Privacy Policy
What this site collects, why, and what you can ask me to do with it.
Last updated: 30 September 2026
Who is responsible
This website is run by Federica Caimi (Design Your Wellbeing), who is the data controller for the personal data described here. For any privacy question or request, write to hello@designyourwellbeing.com.
The short version
- This site sets no cookies of its own and uses no analytics, advertising or tracking tools.
- If you write to me through the contact form, I use your details only to reply to you.
- If you subscribe to the newsletter, your email address is handled by Substack, which sends it.
- If you leave a review, it is published only after I approve it, and only with your first name.
- Some pages load content from other services (Substack, Spotify, Google Fonts), which receive basic technical data such as your IP address.
What is collected, and why
Visiting the site
The site is hosted by Netlify. As with any website, when you visit a page your browser sends technical information such as your IP address, browser type, the page requested and the time of the request. Netlify processes this to deliver the site and keep it secure. Legal basis: legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR).
Contact form
When you use the form on the contact page, the name, email address, subject and message you enter are processed through Netlify Forms, stored in my Netlify account and forwarded to my inbox. I use them only to read and answer your message. I keep them for as long as our conversation needs, and then delete them. Legal basis: your request to be contacted and my legitimate interest in replying (Art. 6(1)(b) and (f) GDPR).
Reviews
When you use the form on the reviews page, your first name, email address, the topic you choose and your review are processed through Netlify Forms, stored in my Netlify account and forwarded to my inbox. I read every review before deciding whether to publish it. If I publish it, only your first name, the topic and the text of your review appear on this site; your email address is never published and is used only if I need to ask you something about your review. You can ask me at any time to edit or remove your review. Legal basis: your consent, given with the checkbox on the form (Art. 6(1)(a) GDPR).
Newsletter
The newsletter sign-up box is provided by Substack. When you subscribe, your email address goes directly to Substack, which stores it and sends the newsletter on my behalf; I can see the list of subscribers in my Substack account. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time with the link at the bottom of every email. Substack's own privacy policy also applies.
Podcast player
The podcast page includes a Spotify player. When that page loads, your browser connects to Spotify, which receives your IP address and may set its own cookies. See Spotify's privacy policy.
Fonts
The typefaces on this site are loaded from Google Fonts, so your browser connects to Google's servers, which receive your IP address. See Google's privacy policy.
Links to other sites
Links to Amazon, Spotify, Apple Podcasts and Substack take you to those services, where their own privacy policies apply.
Cookies
This site does not set any cookies of its own. The embedded Substack sign-up box and Spotify player may set cookies on behalf of those services; you can block or delete them in your browser settings.
Who else processes your data
- Netlify, Inc. (United States): hosting, contact form and review form. Privacy policy
- Substack, Inc. (United States): newsletter.
- Spotify AB (Sweden): podcast player.
- Google: web fonts.
- My email provider, which delivers messages to my inbox.
I do not sell or rent your personal data, and I do not share it with anyone else for marketing.
Transfers outside the EU
Some of these providers are based in the United States. Where your data is transferred there, it is protected by the safeguards those providers use, such as the EU–U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.
Your rights
Under the GDPR you can ask me to:
- tell you what personal data I hold about you and give you a copy;
- correct data that is wrong or incomplete;
- delete your data;
- restrict or object to how it is used;
- send your data to you, or to someone else, in a common format;
- withdraw a consent you have given, at any time.
Write to hello@designyourwellbeing.com and I will answer within one month. You also have the right to lodge a complaint with the data protection authority in the country where you live or work.
Changes
If the way this site handles personal data changes, I will update this page and the date at the top.