Privacy policy

Who is responsible for your data

Cleverly operates barelyblushing.com under the name Barely Blushing and is the data controller for the processing described here. For questions about personal data or to exercise your rights, email hello@barelyblushing.com.

Website hosting and security

Netlify hosts this website. Cloudflare provides our domain registration and DNS services. When you request a page or file, the services delivering it process technical information such as your IP address, request time, requested URL, browser information and response status. This is used to deliver the site, investigate faults and prevent abuse. Fonts and website images are served as site assets rather than loaded from a third-party font service.

Our legal basis for essential delivery and security processing is our legitimate interest in operating a reliable, secure website. Technical records are retained for operational and security needs under the providers’ applicable retention arrangements; an incident may require relevant records to be kept until it is resolved. SeeNetlify’s privacy policy andCloudflare’s privacy policy.

Newsletter and checklist delivery

Signing up is optional. Our signup form sends your email address directly to Kit (formerly ConvertKit), which manages the subscriber list, confirmation emails, newsletter delivery and the checklist download configured in the confirmation email. Kit also processes technical submission and delivery information, subscription status, and confirmation and unsubscribe records. Depending on email tracking settings, it may record email opens and link clicks; these are separate from website analytics consent.

We use your consent to send the newsletter. Confirming your subscription agrees to occasional skincare routines, product guides and self-care emails. You can withdraw that consent through the unsubscribe link in any newsletter. You do not need to accept website analytics to subscribe, and subscribing does not grant analytics consent.

We keep your active subscription while you wish to receive emails. Unsubscribing stops marketing emails but does not necessarily erase the subscriber record. Limited suppression and consent records may be kept to honour your opt-out, demonstrate consent or resolve a complaint, based on our legitimate interests and applicable obligations. You can separately request deletion. Records no longer needed for these purposes should be deleted; provider backups may remain until their normal expiry. ReadKit’s privacy policy anddata processing addendum.

Optional Google Analytics

If you accept analytics cookies, Google Analytics measures page visits and clicks to the ASEA shop. It receives page and referrer information, browser and device information, cookie identifiers, and the product and placement of a shop link clicked. Google processes connection information, including your IP address, to provide the service. Our custom shop-click events exclude email form entries, URL query strings and fragments, and purchase details. A shop click is not a purchase confirmation.

The legal basis is your consent. The Google tag does not load before you accept analytics or while your stored choice is to decline. Our implementation keeps advertising consent denied and disables Google Signals and advertising personalization. You can change your choice through “Cookie preferences” in the footer whenever analytics is enabled. Withdrawal stops future tracking and clears accessible Google Analytics cookies; it does not retrospectively delete data already collected.

• Analytics cookies: _ga and _ga_* identify visits and sessions. Our tag configures a 180-day lifetime without automatic renewal on each visit.
• Your privacy choice: bb-analytics-consent-v1 is stored locally in your browser. The choice is valid for 180 days, after which we ask again. It is used to remember your choice, not to measure browsing.

Cookie expiry is separate from data retention in Google Analytics. Event and user-level records follow the property’s retention setting; aggregated reports can remain available longer. Contact us for information about retained data or a deletion request. SeeGoogle’s privacy policy andits explanation of analytics retention.

When you email us

We process your email address, message and any information you choose to include so we can answer your enquiry. Our basis is our legitimate interest in responding to readers and, for privacy requests, meeting our legal obligations. Gmail, provided by Google, is the inbox service we use to receive and store correspondence. Google processes the messages and associated delivery information to provide that service. See Google’s privacy policy. We keep correspondence for as long as needed to resolve the enquiry and any related complaint or legal obligation. Please do not send sensitive health information that is unnecessary for your enquiry.

Shop links and purchases

Shop links include an associate identifier so ASEA can attribute eligible purchases. They take you to ASEA’s website, which handles its own cookies, accounts, payments, orders and privacy notice. This website does not collect payment details or receive an automated purchase confirmation. The associate may separately receive order or commission information through ASEA’s associate account; that is separate from this website’s analytics.

Service providers and international processing

The providers described above process data to deliver their services. Where required, transfers must be covered by an applicable adequacy decision or safeguards such as European Commission standard contractual clauses. Kit’s data processing addendum describes its transfer mechanisms; the other providers publish their arrangements in their privacy and data processing terms. Contact us to request details or a copy of applicable safeguards.

Your rights

Depending on the processing and applicable conditions, you can request access, correction, deletion, restriction or portability of your data. You can object to processing based on legitimate interests and withdraw consent at any time without affecting earlier lawful processing. We may need proportionate information to verify a request. We normally respond within one month; if a permitted extension is needed, we will explain why within that month.

Contact hello@barelyblushing.com. We do not use website data for automated decisions producing legal or similarly significant effects on you.

Changes to this notice

We update this notice when our services or data practices change. The date above shows the latest revision.