GDPR

This page explains how SavorSaga (“we,” “us,” “our”) complies with the General Data Protection Regulation (GDPR) and related privacy laws for visitors in the European Economic Area (EEA), the United Kingdom (UK), and Switzerland (where applicable).

Website: savorsaga.com
Owner/Author: Grace Anderson
Contact: contact@savorsaga.com

If you are located outside the EU/UK, you can still use this page to understand your privacy choices and request support.

1) Data Controller

For GDPR purposes, SavorSaga is the Data Controller for personal data processed through this Website.

Contact for privacy requests: contact@savorsaga.com

2) Personal Data We Collect

Depending on how you use the Website, we may collect:

  • Contact data: email address, name (if you subscribe or contact us)
  • Message data: content you send via forms or email
  • Comment data: comment text and metadata (IP address, browser user agent)
  • Technical data: IP address, device type, browser, operating system
  • Usage data: pages viewed, clicks, time on page, referrer URL
  • Cookie data: cookie identifiers and similar tracking technologies

We do not intentionally collect special category data (e.g., health data). Please do not submit sensitive personal information through comments or forms.

3) Why We Process Your Data (Purposes)

We process personal data to:

  • Provide and maintain the Website
  • Respond to your inquiries
  • Send newsletters/updates (if you opt in)
  • Moderate comments and prevent spam
  • Analyze traffic and improve performance
  • Display ads and measure ad performance (if enabled)
  • Track affiliate referrals (if enabled)
  • Protect the Website (security, fraud prevention)
  • Comply with legal obligations

4) Legal Bases for Processing (GDPR Article 6)

We rely on one or more of the following legal bases:

  • Consent (Art. 6(1)(a))
    For example: newsletter signups; non-essential cookies where required.
  • Contract (Art. 6(1)(b))
    When you request services such as responding to your message or delivering a subscription you asked for.
  • Legitimate Interests (Art. 6(1)(f))
    For example: improving the Website, basic analytics, security, and preventing fraud/spam—balanced against your rights.
  • Legal Obligation (Art. 6(1)(c))
    When we must comply with laws or valid legal requests.

5) Cookies & Consent (Cookie Banner)

We may use cookies and similar technologies. Where required by law, we request consent for non-essential cookies (for example, advertising and certain analytics).

You can manage cookies by:

  • Using the cookie consent banner (if available)
  • Adjusting your browser settings to block/delete cookies

Blocking cookies may affect Website functionality.

6) How Long We Keep Your Data (Retention)

We retain personal data only as long as necessary for the purposes described, including:

  • Email inquiries: kept as long as needed to resolve your request and maintain records
  • Newsletter subscriptions: kept until you unsubscribe
  • Analytics data: retained per provider settings (often 14–26 months, depending on configuration)
  • Comments: retained unless you request deletion (and where deletion is appropriate)

We may retain limited data longer when required for legal, security, or fraud-prevention reasons.

7) Data Sharing (Processors & Third Parties)

We do not sell your personal data.

We may share data with trusted third parties (“processors”) who help us run the Website, such as:

  • Website hosting and security providers
  • Email newsletter platforms (if used)
  • Analytics providers
  • Advertising networks (if used)
  • Affiliate networks (if used)
  • Spam prevention tools (for comments/forms)

These providers may process data only under our instructions and for the purposes described.

8) International Transfers

Some service providers may process data outside the EEA/UK. When this happens, we use appropriate safeguards such as:

  • EU Commission Standard Contractual Clauses (SCCs) (and UK addendum where applicable)
  • Other lawful transfer mechanisms permitted by GDPR/UK GDPR

You can request more details by emailing contact@savorsaga.com.

9) Your GDPR Rights

If you are in the EU/UK, you have the right to:

  1. Access – request a copy of your personal data
  2. Rectification – correct inaccurate or incomplete data
  3. Erasure – request deletion of your data (“right to be forgotten”)
  4. Restrict processing – limit how we use your data
  5. Data portability – receive your data in a portable format (where applicable)
  6. Object – object to processing based on legitimate interests
  7. Withdraw consent – at any time, where processing is based on consent
  8. Lodge a complaint – with your local supervisory authority

To exercise your rights, email contact@savorsaga.com with the subject: “GDPR Request”.

10) How to Make a GDPR Request

Please include:

  • Your name (optional but helpful)
  • The email you used on our Website (newsletter/contact)
  • What you want to do (access/delete/correct/object, etc.)
  • Any relevant details (e.g., comment link, approximate date)

We may ask for information to verify your identity before completing the request.

11) Marketing Emails

If you subscribe to our newsletter, you can unsubscribe anytime using the link in any email. You can also email us at contact@savorsaga.com to request removal.

12) Automated Decision-Making

We do not use your personal data for solely automated decision-making that produces legal or similarly significant effects on you.

13) Children’s Data

SavorSaga is not intended for children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, contact us so we can remove it.

14) Contact

If you have questions about GDPR or your privacy rights, contact:

Grace Anderson
SavorSaga (savorsaga.com)
Email: contact@savorsaga.com