Privacy Policy

1. Data Controller

The data controller responsible for your personal data is Migraine Off (hereinafter "we", "us", or "our website").

Contact email: hello.migraineoff@gmail.com

2. What Data We Collect

We collect the following personal data:

• Contact form: Name, email address, and message content
• Newsletter subscription: Name and email address
• Blog comments: Name, email address (optional), and comment content
• Technical data: IP address, browser type, and access times (collected automatically)

3. Purpose and Legal Basis

We process your data for the following purposes:

• To respond to your inquiries: When you contact us through the contact form, we use your data to respond to your message. Legal basis: your consent (Art. 6.1.a GDPR).
• To send informational content: If you subscribe to our newsletter, we will send you relevant content about migraine management. Legal basis: your consent (Art. 6.1.a GDPR).
• To publish comments: If you leave a comment on our blog, we publish it with your name. Legal basis: your consent (Art. 6.1.a GDPR).
• To improve our website: We use technical data to analyze site usage and improve user experience. Legal basis: legitimate interest (Art. 6.1.f GDPR).

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Newsletter subscriber data is kept until you unsubscribe. Contact form data is kept for up to 2 years to handle any follow-up inquiries.

5. Data Sharing

We do not sell your personal data. We may share your data with:

• Hosting providers: Our website is hosted on secure servers
• Database services: We use secure cloud database services to store data

All third-party providers are bound by data processing agreements and comply with GDPR requirements.

6. Your Rights

Under GDPR, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Receive your data in a structured format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time

To exercise these rights, contact us at hello.migraineoff@gmail.com

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encrypted connections (HTTPS) and secure data storage.

8. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated revision date.