Privacy Policy

This Privacy Policy explains how Mianaralife (“we,” “us,” “our”) collects, uses, stores, and protects information when you visit or use https://mianaralife.com/ (the “Website”).

We respect your privacy and are committed to handling personal information in accordance with applicable privacy and data-protection laws, including, where applicable, the European Union General Data Protection Regulation (“EU GDPR”), the United Kingdom General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, applicable United States privacy laws including the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), Canadian federal and provincial privacy laws including the Personal Information Protection and Electronic Documents Act (“PIPEDA”), Brazil’s General Data Protection Law (“LGPD”), Argentina’s Personal Data Protection Law No. 25,326, Japan’s Act on the Protection of Personal Information (“APPI”), and New Zealand’s Privacy Act 2020.

1. Who We Are

The Website is operated by:
Legal name / business name: Timea Erdélyi
Website: https://mianaralife.com/
Contact email: mianaralife@gmail.com

For purposes of applicable data-protection laws, the Website operator is the data controller or organization responsible for personal information processed through the Website, except where a third-party service independently determines the purposes and means of processing. If you have questions about this Privacy Policy or the handling of your personal information, you may contact us using the contact details above.

2. Information We Collect

We do not require visitors to create an account, register, or provide personal information merely to browse the Website. Depending on how you interact with the Website, we may process the following categories of information:

2.1. Information you voluntarily provide

If you use the contact/feedback form, you may provide:

  • the content of your message or feedback;
  • your name, if you choose to provide it;
  • your email address, if you choose to provide it; and
  • any other information you voluntarily include in your message.

Providing your name and email address is optional unless specifically indicated otherwise on the relevant form.

Please do not submit sensitive personal information, passwords, financial information, government identification numbers, health information, or other information that you do not want us to receive.

2.2. Technical information

When you visit a website, certain technical information may be processed automatically by the Website or its hosting and security infrastructure. Depending on the services used by the Website, this may include:

  • IP address;
  • browser and device type;
  • operating system;
  • approximate geographic information derived from an IP address;
  • referring website;
  • pages requested;
  • date and time of access;
  • technical logs and security information.

Some of this information may constitute personal data under applicable law, including the GDPR. We use such information only to the extent reasonably necessary for operating, securing, maintaining, and improving the Website and complying with applicable legal obligations.

2.3. Cookies and similar technologies

The Website uses cookies and similar technologies.

Cookies may be used for purposes such as:

  • essential Website functionality;
  • remembering your cookie preferences;
  • Website security;
  • analytics or performance measurement, if enabled;
  • social-media sharing functionality; and
  • other purposes specifically described in the Website’s cookie settings.

Where consent is legally required, non-essential cookies are not placed or activated until you have provided the appropriate consent. You can use the Website’s cookie consent/settings mechanism to accept, reject, or configure categories of cookies where available. You may also withdraw or change your cookie choices through the Website’s cookie settings mechanism. For users in the European Economic Area, cookies that require consent will be used only after the appropriate consent has been obtained. Consent must be capable of being withdrawn as easily as it was given. For more information about the specific cookies used by the Website, including their names, purposes, providers, and retention periods, please see our Cookie Settings.

3. Social Media Sharing

The Website includes social-media sharing functionality. Depending on the particular sharing plugin and configuration, interaction with a social-media sharing button may cause information to be transmitted to the relevant social-media provider. The relevant provider may process information such as your IP address, browser/device information, the page you are sharing, and information relating to your interaction with its service. The provider may also use cookies or similar technologies where applicable.
Where technically possible, social-media functionality is configured to minimize transmission of information before you actively interact with the relevant sharing functionality. Once you leave the Website or interact directly with a third-party social-media service, that service’s own privacy policy and terms apply.

Third-party social-media services used by the Website: Facebook, Instagram, X, YouTube.

4. How We Use Personal Information

We may use personal information for the following purposes:
1. To receive and respond to feedback or messages submitted through the contact form.
2. To communicate with you when you voluntarily provide contact information.
3. To process requests to access, correct, or delete personal information.
4. To operate, maintain, secure, and troubleshoot the Website.
5. To remember your cookie and privacy preferences.
6. To understand Website performance and usage, where applicable and where permitted.
7. To prevent fraud, abuse, spam, attacks, and other security threats.
8. To comply with legal obligations.
9. To establish, exercise, or defend legal claims where necessary.
10. To fulfill another purpose that is clearly disclosed to you at the time information is collected.

We do not use the personal information submitted through the contact form for advertising or sell it to advertisers.

5. Legal Bases for Processing under the GDPR

Where the GDPR applies, we process personal data only when a lawful basis exists. Depending on the circumstances, our legal bases may include:

Consent

We may process information based on your consent, including where consent is required for certain non-essential cookies or similar technologies. You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Legitimate interests

We may process limited information where this is necessary for our legitimate interests, such as:

  • maintaining and securing the Website;
  • preventing spam, fraud, and abuse;
  • responding to communications;
  • improving Website functionality; and
  • establishing, exercising, or defending legal claims.

When relying on legitimate interests, we consider and balance those interests against your rights and freedoms.

Legal obligation

We may process information where processing is necessary to comply with an applicable legal obligation.

6. Contact and Feedback Form

The Website provides a contact/feedback form. You may submit feedback without providing your name or email address if the form permits you to do so. If you voluntarily provide your name and/or email address, we may use that information to identify you and respond to your message. We do not use optional contact information submitted through the form for unrelated marketing purposes unless we separately obtain an appropriate legal basis and, where required, your consent.

6.1. Retention of contact-form submissions

Information submitted through the contact form is scheduled to be deleted every 90 days. You may also request deletion of your personal information at any time. When you make a valid deletion request, we will delete the relevant personal information within 30 days, subject to any information that we are legally required or permitted to retain.

Technical backups or security logs may, in limited circumstances, retain information for a longer period where immediate deletion is technically impracticable or where retention is necessary for security or legal purposes. Such information will not be retained longer than necessary.

7. Your Privacy Rights under the EU GDPR

If the GDPR applies to you, you may have the right to:

  • be informed about how your personal data is processed;
  • request access to your personal data;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to certain processing;
  • receive certain personal data in a portable, machine-readable format;
  • withdraw consent where processing is based on consent; and
  • object to certain forms of automated decision-making or profiling, where applicable.

The availability of these rights depends on the circumstances and applicable legal exceptions. You may exercise your rights by contacting us at:

Privacy contact: mianaralife@gmail.com

We may need to request reasonable information to verify the identity of the person making a request. We generally respond to GDPR rights requests within one month, unless an applicable legal extension applies. You also have the right to lodge a complaint with a competent data-protection supervisory authority in the European Union. You may contact the supervisory authority in the EU country where you live, work, or where you believe an infringement occurred.

8. U.S. Privacy Rights

U.S. privacy rights vary depending on the state in which you reside and whether the Website/operator is subject to the relevant state law. Where applicable, consumers may have rights concerning their personal information, including rights to:

  • know what personal information is collected;
  • access personal information;
  • request deletion;
  • request correction of inaccurate personal information;
  • obtain information about how personal information is used or disclosed;
  • opt out of certain sales or sharing of personal information;
  • opt out of certain targeted advertising;
  • limit certain uses of sensitive personal information where applicable; and
  • receive equal treatment for exercising applicable privacy rights.

We do not sell personal information.
We do not operate advertising on the Website.

If we engage in processing that constitutes a “sale,” “sharing,” targeted advertising, or another regulated activity under an applicable U.S. privacy law, we will provide the legally required disclosures and opt-out mechanisms.

9. California Privacy Rights

If you are a California resident and the CCPA/CPRA applies to the Website/operator, you may have rights including the right to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive non-discriminatory treatment for exercising applicable rights. California law also requires certain businesses to provide specific disclosures and mechanisms for exercising these rights. Because the CCPA/CPRA applies only to businesses meeting its statutory applicability requirements, this section applies to the extent the Website/operator is subject to those requirements.

9.1. Categories of information

Depending on your interaction with the Website, categories of information potentially processed may include:

  • identifiers, such as name and email address;
  • internet or other electronic network activity information, such as IP address and browsing information;
  • information voluntarily included in communications;
  • cookie or similar technology identifiers; and
  • other categories of information that you voluntarily provide.

9.2. Sources

Information may be obtained:

  • directly from you;
  • automatically from your browser or device;
  • from cookies and similar technologies; and
  • from service providers that operate Website infrastructure on our behalf.

9.3. Business purposes

Information may be used for:

  • operating the Website;
  • providing requested functionality;
  • responding to communications;
  • maintaining security;
  • preventing fraud and abuse;
  • analytics or performance measurement, where applicable;
  • complying with legal obligations; and
  • responding to privacy requests.

9.4. Sale and sharing

We do not sell your personal information for monetary consideration. We do not use your personal information for cross-context behavioral advertising on the Website. If this practice changes, this Privacy Policy will be updated and any legally required opt-out mechanism will be provided.

9.5. Exercising California rights

California consumers may submit privacy requests through:

Email: mianaralife@gmail.com
Website/contact form: https://mianaralife.com/contact/

We will process requests in accordance with applicable California law and may take reasonable steps to verify the identity of the requester.

10. Other U.S. State Privacy Laws

Several U.S. states have enacted comprehensive consumer privacy laws. These laws differ in their applicability thresholds, definitions, exemptions, rights, and obligations. Where an applicable state privacy law grants you rights beyond those described in this Privacy Policy, we will honor those rights as required by applicable law. We will not discriminate against you for exercising privacy rights that are legally available to you.

11. Children and Minors

The Website is not directed specifically to children. We do not knowingly collect personal information from children in circumstances where applicable law requires parental consent.

If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact us at: mianaralife@gmail.com

We will take appropriate steps to review and, where legally required, delete the information.

12. Explicit or Mature Content

Some poems, songs, or other creative content published on the Website may contain explicit, mature, or otherwise sensitive language or themes. Such content is identified or marked where appropriate. The presence of mature content does not mean that we intentionally collect sensitive personal information about visitors. Users should exercise their own discretion when accessing content that has been marked as explicit or mature.

13. Sharing Personal Information with Third Parties

We may use third-party service providers that process information on our behalf in connection with operating the Website.
These may include providers responsible for:

  • website hosting;
  • website security;
  • technical infrastructure;
  • contact-form functionality;
  • cookie-consent management;
  • analytics, if enabled; and
  • social-media sharing functionality.

We do not sell personal information to third parties.

We may disclose information where necessary to:

  • comply with applicable law or a valid legal request;
  • protect the rights, property, or safety of the Website, its operator, or others;
  • detect or prevent fraud, abuse, security incidents, or unlawful activity; or
  • establish, exercise, or defend legal claims.

13.1. Third-party service providers used by the Website

We use Bluehost as our website hosting provider. Bluehost provides the hosting infrastructure and technical services necessary to operate our website. In connection with providing these services, Bluehost may process and store information transmitted through or generated by our website, including technical information such as IP addresses, browser information, server logs, and other data necessary for website operation, security, and performance. For more information about how Bluehost handles personal information, please review Bluehost’s Privacy Policy.

14. International Data Transfers

Some third-party service providers may process information outside the European Economic Area, including in countries that may not provide the same level of data protection as EU member states. Where the GDPR applies and personal data is transferred outside the European Economic Area, we will use an appropriate lawful transfer mechanism where required, such as:

  • an adequacy decision of the European Commission;
  • Standard Contractual Clauses; or
  • another legally recognized transfer mechanism.

Specific international transfers depend on the third-party services actually used by the Website.

15. Data Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction. These measures may include appropriate access controls, secure communications, security monitoring, software updates, and other measures appropriate to the nature of the information and the risks involved.
However, no Internet transmission or electronic storage system can be guaranteed to be completely secure.

16. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

In particular:

  • Contact/feedback submissions are scheduled for deletion every 90 days.
  • A user may request deletion earlier.
  • Valid personal-data deletion requests are handled within 30 days, subject to applicable legal or technical exceptions.
  • Cookie retention periods depend on the individual cookie and are described in the Website’s cookie settings/cookie policy.
  • Technical and security logs may be retained for periods determined by the relevant hosting, security, and infrastructure requirements.

17. Cookies and Your Choices

You can manage your cookie preferences through the Website’s cookie-consent/settings mechanism.
Depending on the technology used, you may be able to:

  • accept all cookies;
  • reject non-essential cookies;
  • select individual categories;
  • change your preferences later; and
  • withdraw previously provided consent.

Essential cookies may remain active where they are necessary for the Website to function or to provide a service you have requested. You may also control cookies through your browser settings. Disabling certain cookies may affect Website functionality.

18. No Advertising

The Website currently contains no advertising content and does not use personal information for advertising purposes. If advertising, behavioral advertising, sponsored content, advertising networks, or related tracking technologies are introduced in the future, this Privacy Policy and the Website’s cookie disclosures will be updated as required before or when such processing begins.

19. Automated Decision-Making and Profiling

We do not intentionally use personal information collected through the contact form to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals. We do not intentionally create user profiles for advertising purposes.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • the Website;
  • the services we use;
  • applicable privacy laws;
  • our data-processing practices; or
  • security and operational requirements.

The “Last Updated” date at the top of this Privacy Policy indicates when it was most recently revised. Where required by law, we will provide additional notice of material changes.

21. Contact Us

If you have questions about this Privacy Policy, want to exercise a privacy right, or want to request deletion of personal information, please contact:

Timea Erdélyi
Email: mianaralife@gmail.com
Website: https://mianaralife.com/

For deletion requests, please clearly state that you are requesting deletion of your personal information. We aim to process valid deletion requests within 30 days, subject to applicable legal exceptions.

22. EU Supervisory Authorities

If you are located in the European Economic Area and believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the data-protection supervisory authority responsible for your country or place of residence, work, or the alleged infringement. A list of EU data-protection authorities is available through the European Data Protection Board.

23. United Kingdom – UK GDPR and Data Protection Act 2018

If you are located in the United Kingdom, the processing of your personal data may be subject to the UK GDPR and the Data Protection Act 2018, depending on the circumstances. Under the UK GDPR, we must have an appropriate lawful basis for processing personal data. Depending on the circumstances, our lawful basis may include:

  • your consent;
  • performance of a contract with you or taking steps at your request before entering into a contract;
  • compliance with a legal obligation;
  • our legitimate interests or those of a third party, provided that these interests are not overridden by your fundamental rights and freedoms; or
  • protection of your vital interests or those of another person, where applicable.

Where consent is required for non-essential cookies or similar technologies, we will request the appropriate consent.

23.1. Rights of Individuals in the United Kingdom

Where the UK GDPR applies, you may have the right to:

  • receive information about the processing of your personal data;
  • request access to your personal data;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of your personal data in certain circumstances;
  • request restriction of processing in certain circumstances;
  • object to certain processing;
  • request data portability in certain circumstances;
  • withdraw consent where processing is based on consent; and
  • object to certain automated decision-making and profiling in certain circumstances.

The availability of these rights depends on the circumstances and statutory exceptions.

You may exercise your rights by contacting:

Privacy contact: mianaralife@gmail.com

We will respond to valid requests without undue delay and generally within one month, subject to any extension permitted by applicable law.

23.2. UK Supervisory Authority

The UK’s data-protection supervisory authority is the Information Commissioner’s Office (ICO).

If you believe that your personal data has been processed in violation of applicable data-protection law, you have the right to complain to the ICO.

Information about the ICO and its complaint procedures is available through the ICO’s official website.

24. Canada – Privacy Laws

If you are located in Canada, the processing of your personal information may be subject to Canadian federal or provincial privacy laws depending on our activities, the location of the processing, and your province or territory of residence.

Canada does not have a single law officially called the “Canada GDPR.”

Applicable legislation may include the Personal Information Protection and Electronic Documents Act (PIPEDA) and, depending on the circumstances, substantially similar provincial privacy legislation.

Where PIPEDA or another applicable Canadian privacy law applies, we will handle personal information in accordance with the applicable legal requirements.

24.1. Collection of Personal Information in Canada

Providing your name and email address through the Website’s contact/feedback form is optional. We collect and use personal information only for purposes that a reasonable person would consider appropriate in the circumstances and, where required, for purposes identified at or before the time of collection.

Information submitted through the contact form may primarily be used to:

  • respond to inquiries;
  • communicate with you;
  • process privacy requests;
  • maintain the security and operation of the Website; and
  • comply with legal obligations.

We do not sell personal information.

24.2. Consent

Where applicable Canadian law requires consent for the collection, use, or disclosure of personal information, we will obtain consent in accordance with the applicable requirements. Where legally permitted, consent may be withdrawn. If you withdraw consent, we will cease further processing based on that consent unless another lawful basis permits or requires continued processing. Where applicable law requires consent for non-essential cookies or similar technologies, we will use an appropriate consent mechanism.

24.3. Access and Correction

Depending on the applicable Canadian privacy legislation, you may have the right to:

  • request access to personal information we hold about you;
  • request correction of inaccurate or incomplete personal information;
  • request information about the purposes for which your personal information is collected or used; and
  • in certain circumstances, request deletion of your personal information.

Privacy requests may be submitted to:

Email: mianaralife@gmail.com

We may take reasonable steps to verify the identity of the person making a request.

24.4. Retention of Personal Information

Information submitted through the contact/feedback form is scheduled to be deleted every 90 days. You may request deletion before this period. When a valid deletion request is received, the relevant personal information will be deleted within 30 days, unless applicable law requires or permits us to retain it.

Information contained in backups, technical logs, or other technical systems may remain for a limited period where immediate deletion is technically impracticable. Such information will not be retained longer than necessary.

24.5. International Transfers

Some service providers used to operate the Website may process personal information outside Canada or outside the European Economic Area. Where personal information is transferred outside Canada, we will apply appropriate safeguards as required by applicable Canadian privacy legislation. Third-party service providers may also have their own privacy policies governing their processing of personal information.

25. Privacy Rights Across Different Jurisdictions

The Website is accessible to an international audience. Your privacy rights may depend on:

  • the country or state in which you reside;
  • the laws applicable to the Website operator;
  • the type of personal information being processed;
  • the purpose for which the information is processed; and
  • the third-party services used by the Website.

Where more than one privacy law applies, we will seek to provide the rights and protections required under the applicable laws. If the law of a particular jurisdiction imposes additional obligations or provides additional rights beyond those described in this Privacy Policy, we will comply with those requirements to the extent they apply to the Website or its operator.

26. Privacy Requests

Individuals located in the EU/EEA, United Kingdom, Canada, California, or other jurisdictions may have the right to submit requests concerning their personal information under the privacy laws applicable to them. You may submit a request by contacting:

Email: mianaralife@gmail.com

Where possible, please include:

  • the privacy right you wish to exercise;
  • the personal information to which your request relates; and
  • a method by which we can contact you.

We may request reasonable information to verify your identity. We will process requests within the time period required by the applicable jurisdiction’s privacy laws.

27. Brazil – Lei Geral de Proteção de Dados Pessoais (LGPD)

If you are located in Brazil, the processing of your personal data may be subject to Brazil’s Lei Geral de Proteção de Dados Pessoais (LGPD), Law No. 13,709/2018.

The LGPD regulates the processing of personal data and establishes rights for data subjects. The Brazilian National Data Protection Authority (ANPD) is the national authority responsible for the LGPD.

27.1. Personal Data Processing

Where the LGPD applies, we will process personal data in accordance with an applicable legal basis under the LGPD.

Depending on the circumstances, processing may be based on:

  • consent;
  • compliance with a legal or regulatory obligation;
  • performance of a contract or preliminary procedures;
  • exercise of rights in legal, administrative, or arbitration proceedings;
  • protection of life or physical safety;
  • legitimate interests, where applicable;
  • credit protection; or
  • another lawful basis recognized by the LGPD.

27.2. Personal Data Processing

Subject to applicable legal conditions and exceptions, individuals may have rights including:

  • confirmation that personal data is being processed;
  • access to personal data;
  • correction of incomplete, inaccurate, or outdated data;
  • anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data;
  • data portability, subject to applicable regulation and commercial and industrial secrets;
  • deletion of personal data processed on the basis of consent, subject to legal exceptions;
  • information about public and private entities with which personal data has been shared;
  • information about the possibility of refusing consent and the consequences of refusal;
  • withdrawal of consent through a free and facilitated procedure;
  • objection to certain processing where the LGPD permits such objection; and
  • rights concerning certain decisions made solely through automated processing.

You may exercise applicable rights by contacting:

Privacy contact: mianaralife@gmail.com

Where appropriate, requests may also be addressed to the person or channel designated for data-protection matters by the Website operator.

27.3. International Transfers

Where personal data of Brazilian data subjects is transferred internationally, we will apply an appropriate transfer mechanism or safeguard required by the LGPD and applicable ANPD regulations.

28. Argentina – Personal Data Protection Law No. 25,326

If you are located in Argentina, the processing of your personal data may be subject to Law No. 25,326 on the Protection of Personal Data, together with its applicable regulations.

Argentina’s data-protection framework provides rights concerning information, access, rectification, updating, and deletion of personal data. The Agencia de Acceso a la Información Pública (AAIP) is the relevant supervisory authority.

28.1. Information and Access Rights

Individuals may have the right to know:

  • whether personal data concerning them is being processed;
  • the purpose for which it is processed;
  • who is responsible for the relevant database or processing;
  • where the information was obtained; and
  • how the information is used.

Individuals may request access to personal information held about them.

Under the Argentine framework, the right of access is generally available free of charge at intervals of no less than six months, unless a legitimate interest exists that justifies an additional request.

28.2. Correction, Updating and Deletion

Individuals may request:

  • correction of inaccurate data;
  • updating of outdated information;
  • deletion of personal data where applicable; and
  • appropriate blocking or review of disputed information where applicable.

We will process such requests in accordance with the time periods and requirements imposed by applicable Argentine law.

28.3. Consent

Where consent is required under applicable Argentine law, we will seek consent after providing appropriate information concerning the purpose of the processing and relevant recipients.

You may contact us regarding your Argentine privacy rights at:

Privacy contact: mianaralife@gmail.com

29. Japan – Act on the Protection of Personal Information (APPI)

If you are located in Japan, the processing of your personal information may be subject to Japan’s Act on the Protection of Personal Information (APPI).

The Personal Information Protection Commission of Japan (PPC) is the independent authority responsible for supervising the appropriate handling of personal information under the APPI.

29.1. Handling of Personal Information

Where the APPI applies, we will handle personal information in accordance with applicable APPI requirements, including requirements concerning:

  • specifying and appropriately using purposes of use;
  • appropriate acquisition of personal information;
  • security-control measures;
  • appropriate provision of personal data to third parties; and
  • handling of requests concerning retained personal data.

The APPI establishes requirements for businesses handling personal information and protects individual rights and interests.

29.2. Rights and Requests

Subject to applicable conditions and exceptions under Japanese law, individuals may have rights concerning their retained personal data, including requests relating to:

  • disclosure;
  • correction, addition, or deletion;
  • cessation of use or processing;
  • cessation of provision to third parties; and
  • other rights recognized under the APPI.

Requests may be submitted to:

Privacy contact: mianaralife@gmail.com

We may take reasonable steps to verify the identity of the requester before responding.

29.3. International Transfers

Where personal data subject to the APPI is transferred to a third party outside Japan, we will apply the transfer requirements and safeguards required by the APPI.

Japan has established international data-transfer arrangements with the European Union and the United Kingdom, including supplementary rules concerning personal data transferred from those jurisdictions under applicable adequacy arrangements.

30. New Zealand – Privacy Act 2020

If you are located in New Zealand, the processing of your personal information may be subject to the Privacy Act 2020.

The Act establishes Information Privacy Principles (IPPs) governing the collection, storage, use, disclosure, and access to personal information. The Office of the Privacy Commissioner oversees the New Zealand privacy framework.

30.1. Collection and Use of Personal Information

We seek to collect personal information only for lawful purposes connected with our functions or activities and only where the information is necessary for those purposes.

When collecting personal information directly from you, we seek to provide appropriate information about:

  • why the information is being collected;
  • who may receive it;
  • whether providing the information is voluntary or required; and
  • what may happen if the information is not provided.

30.2. Access and Correction

Under the Privacy Act 2020, individuals generally have rights to:

  • request access to personal information held about them; and
  • request correction of inaccurate personal information.

We will process applicable requests in accordance with the Privacy Act 2020.

Privacy contact: mianaralife@gmail.com

30.3. Security and Retention

We take reasonable steps to protect personal information against loss, unauthorized access, use, modification, disclosure, or other misuse. We retain personal information only for as long as required for the purposes for which it was collected or as otherwise required or permitted by law.

The Website’s standard contact-form retention period is 90 days, subject to legal, security, backup, or other applicable exceptions.

You may request deletion before this period.

When a valid deletion request is received, the relevant personal information will be deleted within 30 days, unless applicable law requires or permits us to retain it.
Information contained in backups, technical logs, or other technical systems may remain for a limited period where immediate deletion is technically impracticable. Such information will not be retained longer than necessary.

30.4. Disclosure Outside New Zealand

Where personal information is disclosed or transferred outside New Zealand, we will take account of the requirements applicable under the Privacy Act 2020, including the rules governing disclosure of personal information outside New Zealand.

30.5. Indirect Collection

New Zealand’s Privacy Act 2020 also contains requirements concerning the collection of personal information from sources other than the individual concerned.

Where applicable, we will comply with the relevant notification requirements and exceptions under the Act. Information Privacy Principle 3A, concerning indirect collection, came into force on May 1, 2026.

31. Applicable Privacy Laws

This Privacy Policy may be subject to the following privacy laws, where applicable:

  • European Union: General Data Protection Regulation (EU) 2016/679 (“EU GDPR”)
  • United Kingdom: UK GDPR and Data Protection Act 2018
  • United States – California: California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”)
  • Canada: Personal Information Protection and Electronic Documents Act (“PIPEDA”) and applicable provincial privacy legislation
  • Brazil: Lei Geral de Proteção de Dados Pessoais (“LGPD”), Law No. 13,709/2018
  • Argentina: Personal Data Protection Law No. 25,326 and applicable regulations
  • Japan: Act on the Protection of Personal Information (“APPI”)
  • New Zealand: Privacy Act 2020

These laws do not all apply to every visitor or every processing activity. Applicability depends on the circumstances, including the Website operator, the nature of the processing, the services offered, and the jurisdiction of the individual.

This Privacy Policy is general information and does not constitute legal advice.

32. Consent to our Privacy Policy

By using our website, you hereby consent to our Privacy Policy.

This Privacy Policy was last updated on September 23, 2026.