Privacy policy (Datenschutzerklärung)
I take your privacy seriously and collect as little personal data as possible. This page explains, in simple words, what happens with your data when you use hollymohanye.org.
1. Who is responsible
Holly Mohanye, registered in Nigeria with the Corporate Affairs Commission (CAC)
Owner: Ogechukwu Holly Mohanye
Email: hello@hollymohanye.org
I live and work in both Germany and Nigeria and serve clients in both countries. This policy therefore follows the EU General Data Protection Regulation (GDPR) and the Nigeria Data Protection Act 2023 (NDPA).
2. No tracking cookies
This website does not use advertising cookies, Google Analytics, Facebook Pixel or any other tracking tools. Your browser only remembers a few settings you choose yourself, such as your language, light or dark mode, your currency, posts you liked and your last eBook payment reference. These stay on your device, are only used to make the website work as you asked, and you can delete them at any time in your browser settings (§ 25 (2) no. 2 TDDDG).
3. Hosting
The website is hosted by Netlify, Inc., San Francisco, USA. When you open a page, your browser sends technical data such as your IP address, the date and time, the page you opened and your browser type. Netlify needs this to deliver the website and keep it safe, and keeps it in server logs for a short time. Legal basis: Art. 6 (1) (f) GDPR (my legitimate interest in a secure, working website). Data can be processed in the USA; this is covered by the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
4. Visitor statistics
To understand which pages are useful, I count visits with my own simple counter. For each page view it saves: the date and time, the page, the country and city worked out from your internet connection, the website you came from (for example Google or Instagram), your device type (phone, tablet or computer) and the website language. Your IP address is not saved, no cookies are used and nothing is stored on your device. The data cannot be linked to you as a person and is deleted after 120 days. Legal basis: Art. 6 (1) (f) GDPR.
5. Fonts
All fonts are stored on this website itself. No connection is made to Google Fonts.
6. Contact by WhatsApp, email or phone
If you contact me, I use your message and contact details only to answer you and to deliver what you asked for. WhatsApp is a service of WhatsApp Ireland Limited (Meta); when you tap a WhatsApp button, WhatsApp's own privacy policy applies. Legal basis: Art. 6 (1) (b) GDPR for enquiries about my services, otherwise Art. 6 (1) (f) GDPR.
7. Blog subscription
If you subscribe to my blog, I save your name, email address and language through Netlify Forms, and send you a welcome email and occasional updates. Emails are sent with Resend (Resend, Inc., USA). Legal basis: your consent, Art. 6 (1) (a) GDPR. You can unsubscribe at any time by replying "unsubscribe" or emailing me, and I will delete your details.
8. Comments and likes
When you write a comment, I save your name, your comment, the post and the date. Comments are only published after I approve them. Likes are counted without saving who liked a post. Comments and likes are stored with Google Firebase (Google Ireland Limited, Dublin, Ireland; data may be processed by Google LLC in the USA). When you open a blog post, your browser loads Firebase from Google servers, which receive your IP address. Legal basis: Art. 6 (1) (a) GDPR for comments (you choose to send them) and Art. 6 (1) (f) GDPR for likes. You can ask me to delete your comment at any time.
9. Payments
Online payments are handled by Flutterwave (Flutterwave Inc., USA, and its partners in Nigeria). The Flutterwave payment window only loads when you tap a pay button. Flutterwave receives the data you enter, such as your name, email and payment details. I never see your full card details. Payments by bank transfer are handled by your bank and mine. Legal basis: Art. 6 (1) (b) GDPR (to fulfil our contract) and Art. 6 (1) (c) GDPR (tax law).
10. Booking a session
Sessions are booked with Cal.com (Cal.com, Inc., USA). When you follow a booking link, Cal.com receives the details you enter, such as your name, email and notes, and sends you a confirmation with the video call link. Legal basis: Art. 6 (1) (b) GDPR.
11. eBook orders
When you buy an eBook, I save your name, email, phone number if given, the amount, the payment reference and how often you downloaded your copy. Your name, email and order number are printed in your personal copy to protect it from illegal sharing. Your receipt and download link are emailed to you with Resend. Order data is kept for as long as tax law requires, usually 8 to 10 years. Legal basis: Art. 6 (1) (b) and (c) GDPR.
12. Shopping and logistics orders
For shopping and shipping orders I use the details you give me, such as your name, phone number, delivery address and the items, only to buy, pack and send your items. I share your delivery details with the shipping company only as far as needed. Legal basis: Art. 6 (1) (b) GDPR.
13. Links to social networks and shops
Buttons for Instagram, Facebook, YouTube, LinkedIn, TikTok and online shops are simple links. No data is sent to these services until you tap a link. After that, their own privacy policies apply.
14. Google sign in for the admin page
The private admin page uses Google sign in only for me as the owner. Visitors do not need to sign in.
15. Your rights
You have the right to know what data I have about you (Art. 15 GDPR), to correct it (Art. 16), to have it deleted (Art. 17), to limit its use (Art. 18), to receive it in a common format (Art. 20) and to object to its use (Art. 21). You can withdraw any consent at any time for the future (Art. 7 (3)). Just email me at hello@hollymohanye.org.
If you live in Nigeria, you have the same rights under the Nigeria Data Protection Act 2023 (sections 34 to 38).
You can also complain to a data protection authority. In Germany: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), www.ldi.nrw.de. In Nigeria: the Nigeria Data Protection Commission (NDPC), ndpc.gov.ng.