Our Commitment to Data Security
We take the security of your personal data seriously and implement appropriate technical and administrative safeguards to protect it from unauthorised access, loss, destruction, or alteration.
Technical Safeguards
Encryption
Our Website is served exclusively over HTTPS, which encrypts all data transmitted between your browser and our servers using TLS (Transport Layer Security). This protects your data from interception during transit.
Cloudflare Turnstile
We use Cloudflare Turnstile on all submission forms (contact, newsletter subscription, and podcast subscription) to distinguish between human visitors and automated bots. This reduces the risk of spam submissions and unauthorised form abuse. Turnstile is designed to be privacy-preserving and works without tracking cookies.
Email Verification
Newsletter subscriptions require email verification (double opt-in). A verification link is sent to your provided email address. Subscriptions are not activated until the link is clicked. This confirms that you own the email address and prevents unauthorised subscriptions.
Access Controls
Administrative access to our systems is restricted to authorised personnel only. Admin accounts are protected by strong passwords and access is reviewed regularly.
Input Validation & Sanitisation
All user-submitted content is validated and sanitised before storage or display to prevent injection attacks and cross-site scripting (XSS).
Administrative Safeguards
Data Minimisation
We only collect the personal data that is strictly necessary for the purpose it is collected. We do not collect sensitive personal data unless required by law.
Secure Storage
Personal data is stored in a secure database with appropriate access controls. We do not store payment card data on our systems; any payments are handled by certified third-party payment processors.
Breach Response
In the event of a data breach, we will take immediate steps to contain and mitigate the breach and will notify affected individuals and relevant authorities as required by applicable law.
Your Role in Data Security
You also play an important role in keeping your data safe. Do not share your personal information with third parties who claim to represent our Website. We will never ask for your password via email.
Contact
For data protection enquiries, please contact us through our contact page or email annastacia@annastaciawainaina.com.