Privacy Policy

Photo by Susan Fonseca

Effective Date: August 29, 2026
Last Updated: August 29, 2026

This Privacy Policy describes how personal information is collected, used, disclosed, retained, and protected in connection with Susan Fonseca (the “Website”) at https://www.susanfonseca.com, including when visitors subscribe to the newsletter, download reader materials, purchase products, contact the Website, or otherwise interact with the services provided through it.

For purposes of this Privacy Policy, “User,” “visitor,” and “you” refer to individuals who access or interact with the Website. “Personal information” refers to information that identifies or can reasonably be associated with an individual.

1. Information Collected

Personal information is collected in accordance with the principle of data minimization and is limited to information reasonably necessary for the purposes described in this Privacy Policy.

Depending on how the Website is used, the following categories of information may be collected.

Information Provided by the User
  • First Name
  • Last Name (optional)
  • Email Address
  • Billing Address
  • Shipping Address
  • Transaction Information
  • Information voluntarily provided through contact forms or email correspondence
Information Collected Automatically

Limited technical information may be collected automatically, including:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Pages visited
  • Referral sources
  • Website usage information through cookies and analytics tools.

2. How Information Is Collected

Personal information may be collected when a User:

  • Subscribe to my newsletter.
  • Download a free story, lead magnet, or bonus content.
  • Purchase books, merchandise, or services.
  • Contact me through my website or email.
  • Interact with social media features embedded on my Website.
  • Certain technical information may also be collected automatically through cookies and similar technologies.

3. How Personal Information Is Used

Personal information is processed only for legitimate purposes related to the operation of the author business and the provision of requested services.

Newsletter Delivery
Personal information may be used to deliver newsletters, release announcements, promotional communications, exclusive content, and author updates where the User has provided the required consent.

Digital Delivery
Personal information may be used to deliver ebooks, audiobooks, bonus content, and reader magnets.

Sales Processing
Personal information may be used to process orders and payments, fulfill purchases, and provide customer support.

Website Operations
Personal information and technical information may be used to maintain, secure, and improve the Website and its services.

Analytics
Technical and usage information may be used to understand how visitors interact with the Website and to improve the user experience.

4. Legal Basis for Processing

For Users located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with similar privacy requirements, personal information is processed on one or more of the following legal bases, as applicable:

  • Consent: Where the User has provided consent for a specific processing activity, including newsletter subscriptions and other activities for which consent is required.
  • Performance of a contract: Where processing is necessary to complete a purchase or provide a service requested by the User.
  • Legal obligations: Where processing is necessary to comply with applicable legal requirements, including tax and accounting obligations.
  • Legitimate interests: Where processing is necessary for legitimate business purposes, such as maintaining and securing the Website, provided that such interests are not overridden by the rights and freedoms of the User.

Where processing is based on consent, consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Third-Party Service Providers

Personal information is not sold, rented, or traded to third parties for their own marketing purposes.

To operate the Website and the associated author business, personal information may be processed by trusted third-party service providers. Depending on the services active on the Website, these may include:

  • Kit – email communications and newsletter management.
  • BookFunnel – delivery of ebooks, audiobooks, and reader magnets.
  • PayPal and/or other payment processors – payment processing.
  • WooCommerce – ecommerce management, if direct sales are enabled on the Website.
  • BookVault or other print fulfillment providers – printing and shipping physical products, if direct physical sales are enabled.
  • Website hosting and analytics providers – Website operation, security, and analytics.

These providers may process personal information on my behalf and only to the extent necessary to provide their services. Each provider is responsible for maintaining its own privacy and security practices.

6. International Data Transfers

Certain third-party service providers may process or store personal information in countries other than the User’s country of residence, including the United States and countries within the European Union.

Where applicable, reasonable measures are taken to ensure that international transfers of personal information are carried out using appropriate safeguards required by applicable privacy laws.

7. Cookies and Analytics

The Website may use cookies and similar technologies for purposes including:

  • Maintaining Website functionality.
  • Remembering User preferences.
  • Understanding how visitors use the Website.
  • Improving Website performance and user experience.
  • Measuring the effectiveness of communications and content.

Cookies may be disabled through the User’s browser settings. However, disabling cookies may affect the functionality of certain portions of the Website.

If additional analytics or advertising technologies are implemented in the future, this Privacy Policy will be updated accordingly.

8. Social Media Features

The Website may include social media features such as sharing buttons, embedded posts, or links to social media platforms.

These features may collect information such as an IP address, the page being visited, and cookies necessary for their operation.

Interactions with these features are governed by the privacy policies of the respective social media providers.

9. Data Retention

Personal information is retained only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy or as required by applicable law.

Newsletter Subscribers

Newsletter subscriber information is retained until the User unsubscribes or requests deletion, unless there is another lawful basis for retaining the information.

Customers

Transaction and related information is retained for as long as necessary to fulfill applicable legal, tax, accounting, and business obligations.

Contact Inquiries

Correspondence and related information may be retained for as long as reasonably necessary to respond to an inquiry and maintain appropriate business records.

10. Protection of Personal Information

Reasonable administrative, technical, and organizational safeguards are implemented to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction.

However, no method of electronic transmission or storage is completely secure, and absolute security cannot be guaranteed.

11. Data Breach Notification

If a security breach involving personal information becomes known, reasonable steps will be taken to investigate and mitigate the incident and, where required by applicable law, to notify affected individuals and relevant authorities.

12. Privacy Rights

Depending on the User’s location and applicable law, the following rights may apply:

  • The right to access personal information.
  • The right to correct inaccurate or incomplete personal information.
  • The right to request deletion of personal information.
  • The right to restrict or object to certain processing activities.
  • The right to withdraw consent where processing is based on consent.
  • The right to request portability of personal information where applicable.

Newsletter subscriptions may be cancelled at any time by using the Unsubscribe link included in newsletter emails.

Users located in the European Economic Area or the United Kingdom may also have the right to lodge a complaint with the applicable data protection authority.

13. Exercising Privacy Rights

Requests to exercise applicable privacy rights may be submitted using the contact information provided below.

Additional information may be requested when reasonably necessary to verify the identity of the person making a request before certain requests are fulfilled.

Reasonable efforts will be made to respond to privacy-related requests within the time periods required by applicable law.

14. Children’s Privacy

The Website is not directed to children under the age of 13, and personal information is not knowingly collected from children under the age of 13.

If it becomes known that a child under the age of 13 has provided personal information, reasonable steps will be taken to delete the information.

15. Third-Party Websites

The Website may contain links to third-party websites, retailers, social media platforms, and service providers.

The Website is not responsible for the privacy practices or content of third-party websites. Users are encouraged to review the privacy policies of third-party websites before providing personal information.

16. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time.

Changes will be posted on this page with an updated Last Updated date. The revised Privacy Policy will take effect on the date it is posted.

17. Data Controller and Contact Information

Data Controller: Susan Fonseca
Email: info@susanfonseca.com
Official Website: https://www.susanfonseca.com
Mailing Address: Aptdo Postal 62-2300 Curridabat, San José, Costa Rica 11801

Susan Fonseca is the data controller responsible for the processing of personal information described in this Privacy Policy.

Questions regarding this Privacy Policy or requests concerning applicable privacy rights may be submitted using the contact information provided above.