Privacy Policy
Last updated: 02 October 2025
At https://mamaofthreehearts.com/ (“we”, “our”, “us”), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit https://mamaofthreehearts.com/ (the “Website”).
Scope: This policy applies worldwide. As we are established in the European Union, we process personal data in accordance with the EU General Data Protection Regulation (GDPR) and, where applicable, comparable laws in other jurisdictions.
1) Who We Are (Data Controller)
- Controller: https://mamaofthreehearts.com
- Contact: Please use our Contact Form for all privacy inquiries and to exercise your rights.
2) What Data We Collect
We collect the minimum data necessary to operate our Website and services.
A. Data you provide to us
- Contact Form submissions: your name and message; you may choose to share other details.
- Newsletter sign‑up (if enabled): your email address and preferences.
- Comments (if enabled): name (display name), comment content, and timestamp.
B. Data collected automatically
- Usage/technical data: IP address, device and browser type, operating system, referral URLs, pages viewed, time spent, and similar diagnostic data.
- Cookies and similar technologies: identifiers that help us run the site, remember preferences, analyze traffic, and attribute affiliate commissions. See our Cookie Policy for details and controls.
C. Third‑party data via integrations
- Amazon Associates (affiliate links): when you click an Amazon affiliate link, Amazon may place cookies and collect information to attribute qualifying purchases. Amazon acts as an independent controller for this processing. See Amazon’s own privacy notices for details.
- Analytics (if enabled): tools like Google Analytics collect aggregated usage data to help us improve the Website.
- Email service provider (if enabled): stores your email and delivery metrics when you subscribe.
3) Purposes and Legal Bases (GDPR Art. 6)
We process personal data for the following purposes and legal bases:
| Purpose | Examples | Legal Basis |
| Operate and secure the Website | load pages, prevent abuse/fraud, maintain logs | Legitimate interests (Art. 6(1)(f)) |
| Respond to messages | replying to Contact Form inquiries | Legitimate interests (Art. 6(1)(f)) and/or Contract where you request information (Art. 6(1)(b)) |
| Send newsletters (if enabled) | email updates you opted into | Consent (Art. 6(1)(a)) |
| Analytics & performance | understanding traffic and improving content | Consent (non‑essential cookies) (Art. 6(1)(a)); Legitimate interests for strictly necessary processing |
| Affiliate marketing attribution | tracking qualifying purchases from Amazon links | Consent for affiliate cookies (Art. 6(1)(a)); Amazon processes as an independent controller under its own legal bases |
| Legal compliance | record‑keeping, responding to lawful requests | Legal obligation (Art. 6(1)(c)) |
4) Cookies and Tracking
We use cookies and similar technologies for essential site functions, analytics, and affiliate attribution. Non‑essential cookies load only after your consent via our Cookie Banner. You can change or withdraw consent anytime by using the cookie settings option available on our site (via the banner or the floating manage cookies button).. For detailed categories, providers, and retention, see our separate Cookie Policy.
5) Disclosures to Third Parties
We share data only with necessary service providers who act under contracts and appropriate safeguards, or with independent controllers where noted.
- Service providers (processors): hosting, security (e.g., DDoS/CDN), analytics (if enabled), email delivery (if enabled).
- Independent controllers: Amazon (affiliate program) and any other providers that determine their own purposes/means of processing.
- Legal reasons: to comply with laws, enforce our terms, or protect rights, privacy, safety, or property.
We do not sell personal data.
6) International Data Transfers
Some providers may process data outside the EU/EEA. Where this occurs, we rely on recognized safeguards such as adequacy decisions or Standard Contractual Clauses (SCCs), and implement supplemental measures where appropriate.
7) Data Retention
We keep personal data only as long as necessary for the purposes described in this Privacy Policy:
- Contact Form messages: kept for up to 12 months after we have responded, then deleted unless needed for legal reasons.
- Newsletter data (if enabled): kept until you unsubscribe. We also keep a minimal record to make sure we do not email you again if you opt out.
- Analytics and cookies: kept according to the periods set by each provider and listed in our Cookie Policy.
- Server logs / security data: normally kept for 90 days, unless longer retention is required for security or legal reasons.
When the retention period ends, we securely delete or anonymize the data.
8) Your Rights (GDPR)
Subject to conditions and exceptions in law, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data (“right to be forgotten”)
- Restrict processing
- Object to processing based on legitimate interests
- Data portability (for data you provided by consent/contract)
- Withdraw consent at any time (e.g., newsletter or cookies) without affecting prior processing
To exercise your rights, please submit a request via our Contact Form. You also have the right to lodge a complaint with your local Data Protection Authority (DPA).
9) Children’s Privacy
Our content is intended for a general audience and not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data, please contact us via the Contact Form and we will take appropriate steps to delete such data.
10) Security
We use appropriate technical and organizational measures to protect personal data (e.g., encryption in transit, access controls). No method of transmission or storage is 100% secure; we strive to protect your information but cannot guarantee absolute security.
11) Third‑Party Links
Our Website may contain links to third‑party sites (including Amazon). We are not responsible for their privacy practices. Please review their privacy notices.
12) Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice (e.g., a banner or email for substantive changes).
13) How to Contact Us
For any questions about this Privacy Policy or our handling of personal data, please use our Contact Form