the categories of third parties described in the Sharing Information section.
If you are a California resident, you have additional rights under the CCPA, subject to any exemptions provided by the law, including the right to:
Request to know the categories of personal information I collect, the categories of business or commercial purpose for collecting and using it, the categories of sources from which the information came, the categories of third parties I share it with, and the specific pieces of information I collect about you;
Request deletion of personal information I collect or maintain;
Opt out of any sale of personal information; and
Not receive discriminatory treatment for exercising your rights under the CCPA.
The CCPA & Personalized Advertising in Our Ads Program
Automattic’s mission is to democratize publishing and commerce, and that means making their Services accessible to as many people as possible. We show ads on some of our users’ sites as well as some of our own sites, and the revenue these ads generate lets us offer free access to some of our Services so that money doesn’t become an obstacle to having a voice. Our ads program also allows our users to earn revenue to support and grow their own sites. As part of our advertising program, we and our users do use cookies to share certain device identifiers and information about your browsing activities with our advertising partners, and those advertising partners may use that information to show you personalized ads on some of our users’ sites and some of our own.
The personal information we share includes online identifiers; internet or other network or device activity (such as cookie information, other device identifiers, and IP address); and geolocation data (approximate location information from your IP address). These disclosures may be considered a “sale” of information under the CCPA. We do not sell (or share) information through our ads program that identifies you personally, like your name or contact information. We don’t knowingly sell personal information of those under 16. Learn how you can opt out by going to California: Do Not Sell My Personal Information.
Contacting Me About These Rights
When you contact me about one of your rights under this section, I’ll need to verify that you are the right person before we disclose or delete anything. For example, if you are a user, I will need you to contact me from the email address associated with your account. You can also designate an authorized agent to make a request on your behalf by giving me written authorization. I may still require you to verify your identity with us.
Controllers and Responsible Companies
Automattic’s Services are worldwide. Different Automattic companies are the controller (or co-controller) of personal information, which means that they are the company responsible for processing that information, based on the particular service and the location of the individual using our Services.
Depending on the Services you use, more than one company may be the controller of your personal data. Generally, the “controller” is the Automattic company that entered into the contract with you under the Terms of Service for the product or service you use. In addition, Automattic Inc., our US-based company, is the controller for some of the processing activities across all of our Services worldwide.
The chart below explains the current controllers for processing your personal information. We use the term “Designated Countries” to refer to Australia, Canada, Japan, Mexico, New Zealand, Russia, and all countries located in Europe (including the UK and ROI).
How to Reach Me
If you have a question about this Privacy Policy, or you would like to contact us about any of the rights mentioned in the Your Rights section above, please contact me via email at malvarez@laflorsabia.com. This is the fastest way to get a response to your inquiry.
Other Things You Should Know (Keep Reading!)
Ads and Analytics Services Provided by Others
Ads appearing on any of my Services may be delivered by advertising networks. Other parties may also provide analytics services via our Services. These ad networks and analytics providers may set tracking technologies (like cookies) to collect information about your use of my Services and across other websites and online services. These technologies allow these third parties to recognize your device to compile information about you or others who use your device. This information allows me and other companies to, among other things, analyze and track usage, determine the popularity of certain content, and deliver ads that may be more targeted to your interests. Please note this Privacy Policy only covers the collection of information by Automattic and does not cover the collection of information by any third-party advertisers or analytics providers.
Third-Party Software and Services
If you’d like to use third-party plugins or embeds, WooCommerce Payments (powered by Stripe), WooCommerce extensions that enable services provided by third parties, or other third-party software or services, please keep in mind that interacting with them may mean providing information about myself (or my site visitors) to those third parties. For example, some third-party services may request or require access to my (my, my visitors’, or customers’) data via a pixel or cookie. Please note that when I use the third-party service or grant access, my and your data will be handled in accordance with the third party’s privacy policy and practices. I don’t own or control these third parties, and they have their own rules about information collection, use, and sharing, which you should review before using the software or services.
Visitors to Automattic’s Users’ Websites
They also process information about visitors to their users’ websites, on behalf of their users and in accordance with their user agreements. Users control the content posted on their sites, so any disputes regarding content on a user’s site should be made directly to the site owner, through their “contact us” page, at an email address they provide, or by leaving a comment on the site.
Privacy Policy Changes
Although most changes are likely to be minor, I may change my Privacy Policy from time to time. I encourage visitors to frequently check this page for any changes to its Privacy Policy. If I make changes, I will notify you by providing a notice (like adding a statement to my homepage or sending you a notification through email). Your further use of the Services after a change to my Privacy Policy will be subject to the updated policy.
Translation
Our Privacy Policy was originally written in English (US). We may translate it into other languages. For example:
Spanish:
In the event of a conflict between a translated version of our Privacy Policy and the English version, the English version will control.
That’s it! Thanks for reading.
Marcela 