Privacy Notice

This notice describes what personal data iampaulocoelho.com(the “site”) collects, why, who sees it, how long it’s kept, and the rights you have over it. Plain words — no dark patterns.

Who we are

The site is operated by Paulo Coelho (“Paulo”, “we”) — a Namibian MC, speaker, and brand manager. The data controller for everything below is Paulo personally. Privacy questions: Paulo@foxglovenam.com.

What we collect

From visitors

• Booking enquiry form— when you fill in the contact form we receive your name, email, message, and optionally company / event type / date. This is sent directly to Paulo’s inbox; it is not stored in our database.
• IP address + browser user-agent — captured in standard web server access logs for security and abuse prevention. Kept for up to 90 days.
• Anonymous analytics — we use Plausible Analytics to count pageviews and clicks. Plausible is cookieless and does not track individuals — it aggregates without storing any personal identifier.

From admins (Paulo, his team)

• Account email + a hashed password (bcrypt — we never see your plain password).
• Login attempts (success and failure) with timestamp, IP, and user-agent — kept for up to 90 days for security audit purposes.

Why we collect it — lawful basis

• Contact form — to respond to your booking enquiry (contract necessity under POPIA / GDPR Art. 6(1)(b)).
• IP + UA logs — for site security and abuse prevention (legitimate interest, GDPR Art. 6(1)(f)).
• Plausible analytics — to understand which content is read (legitimate interest; anonymized, no profiling).
• Admin accounts — to operate the site (contract).

Who sees your data

• Paulo + his team directly.
• Resend — delivers the booking-enquiry email from the site to Paulo’s inbox. Resend is a US-based email infrastructure provider with a Data Processing Agreement and Standard Contractual Clauses.
• Plausible — anonymous pageview counts. EU-hosted.
• Our hosting provider (currently a single EU-region droplet at DigitalOcean) — sees the data necessary to deliver the site to your browser.

We do not sell your data. We do not share it for advertising. We have no advertising on the site.

How long we keep it

• Booking enquiries — not persisted on our servers. Paulo keeps them in his email inbox per his normal retention.
• Login attempts — 90 days.
• Server access logs — 90 days.
• Admin account records — until the admin is removed.

Your rights

You have the right to:

• Ask what data we hold about you (access).
• Ask us to correct anything inaccurate.
• Ask us to delete your data.
• Ask us to send you a copy of your data (portability).
• Object to processing based on legitimate interest.

To exercise any of these rights, email Paulo@foxglovenam.com. We’ll respond within 30 days.

Complaints

If you believe we’ve mishandled your data and we haven’t resolved it to your satisfaction, you can complain to:

• Namibia / South Africa — the Information Regulator of South Africa (the closest equivalent until Namibia’s Data Protection Bill is enacted).
• EU — your national Data Protection Authority.
• California — the California Attorney General.

International transfers

When you submit a booking enquiry, the email is processed by Resend (US-based, with SCCs in place). When the site loads, Plausible (EU-hosted) receives an anonymous pageview. Hosting is in the EU (DigitalOcean Frankfurt). These transfers are made under contract / legitimate interest with adequate safeguards.

Children

The site is aimed at corporate clients and event organizers — not children. We don’t knowingly collect data from anyone under 18.

Changes to this notice

If we materially change how we handle data, we’ll update this page and bump the “Last updated” date at the top.

This notice is written to be human-readable. If anything is unclear, ask — we’ll explain.