GDPR Privacy Policy

Last updated: 08th February 2026

1) Who we are

Data Controller: ColibrinoCrafts
Owner: Silvia Weaver
Email: hello@colibrinocrafts.com
Website: www.colibrinocrafts.com
Business address: Takacs-Letai Szilvia 4130 Derecske, Hungary

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect and use your information when you visit our website or subscribe to our emails.

2) What data we collect

Depending on how you interact with us, we may collect:

A) Data you provide

  • Email address (required to subscribe)

  • Name (optional, if you provide it)

  • Any information you share with us by email (if you contact us)

B) Technical data
When you use our website, some technical data may be processed to ensure the site works properly and securely, such as:

  • device/browser type, operating system

  • approximate location derived from IP (country/region level)

  • server log information (e.g., date/time of access, requested page, error logs)
    We do not intentionally collect sensitive personal data.

3) Why we collect your data (purposes)

We use your data to:

  1. Deliver the free resource you requested (e.g., tracker, checklist, guide)

  2. Send email updates you subscribed to (tips, resources, new releases, offers)

  3. Manage and maintain our email list, including preventing abuse and keeping list quality

  4. Ensure website security and proper functioning (e.g., preventing fraud, diagnosing errors)

4) Legal basis (GDPR)

We process personal data under these legal bases:

  • Consent (Art. 6(1)(a) GDPR)
    When you sign up to receive a freebie or newsletter, you give consent to receive emails from us. You can withdraw your consent at any time.

  • Legitimate interests (Art. 6(1)(f) GDPR)
    We may process limited technical data to keep our website secure, prevent abuse, and ensure it functions properly. We consider this processing necessary and proportionate and we balance it against your rights.

5) Email subscriptions, double opt-in & proof of consent

We may use double opt-in, meaning you may receive a confirmation email to verify your address.
To demonstrate consent, our email provider may store:

  • the date/time of subscription confirmation

  • basic technical information associated with the subscription event (e.g., signup source)

6) Who receives your data (recipients / processors)

We do not sell your personal data.

We use trusted service providers to operate our website and email list. These providers act as processors (data processing on our behalf) or independent controllers (in certain cases).

Email marketing provider (processor):

  • MailerLite (UAB “MailerLite”) – email list management, forms, automations, and delivery.

Other possible recipients (depending on your interaction):

  • Hosting / website infrastructure providers (to serve the website and ensure security)

  • Domain / DNS provider (to manage domain records)

  • IT / security providers (to prevent abuse and ensure reliability)

  • Email provider (if you contact us by email, your email service and ours may process message data)

If you want a precise list of providers used for this specific website, contact us at hello@colibrinocrafts.com.

7) International transfers (outside the EU/EEA)

Some of our service providers may process data outside the EU/EEA. Where this occurs, we rely on appropriate safeguards, such as:

  • the European Commission’s Standard Contractual Clauses (SCCs), and

  • additional measures where necessary

You can request information about applicable safeguards by contacting us at hello@colibrinocrafts.com.

8) How long we keep your data (retention)

We keep your data only as long as needed for the purposes described:

  • Email subscription data: until you unsubscribe or request deletion

  • Customer support emails: as long as needed to handle your request and for recordkeeping (typically up to [X months/years], unless legal obligations require longer)

  • Technical logs/security records: typically for a limited period (e.g., [30 days]) unless required longer for security investigations

9) Cookies and local storage

Our website may use essential cookies or local storage to make forms work properly and remember basic preferences (for example, whether you dismissed a cookie notice).

We do not use marketing or analytics tracking cookies on this page unless we clearly inform you and request consent where required.

10) Your rights under GDPR

You have the right to:

  • Access your personal data

  • Rectify inaccurate data

  • Erase your data (“right to be forgotten”)

  • Restrict processing

  • Object to processing based on legitimate interests

  • Data portability

  • Withdraw consent at any time (this does not affect processing already carried out)

How to unsubscribe:
Every email contains an unsubscribe link. You can also contact us at hello@colibrinocrafts.com.

11) Complaints to a supervisory authority

If you are in the EU/EEA, you have the right to lodge a complaint with your local supervisory authority.
In Hungary, this is typically:
National Authority for Data Protection and Freedom of Information (NAIH).

12) Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when the latest changes were made.