Privacy Policy

1. Introduction

This Privacy Policy describes how personal information is handled when visitors use Naomi Caldwell's website (https://naomicaldwell.com). This website is intended for readers in the United Kingdom and internationally who are seeking Christian Bible-study resources, guided reading plans, workbooks, and reflective articles.

We are committed to handling personal information transparently, responsibly, and in accordance with applicable UK data-protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy provides informational notice regarding our data practices and does not constitute formal legal advice.

2. Information visitors provide

We collect personal information that you voluntarily provide when using interactive features on the website:

• Contact Form: When you submit an enquiry via our Contact page, we collect your name, email address, selected enquiry type, and the message content you enter.
• Newsletter Subscription: When you sign up to receive email updates, we collect your email address, an optional first name, and technical subscription/confirmation metadata needed to manage your subscription.
• Anti-Spam Fields: Our forms include hidden honeypot fields designed to catch automated spam submissions. Information entered into honeypot fields is discarded and not processed.

We do not intentionally request or require special category (sensitive) personal data, such as details regarding health, political opinions, or specific religious affiliations beyond your voluntary interest in Christian devotional reading. We do not offer user accounts or logins, and we do not process financial transactions, billing details, or payment card information on this website.

Like most websites, our hosting infrastructure temporarily processes standard technical connection logs (including your IP address, browser user-agent, and requested file path) to route and serve web pages securely, troubleshoot technical faults, and mitigate malicious traffic. Font resources (Lora and Plus Jakarta Sans) are served locally from our website origin without connecting to third-party font networks.

3. How information is used

We use personal information strictly for the purposes for which it was provided and to maintain the safety and integrity of the website:

• To review, respond to, and communicate regarding enquiries submitted through the contact form;
• To operate, maintain, and protect the website against security threats and unauthorised activity;
• To prevent spam, fraudulent submissions, and automated abuse on website forms;
• To manage newsletter subscriptions, send requested Bible studies, reading plans, Christian resources, and related Naomi Caldwell publishing or content updates;
• To maintain subscription records and unsubscribe preferences so that readers who opt out do not receive further marketing emails.

Personal information is not used for unrelated marketing purposes, behavioral profiling, or commercial advertising.

4. Newsletter subscriptions and Kit

We use Kit (formerly ConvertKit) as our third-party email marketing service provider to manage subscriber lists and deliver newsletter emails.

• Server-Side Integration: When you submit the newsletter form, your email address and optional first name are transmitted to Kit through our website's server-side API integration. We do not embed Kit's client-side JavaScript tracking script, CSS, or hosted HTML forms on our website.
• Double Opt-In: Our newsletter uses a permission-based double opt-in process. Submitting the subscription form triggers an automated confirmation email to the address you provided. You become an active subscriber only after clicking the confirmation link in that email.
• Unsubscribing: You may unsubscribe from the newsletter at any time by clicking the "Unsubscribe" link included at the bottom of every newsletter email, or by contacting us directly.

For further information on how Kit handles personal information, please consult the Kit Privacy Policy.

5. Contact form and email communications

When you submit an enquiry through the contact form, the details you provide are processed by the website's server-side infrastructure and email routing service so your message can be delivered to our inbox, reviewed, and answered.

The contents of your message are delivered to the recipient inbox for correspondence. Cloudflare Turnstile provides security verification for the form submission. According to Cloudflare, Turnstile does not access, store or transmit the contents entered into the website's form fields.

6. Cloudflare and Turnstile

This website uses Cloudflare for hosting infrastructure, content delivery network (CDN) routing, and web application security.

To protect our forms from automated spam, brute-force attacks, and malicious bot activity, we use Cloudflare Turnstile on the Contact and Newsletter forms:

• Turnstile performs client-side security checks to distinguish human visitors from automated scripts without displaying interactive puzzle challenges.
• For security purposes, Turnstile may evaluate technical browser and network signals such as your IP address, browser user-agent, TLS characteristics, sitekey, and origin headers.
• Turnstile is used strictly for security and abuse prevention. Turnstile pre-clearance is disabled on this website.

For more information about Cloudflare's security and privacy practices, please refer to the Cloudflare Privacy Policy and Cloudflare Turnstile Data Privacy documentation.

7. Lawful bases for processing

Under UK data-protection legislation, we process personal information under the following lawful bases depending on the activity:

• Consent: When you voluntarily subscribe to our email newsletter, we process your email address and first name based on your explicit consent, verified through our double opt-in procedure. You can withdraw your consent at any time by unsubscribing.
• Legitimate Interests: We process personal information where necessary for our legitimate interests in operating, securing, and maintaining the website, preventing spam and cyber abuse, and reviewing and responding appropriately to reader enquiries.
• Legal Obligations: We may process or retain certain records where necessary to comply with applicable statutory or regulatory requirements.

8. Sharing and service providers

We do not sell, rent, or trade your personal information.

To operate this website and deliver requested communications, we share relevant information with trusted third-party service providers who process data on our behalf:

• Cloudflare: Provides website hosting infrastructure, content delivery, form processing, email routing, and Turnstile bot protection.
• Kit: Provides email marketing software, subscriber list management, and newsletter delivery.

These providers process information in accordance with their applicable privacy policies, data-processing terms and contractual arrangements.

9. International processing

Our service providers, including Cloudflare and Kit, operate global infrastructure and may process personal information outside the United Kingdom.

Where personal data is transferred internationally, applicable safeguards may include recognised adequacy arrangements, contractual safeguards or other lawful transfer mechanisms, as described in the relevant service provider's privacy and data-processing terms.

10. Data retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected:

• Contact Enquiries: Information submitted via the contact form is retained for as long as reasonably necessary for correspondence, resolving your enquiry, general administration, security, and any applicable legal requirements.
• Newsletter Subscriptions: Subscriber information is retained for the duration of your active subscription. When you unsubscribe, your details are kept on a suppression list as reasonably necessary to ensure that your preference is respected and that you do not receive further marketing emails.

11. Individual rights

For individuals whose personal data is protected by UK data-protection law, you have statutory rights regarding your information, including:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request correction of inaccurate or incomplete personal information.
• Right to erasure: You can request the deletion of your personal data in certain circumstances.
• Right to restriction: You can request that we restrict the processing of your personal information in certain situations.
• Right to object: You can object to processing based on legitimate interests.
• Right to data portability: Where applicable, you can request that information you provided to us be transferred to you or a third party in a structured, commonly used format.
• Right to withdraw consent: Where our processing is based on your consent (such as newsletter subscriptions), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To unsubscribe from the newsletter, you can click the unsubscribe link in any email. To make a privacy enquiry or exercise your rights, please get in touch using our Contact page.

You also have the right to raise a concern with the UK supervisory authority, the Information Commissioner's Office (ICO). Further information about your rights is available at ico.org.uk.

12. Security

Reasonable technical and organisational measures are used to protect personal information from unauthorised access, loss, misuse, or alteration. All web traffic between your browser and our website is encrypted in transit using Transport Layer Security (TLS/HTTPS), form submissions are validated server-side, and automated submissions are filtered using Cloudflare Turnstile.

However, no electronic transmission over the internet or method of digital storage can be guaranteed to be completely secure. Visitors provide information at their own risk.

13. External links

This website contains links to external websites, including online book retailers such as Amazon (for purchasing published paperback workbooks) and Scripture reference websites (such as Bible Gateway).

When you follow an outbound link, you leave our website. External sites operate independently and have their own privacy notices, cookie policies, and data-handling practices. We do not control and are not responsible for the privacy practices or content of third-party platforms.

14. Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect operational, technical, or legal changes. When changes are made, the revised policy will be published on this page with an updated "Last updated" date.