Privacy Policy

Who is responsible for your data

Chlorova is the data controller for the personal data described in this policy. If you are in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, the GDPR applies to us as described below; if you are in California, the CCPA/CPRA applies as described in "Your rights worldwide". Any other region's laws that apply to a global website are honoured on the same practical terms.

What we collect

We do not collect payment information, we do not sell personal data, and we do not run advertising networks or cross-site tracking pixels beyond the analytics described above.

• Calculator inputs: the numbers and options you enter are processed in your browser and are not stored on our servers. Calculations happen locally on your device.
• Analytics data: if you accept analytics cookies, Google Analytics (GA4) collects standard technical information such as device type, browser, coarse country, referring pages, and approximate pages viewed. Details are in our Cookie Policy.
• Email address: only if you voluntarily subscribe to our newsletter or email us directly.
• Whatever else you choose to include when you email us (a name, a garden situation, a screenshot of a result). We do not ask for, and do not collect, data beyond what your message contains.

How and why we use it (legal bases)

• To operate the Site and provide the free tools you visit for — legitimate interest (contract performance where an account exists, though we have none).
• To understand which tools are used and improve accuracy and speed — legitimate interest; where the law requires consent (EEA/UK), analytics consent is requested via our cookie banner and can be withdrawn any time.
• If you subscribe to the newsletter, sending it to you — consent, withdrawable at any time via the unsubscribe link in every email.
• To reply to your messages and to defend or meet legal obligations — legitimate interest and legal requirement.

Cookies and similar technologies

We use only two categories: strictly necessary storage that makes the Site work, and privacy-respecting analytics. A full list, with lifetimes, lives in our Cookie Policy — please read it alongside this policy.

Who we share data with

We never sell or rent personal data. When links lead to third-party storefronts (including Amazon affiliate links), their own privacy policies apply once you leave the Site.

• Google Ireland Limited / Google LLC as our analytics processor (under GDPR-standard data processing terms).
• When the newsletter is active, our email-delivery provider as a processor under standard contractual terms.
• Our hosting and site-infrastructure providers, who process limited log data on our behalf.
• Authorities, only where genuinely required by law.

International transfers

The Site is global. Where data must be transferred outside the EEA/UK to a country without an adequacy decision, we rely on Standard Contractual Clauses (SCCs) or the provider's equivalent safeguards (for example, Google's own transfer mechanisms).

How long we keep it

• Analytics raw data (Google Analytics): automatic deletion after 14 months — our configured retention period — with advertising features and cross-device reporting switched off.
• Newsletter emails: until you unsubscribe, plus a short suppression list period so deleted subscribers are not re-added by mistake.
• Contact messages: up to 24 months of correspondence history, then deleted unless we must keep a specific thread for legal reasons.

Your rights worldwide

Depending on where you live, you may request access, correction, deletion, restriction, portability, or object to processing and withdraw consent at any time. EEA/UK/Swiss residents have the full GDPR set of rights; California residents have CCPA/CPRA rights (notice, access, deletion, correction, and opt-out of "sale"/"sharing" — we do neither); other regions have broadly comparable rights. To exercise any of them, email hello@chlorova.com. We will respond within 30 days and verify your identity where necessary. You can also complain to your local data-protection authority.

Children

The Site is general-audience gardening content and is not directed at children under 16. We do not knowingly collect their personal data. If you believe a child has sent us data, email hello@chlorova.com and we will delete it.

Security

All traffic is served over HTTPS, access to administration is restricted and credentialed, and analytics data is pseudonymous. No method of transmission is perfectly secure, but we keep collection small so there is little of value to attackers.

Changes to this policy

If we make material changes we will update the "Last updated" date at the top of this page and, where required, ask for fresh consent. Continued use of the Site after changes take effect constitutes acceptance of the updated policy where the law allows.

Contact

Questions, requests, or complaints about privacy: hello@chlorova.com. We read everything and never charge to exercise a right.