1. Who We Are

Our website address is: https://www.menopausingpodcasts.com (“Menopausing Podcasts”, “we”, “us”, “our”). MenopausingPodcasts.com is registered in the Netherlands under Chamber of Commerce (KvK) number 34292383 with its business seat in Amsterdam, Netherlands.
Data-Protection Officer (DPO): empower@menopausingpodcasts.com
EU Representative (Art. 27 GDPR): Same as above (hosting and establishment inside the EU).
UK Representative (UK GDPR Art. 27): Same as above.
California Designated Contact (CCPA §999.315): empower@menopausingpodcasts.com

2. Scope of This Policy
This Privacy Policy explains how we collect, use, share, store and protect personal data when you:
visit or interact with the Site;
subscribe to our newsletter or podcasts;
leave comments, upload content, or otherwise engage with community features;
contact us or participate in surveys, contests or promotions.

3. Legal Bases for Processing (Art. 6 GDPR)
Purpose
Legal Basis
Typical Examples
Site operation, comment functionality, podcast delivery

Performance of a contract
Providing episodes, account creation
Analytics, service improvement

Legitimate interests
Aggregate traffic stats, debug errors
Marketing emails & optional cookies

Consent
Newsletter sign-up checkbox, cookie banner
Compliance, fraud prevention

Legal obligation & Legitimate interests
Maintaining records, protecting our service
Where consent is the basis, you may withdraw it at any time (see § 10).

4. Information We Collect
4.1 Information You Provide Directly
Comments – text, chosen display name, email, IP address, user agent (for spam detection).
Account data – username, email, password hash, optional profile details.
Media uploads – images or audio you choose to share (stripping EXIF recommended).
Communications – emails, survey responses, or support tickets.

4.2 Information Collected Automatically
Cookies & similar tech (see § 7).
Log data – IP, browser type, date/time, referring pages, error logs.
Analytics identifiers (e.g. pseudonymised Google Analytics or Matomo id).
Device & usage data – operating system, screen resolution, clickstream events.

4.3 Information from Third Parties
Social platforms or podcast directories only when you voluntarily link or share.

5. How We Use Your Information
Publish and moderate podcast episodes and related content.
Enable community features (comments, likes, shares).
Send opt-in newsletters, episode alerts, or marketing messages.
Conduct analytics, research and improve the Site.
Detect, investigate and prevent spam, abuse, fraud or security incidents.
Comply with applicable laws, tax and accounting requirements.

6. Who We Share Your Data With
Service providers (hosting in the Netherlands/EU, CDN, email delivery, analytics) under data-processing agreements.
Gravatar – only the email hash you provide (see § 4.3).
Authorities when legally required (e.g. court order, GDPR Art. 23).
Prospective buyers in case of a corporate transaction (with safeguards).
We do not sell personal information for monetary value (CCPA “sale”).

7. Cookies & Tracking Technologies
Essential cookies (site security, comment log-in) load by default.
Analytics/marketing cookies load only after explicit consent via our banner in compliance with the EU ePrivacy Directive and (where relevant) the UK PECR.
You can control cookies in your browser settings or through our Cookie Preference Center.
See the full cookie list and retention periods in our Cookie Notice.

8. Embedded Content & External Links
Articles on this Site may include embedded content (e.g. YouTube videos, Spotify iframe players, social media posts). Such content behaves as if you visited the third-party site and may set cookies, collect data or monitor your interaction. Review the privacy practices of any third-party services you interact with.

9. International Transfers
We primarily store data on servers located in the Netherlands. If we transfer data outside the European Economic Area (EEA) – for example, to U.S.-based email or analytics providers – we rely on:
Adequacy decisions (Art. 45 GDPR), or
Standard Contractual Clauses (Art. 46 GDPR) plus supplementary safeguards, or
Your explicit consent (Art. 49 (1)(a) GDPR).

10. Your Rights
Jurisdiction
Main Rights & How to Exercise
EU/EEA & UK (GDPR/UK GDPR)
Access, rectification, erasure (“right to be forgotten”), restriction, data portability, object, withdraw consent. Email empower@menopausingpodcasts.com.
California (CCPA/CPRA)
Right to know, delete, correct, opt-out of “sale”/“sharing”, limit use of sensitive personal data, no retaliation. Call toll-free <number> or use our web form.
Brazil (LGPD)
Confirm processing, access, correct, anonymize or delete, data portability, information about sharing, revoke consent.
Canada (PIPEDA)
Access or correct personal information, challenge compliance.
Children (<13 U.S.)
We do not knowingly collect data from children under 13; contact us to delete such data (COPPA).

We will respond within one month (GDPR) or 45 days (CCPA) unless extensions apply.

11. Data Retention
Comments & metadata – retained indefinitely for follow-up moderation.
Registered accounts – kept until you delete the account or 3 years after inactivity.
Newsletter subscribers – until you unsubscribe or we learn the address is inactive.
Server logs – 12 months (security) unless incidents require longer retention.
Statutory obligations (tax, accounting) may require retention for up to 7 years.

12. Data Security
We apply appropriate technical and organisational measures, including HTTPS/TLS encryption, firewalls, regular software updates, least-privilege access, and encrypted backups. No method of transmission or storage is 100 % secure, but we strive for industry-standard protection.

13. Automated Decision-Making / Profiling
We do not engage in automated decision-making with legal or similarly significant effects (Art. 22 GDPR). Any analytics profiling for podcast recommendations is non-intrusive and based on aggregate, pseudonymised data.

14. Contact, Complaints & Supervisory Authority
General & DPO inquiries: empower@menopausingpodcasts.com
Postal: Amsterdam, Netherlands.
If you believe we have violated data-protection laws, you may lodge a complaint with:
Autoriteit Persoonsgegevens (NL): https://autoriteitpersoonsgegevens.nl
Your local supervisory authority in the EEA/UK, or
California Attorney General for U.S. residents.

15. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change accordingly. Material changes will be announced via a notice on the Site or direct communication where legally required. Continued use of the Site signifies acceptance of the revised Policy.