Privacy Policy

At iluminar.blog, I treat your privacy with the same care and reverence I bring to each journey and reflection shared on this site. This Privacy Policy explains, in clear and grounded language, how your personal data is collected, used, and protected when you visit my spiritual travel and reflection blog.

1. Who I Am

iluminar.blog is a personal spiritual travel and reflection blog created and written by me, Paul McCarthy. When this policy refers to “I”, “me”, or “my”, it means Paul McCarthy as the data controller responsible for processing your personal data in connection with this website.

2. Summary of How Your Data Is Used

I collect and use limited personal data to make iluminar.blog more meaningful and easy to navigate. In essence, I use your information to:

Notify you of new posts and reflections when you choose to subscribe.
Understand how the site is being used so I can improve the content, navigation, and overall experience.
Maintain the security and reliability of the website.

I do not sell your personal data to third parties, and I only share it when it is necessary for operating the site or when required by law.

3. What Data I Collect

The information collected on iluminar.blog is intentionally limited and proportionate. Depending on how you interact with the site, I may collect the following types of data:

3.1 Subscription and Contact Information

Name (if you choose to provide it).
Email address when you subscribe to receive new posts or contact me directly.

This information is collected when you actively provide it, for example by filling in a subscription form or sending me an email.

3.2 Usage Data and Analytics

When you visit iluminar.blog, certain information is automatically collected through analytics tools and server logs. This may include:

IP address (in some cases, this may be stored only in truncated or anonymised form).
Browser type and version, device type, and operating system.
Pages visited, time and date of visit, time spent on pages, and referring websites.

This data is generally aggregated and used to understand how visitors find and use the site, and to diagnose technical issues.

3.3 Cookies and Similar Technologies

Cookies are small text files placed on your device when you visit a website. On iluminar.blog, cookies may be used to:

Remember your preferences (for example, language or cookie choices).
Maintain basic site functionality and security.
Gather anonymised analytics about how visitors use the site.

You can control or disable cookies in your browser settings, though this may affect how the site functions for you.

4. How Your Data Is Used

I use your personal data only for clearly defined, respectful purposes connected with iluminar.blog:

Subscriptions and email updates: If you subscribe, your name (if provided) and email address are used to send you notifications of new posts, reflections, or occasional updates related to the blog.
Responding to messages: If you contact me, I use your email address and any other information you provide to reply to your query.
Improving the site: Aggregated analytics data is used to understand which content resonates, how visitors move through the site, and where improvements are needed.
Security and maintenance: Technical data and logs are used to monitor for suspicious activity, troubleshoot issues, and keep the site stable and secure.

5. Legal Bases for Processing (GDPR)

For visitors in the European Economic Area (EEA), the United Kingdom, and other regions where the GDPR or similar laws apply, I rely on the following legal bases to process your personal data:

Consent: When you subscribe to receive emails, you give your clear consent to receive updates. You can withdraw this consent at any time by using the unsubscribe link in emails or by contacting me.
Legitimate interests: I process certain technical and analytics data to understand how the site is used, to improve content and user experience, and to maintain security. I carefully balance these interests with your privacy rights.
Legal obligations: In rare cases, I may need to process or retain certain information to comply with legal or regulatory requirements.

6. Cookies and Consent

Where required by law, certain non-essential cookies (for example, some analytics cookies) will only be used with your consent. You can change or withdraw your cookie preferences at any time using your browser settings or any cookie controls made available on the site.

For more detailed information on specific cookies used, I may provide a separate cookie notice or table, which will be kept up to date as tools and technologies evolve.

7. Analytics Tools

iluminar.blog may use privacy-conscious analytics tools to understand how readers discover and move through the site. Where possible, these tools are configured to minimise the collection of personal data, for example by anonymising IP addresses and aggregating usage data.

Analytics data is used in a broad, reflective way: to see which journeys and reflections resonate, which pages may need clarification, and how the overall experience can be made smoother and more inspiring.

8. Data Sharing and Third Parties

I do not sell or rent your personal data to third parties. Your information is shared only in limited circumstances:

Service providers: I may use trusted third-party services (for example, email delivery or website hosting providers) to help run the site. These providers only receive the information necessary to perform their services and are bound by data protection obligations.
Legal requirements: I may disclose information if required to do so by law, or in response to valid legal requests by public authorities.

Whenever third-party tools are used, I aim to choose partners that respect privacy and comply with relevant data protection laws.

9. International Data Transfers

Because the internet flows across borders, your data may be processed or stored in countries outside of your own, and possibly outside the European Economic Area (EEA) or the United Kingdom. Where this happens, I seek to ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent protections, so that your rights remain protected.

10. Data Retention

I keep your personal data only for as long as it is needed for the purposes described in this policy, or as required by law:

Subscription data: Kept for as long as you choose to remain subscribed. If you unsubscribe, your email address will be removed from the mailing list, though a limited record may be kept to honour your request not to be re-added unintentionally.
Contact messages: Kept for as long as reasonably necessary to respond to and document the conversation.
Analytics and technical logs: Retained for a limited period to analyse trends, maintain security, and improve the site, then aggregated or deleted.

11. Your Rights Under the GDPR

If you are in the EEA, the United Kingdom, or another region with similar data protection laws, you have important rights regarding your personal data. These include:

Right of access: You can request confirmation of whether I hold personal data about you and ask for a copy of that data.
Right to rectification: You can ask for inaccurate or incomplete information about you to be corrected.
Right to erasure: In certain circumstances, you can ask for your personal data to be deleted.
Right to restriction of processing: You can request that I temporarily limit how your data is used in certain situations.
Right to data portability: You can ask to receive the personal data you provided in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.
Right to object: You can object to certain types of processing, including when I rely on legitimate interests. You always have the right to object to direct marketing.
Right to withdraw consent: Where processing is based on your consent (for example, email subscriptions), you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have not been respected, though I invite you to contact me first so I can try to address your concerns with care.

12. How to Exercise Your Rights

To exercise any of your data protection rights, please contact me using the details in the “Contact” section below. I may need to ask for some information to verify your identity before fulfilling your request, in order to protect your privacy and the security of your data.

13. Children’s Privacy

iluminar.blog is intended for adults and is not directed at children under the age of 16. I do not knowingly collect personal data from children. If you believe that a child has provided me with personal data without appropriate consent, please contact me so that I can take appropriate steps to remove that information.

14. Changes to This Policy

As the journey of iluminar.blog evolves, this Privacy Policy may be updated to reflect new tools, legal requirements, or ways of connecting with readers. When I make significant changes, I will update the “Last updated” date at the end of this page and, where appropriate, provide a more prominent notice on the site.

15. Contact

If you have any questions about this Privacy Policy, how your data is handled, or if you would like to exercise your data protection rights, you are warmly invited to contact me:

Email: iluminarcoogee@gmail.com

I aim to respond to privacy-related requests with care and within a reasonable time frame, and in all cases within the time limits required by applicable law.

Last updated: July 2026