Last updated: May 25, 2018
Who I am
Canadian Budget Binder is run by me, Mr.CBB and on occasion I have Nicola and Katrina write for CBB!
What personal data I collect and why I collect it
Information collected via contact forms is used only by me to communicate with you regarding your inquiries. No one else receives this information.
When you sign up for my mailing list, your name and email are kept by my mailing list provider, Mailerlite, for the purpose of sending newsletters via email.
Some of the links on this site are ads, partners, or affiliate links. This means I might make a small commission if you buy from the linked sites. Data-collection details coming soon.
Cookies are used by my site to give information to Google Analytics. You may opt out when you visit; you can also clear your browser cache of all data.
Who I share your data with
I do not share names or email addresses sent via contact forms with any other party.
If you sign up for my mailing list, Mailerlite will have your name and email address.
Google Analytics only retains info about visitors, pages viewed, etc. GA does not collect any info that could identify you personally.
WordPress itself does not share any data with anyone.
How long I retain your data
My newsletter service will retain your name and email until you ask me to have you “forgotten,” which takes 30 days to happen. Email me directly (you can use my contact form) and ask me to “forget” you from the mailing list. When I remove you, I am able to completely remove your data. From Mailerlite: “When you use the Delete function in the subscriber section of MailerLite, the information is not entirely removed. The reason for this is simple. If that person later resubscribes, his or her history is still there so you don’t have to rebuild their profile. MailerLite created a new feature called Forget that completely wipes a person’s data from our system. This function was built specifically for GDPR compliance of the right to be forgotten. When you choose the option, Forget, the subscriber’s data will be completely removed. Everything will be permanently deleted including reports, clicks, profile data, etc.” Once initiated, data is entirely gone within 30 days.
Google Analytics keeps data on site traffic up to 14 months, the shortest retention period available (but remember, site stats do not have any info about who you are personally). While my site does not give Google any personal info about you, other websites might have at some point…you can find out more & use tools to manage your Google data here: https://privacy.google.com/your-data.html.
How your data is protected
I use the plugin Wordfence to keep my site and data secure. I also use two-factor authentication for my domain and hosting.
While I do not personally keep any data on any visitors, some plugins that I use do keep data. These plugins are all GDPR-compliant (or about to be), and have provided detailed privacy information:
- Yoast SEO: Collects website data only, no personal info: find out more here.
- Wordfence: Wordfence is a security plugin that helps guard against hacks and data breaches. They are fully GDPR compliant.
- Woocommerce: Owned by Automattic; privacy info here.
- Akismet: Owned by Automattic; privacy info here.
What data breach procedures I have in place
If my mailing list is ever compromised, I will notify every subscriber and let them know what data was breached, to the best of my knowledge.