Privacy Policy

Effective date: April 21, 2026 · faithhavenjournal.com · Compliant with GDPR (EU 2016/679) and LOPDGDD (Spain)

This Privacy Policy describes how Faith Haven Journal (“we,” “us,” or “our”), operated at faithhavenjournal.com, collects, uses, and protects the personal data of users in accordance with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights Guarantee (LOPDGDD).

1. Data Controller

The Data Controller responsible for your personal data is:

If you have questions about how your data is processed, contact us at the email above.

2. What Data We Collect

  • Contact data: Name and email address provided when subscribing to our newsletter or contacting us via forms.
  • Usage data: IP address, browser type, pages visited, time on site, and referring URLs — collected automatically via cookies and analytics tools.
  • Purchase data: If you purchase digital products, your payment is processed by a third-party provider (Stripe). We do not directly store payment card information.
  • Cookies: See our Cookie section below.

3. Legal Basis for Processing (GDPR Article 6)

  • Consent (Art. 6.1.a): For newsletter subscriptions and non-essential cookies. You may withdraw consent at any time.
  • Contractual necessity (Art. 6.1.b): To deliver digital products you have purchased.
  • Legitimate interests (Art. 6.1.f): For website analytics to improve our content and services, where those interests are not overridden by your rights.
  • Legal obligation (Art. 6.1.c): Where required by applicable law.

4. How We Use Your Data

  • To send newsletters, devotionals, and updates you have consented to receive
  • To deliver digital products you have purchased
  • To respond to your inquiries
  • To analyze website usage and improve our content
  • To comply with legal obligations

5. Cookies and Tracking

  • Essential cookies: Required for the website to function. No consent needed.
  • Analytics cookies: Google Analytics — used to understand site usage. Requires your consent.
  • Marketing/Pinterest cookies: Pinterest Tag — used for audience tracking and ad attribution. Requires your consent.

Under GDPR, we are required to obtain your active consent before placing non-essential cookies. We use a cookie consent banner that allows you to accept or reject each category. You can change your cookie preferences at any time via the cookie settings link in the footer.

6. Data Sharing and Third Parties

We do not sell your personal data. We may share data with the following third-party processors:

  • Email providers (e.g., Mailchimp, ConvertKit): For newsletter delivery. Bound by GDPR-compliant data processing agreements.
  • Analytics providers (e.g., Google Analytics): For usage statistics. Google is certified under EU-US Data Privacy Framework.
  • Hosting providers: For website operation. Bound by data processing agreements.
  • Payment processors (Stripe): For digital product transactions.

We require all third-party processors to implement appropriate security measures and to process data only on our documented instructions.

7. International Data Transfers

Some of our third-party providers are based outside the European Economic Area (EEA), including the United States. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent mechanisms.

8. Your Rights Under GDPR

  • Right of access (Art. 15): Request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16): Request correction of inaccurate data.
  • Right to erasure (Art. 17): Request deletion of your personal data (“right to be forgotten”).
  • Right to restriction of processing (Art. 18): Request that we limit how we use your data.
  • Right to data portability (Art. 20): Receive your data in a structured, commonly used format.
  • Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing.
  • Right to withdraw consent: Withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact us at info@faithhavenjournal.com. We will respond within 30 days.

9. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — AEPD):

  • Website: www.aepd.es
  • Address: C/ Jorge Juan, 6, 28001 Madrid, Spain

You may also lodge a complaint with the supervisory authority of your country of residence within the EU.

10. Data Retention

  • Newsletter subscribers: Until you unsubscribe or request deletion.
  • Purchase records: As required by Spanish and EU tax law (generally 5–7 years).
  • Analytics data: Anonymized after 14 months (Google Analytics default).

11. Children’s Privacy

Our website is not directed to children under 14 (the minimum age under Spanish law for consent to data processing). We do not knowingly collect data from children. If you believe we have inadvertently collected data from a child, contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by updating the effective date at the top of this page and, where required by GDPR, by obtaining fresh consent.

13. Contact

For any data protection queries: info@faithhavenjournal.com