NAMASTE & CABERNET

Privacy Policy

Last updated: August 18, 2026

This Privacy Policy explains how personal data is processed when you visit the Namaste & Cabernet website, send me a message, book a conversation, or join the early reader list for my upcoming book.

1. Data Controller

The data controller responsible for processing personal data through this website is:

Pogácsás Emese
Operating under the brand name Namaste & Cabernet

For questions about this Privacy Policy or the processing of your personal data, please contact:

Email: privacy@namasteandcabernet.com

2. What Personal Data I Process and Why

Contact Form

If you send me a message through the contact form, I process:

  • Your name
  • Your email address
  • The content of your message
  • Technical and security data needed to submit the form, such as IP address, browser information, and the result of an automated bot check

The form submission is handled by a Cloudflare Pages Function. Cloudflare Turnstile is used to distinguish legitimate submissions from automated abuse. If the submission passes the security check, Postmark sends the message to my contact inbox. The website is not intended to keep a separate database copy of the submission.

This information is used to respond to your inquiry, protect the form from abuse, and maintain communication related to your request.

Legal basis: Legitimate interest in responding to inquiries and protecting the website from abuse (Article 6(1)(f) GDPR), and, where applicable, steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).

Appointment Booking

Appointment scheduling is handled through cal.eu, a service provided by Cal.com, Inc.

The Cal booking script is loaded by the website and may receive technical information such as your IP address, browser, device information, and referring page. If you open the scheduler or book a conversation, Cal.com also processes the information needed to arrange and manage the appointment, which may include:

  • Your name
  • Your email address
  • Appointment details
  • Your time zone
  • Any information you choose to provide during booking

I receive the booking information so that I can prepare for and conduct the scheduled conversation.

Legal basis: Steps taken at your request before entering into a contract (Article 6(1)(b) GDPR). Technical processing needed to provide and secure the booking tool is based on legitimate interest (Article 6(1)(f) GDPR).

Website Operation and Security

The website is built with Astro and hosted on Cloudflare Pages. When you visit it, Cloudflare may process technical request data needed to deliver and secure the site, such as:

  • IP address
  • Browser and device information
  • Requested page, date, and time
  • Referral and diagnostic information
  • Security signals used to detect malicious or automated traffic

This information is used to provide the website, maintain its security and reliability, and diagnose technical problems.

Legal basis: Legitimate interest in operating, securing, and maintaining the website (Article 6(1)(f) GDPR).

Website Analytics

If you consent to analytics, the website uses Google Analytics 4 directly through the Google tag.

Google Analytics may process:

  • Pages visited and interactions with the site
  • Session information
  • Approximate geographic location
  • Browser and device information
  • Referring website or campaign information
  • A pseudonymous client identifier stored in Google Analytics cookies

Form field values, booking details, and early reader signup details are not intended to be sent to Google Analytics. Google Signals and advertising features are intended to remain disabled.

Google Analytics does not load and no analytics data is sent before you explicitly accept analytics cookies. Rejecting analytics, or making no choice, means that analytics remains disabled.

Legal basis: Consent (Article 6(1)(a) GDPR).

Early Reader List

If you join the early reader list, I process:

  • Your email address
  • Your first and last name, if requested in the signup form
  • Subscription date and time
  • Consent record and signup source
  • Delivery, unsubscribe, and engagement information generated by MailerLite, where those features are enabled

MailerLite is used to collect and manage subscriptions, send book-related emails, record consent, handle unsubscribes, and measure email performance where configured.

You can withdraw your consent at any time by using the unsubscribe link in an email or by contacting me directly. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Legal basis: Consent (Article 6(1)(a) GDPR).

The website uses a small number of cookies or similar browser-storage technologies.

Essential storage may be used to remember your privacy choice and support website security. It does not require consent where it is strictly necessary for those purposes.

Google Analytics cookies are optional and are only activated after you explicitly accept analytics. The main Google Analytics cookie is _ga; Google may also set related cookies used to distinguish visits and sessions. If you reject analytics or do not make a choice, the Google Analytics tag remains blocked and these cookies are not set by the website.

You can change or withdraw your analytics choice at any time through the cookie settings link on the website. Withdrawing consent stops future analytics collection and removes the Google Analytics cookies that the website can access.

Third-party services such as Cal.com and Cloudflare Turnstile may use their own technical storage or collect security signals as described in their privacy information.

4. Analytics Configuration

Google Analytics 4 is configured for limited, consent-based website measurement:

  • The Google tag is blocked until analytics consent is granted.
  • Google Signals and advertising features are disabled.
  • Form contents, email addresses, booking details, and other directly identifying information must not be sent to Google Analytics.
  • Query parameters that could contain personal data are excluded or redacted from analytics page URLs.
  • User-level and event-level data retention is set to two months.
  • Granular location and device data collection is disabled for visitors in the EEA, at minimum.

Google Analytics is provided by Google. Google may process analytics data on servers outside Hungary and the EEA under the safeguards described in its applicable terms and data-processing documentation.

You can read more in Google’s privacy information and Google Analytics data safeguards.

5. Email Marketing and Subscriber Management

MailerLite processes early reader subscriber data on my behalf. For customers in the EEA, UK, or Switzerland, the provider is MailerLite Limited, Ireland.

MailerLite may use cookies, unique identifiers, web beacons, and similar technologies in subscription forms and emails. Depending on the settings enabled, this can produce delivery and engagement information such as bounces, opens, or link clicks.

You can unsubscribe at any time using the link at the end of each email. A limited suppression record may be retained after unsubscribing so that you are not accidentally added back to the list.

You can read MailerLite’s Privacy Policy.

6. Service Providers

I use the following providers to operate the website and deliver its services:

  • Cloudflare — website hosting through Cloudflare Pages, server-side form handling through Pages Functions, security, and bot detection through Turnstile
  • Postmark — transactional delivery of contact-form messages
  • Google Workspace / Google Groups — receipt and storage of messages delivered to my contact inbox
  • Cal.com, Inc. — appointment scheduling through cal.eu
  • Google Analytics — optional, consent-based website analytics
  • MailerLite Limited — early reader signup forms, subscriber-list management, and email delivery

These providers process personal data only for the purposes needed to deliver their services, subject to their terms, privacy notices, and data-processing agreements. Some providers also process limited data for their own security, compliance, and service-improvement purposes as described in their notices.

7. International Data Transfers

Some providers or their sub-processors may process personal data outside Hungary or the European Economic Area. This may apply to Cloudflare, Postmark, Google, Cal.com, and some of their sub-processors. MailerLite states that subscriber data for its current service is hosted in the Netherlands, while it may still use approved sub-processors for related services.

Where personal data is transferred outside the EEA, the relevant provider’s contractual safeguards are used, such as an adequacy decision, the European Commission’s Standard Contractual Clauses, or another transfer mechanism permitted by applicable data-protection law.

The precise transfer route can depend on the provider, its sub-processors, and the account configuration in use at the time.

8. Data Retention

Personal data is retained only for as long as necessary for the purposes described in this Privacy Policy.

Typical retention periods are:

  • Contact inquiries and the resulting email correspondence: up to two years after the last communication, unless a longer period is needed for an ongoing engagement, legal claim, or statutory obligation
  • Contact-form security and delivery logs: according to the configured retention periods of Cloudflare and Postmark, and only as long as needed for security, troubleshooting, and reliable delivery
  • Appointment information: up to two years after the appointment, unless it becomes part of an ongoing business relationship or must be kept for legal purposes
  • Business records and invoices: for the periods required by applicable accounting and tax law
  • Early reader subscriber data: until you unsubscribe or withdraw consent; limited consent and suppression records may be kept where necessary to demonstrate compliance and respect your opt-out
  • Google Analytics user-level and event-level data: two months
  • Website hosting and security logs: according to the relevant Cloudflare service and account configuration

9. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your personal data
  • Request restriction of processing
  • Object to processing based on legitimate interests
  • Request data portability where applicable
  • Withdraw consent where processing is based on consent

To exercise any of these rights, please contact privacy@namasteandcabernet.com.

I will respond within the timeframes required by applicable law.

10. Right to Lodge a Complaint

If you believe your personal data has been processed unlawfully, you may lodge a complaint with the competent supervisory authority.

In Hungary:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
1055 Budapest, Falk Miksa utca 9–11.
Phone: +36 1 391 1400
Email: ugyfelszolgalat@naih.hu
Website: https://naih.hu

11. Automated Decision-Making

Cloudflare Turnstile performs an automated security assessment to help determine whether a form submission is likely to come from a person or an automated system. This assessment is used only to protect the website and does not produce legal or similarly significant effects.

I do not otherwise use automated decision-making or profiling that produces legal or similarly significant effects.

12. Children

This website and the services offered through it are intended for adults and professionals. I do not knowingly collect personal data from children under the age of 16.

13. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in the website, service providers, legal requirements, or business practices. The date at the top of this page indicates the latest version.