Last updated: 9 May 2025
Quick summary (why and what)
We collect just enough personal data to run Google Analytics 4, manage our Mailchimp newsletter list, answer WPForms contact-form messages, and (soon) track clicks for Amazon Associates affiliate links. That data lives on secure U S-based servers at Hostinger and—with appropriate safeguards—inside Mailchimp and Google. You can opt out of analytics and future affiliate cookies, request to see or delete any information we hold, or tell us “Do Not Sell/Share my personal info” if you’re in California.(Google Help, Mailchimp, Hostinger Help Center, Amazon Associates, oag.ca.gov)
1. Who we are
Apartment Charm (the “Site”) is owned and operated by Adam Khanfar. Our contact email is contact@apartmentcharm.com. For GDPR purposes we are the “data controller.”(GDPR)
2. What data we collect & why
| Category | Examples | Purpose | Legal basis* |
|---|---|---|---|
| Usage/Device data | IP address, browser type, pages visited (via Google Analytics 4) | Site analytics & performance | Legitimate interests (GDPR Art. 6 f) and consent via cookie banner |
| Contact data | Name, email, message (via WPForms) | Respond to inquiries | Consent (Art. 6 a) |
| Newsletter data | Email, optional first name (Mailchimp) | Send tips + promotions | Consent (opt-in) |
| Affiliate click data | Redirect URL, timestamp (Amazon tag) | Track commissions & disclose ads | Legitimate interests / CCPA “share” |
*Where GDPR applies. We never knowingly collect data from children under 16.(Google Help, Mailchimp, WPForms, Amazon Associates)
3. Cookies & similar tech
We use:
- Essential cookies – keep the site running.
- Analytics cookies – GA4 (_ga, ga) with a retention window of 26 months.(Google Help)
- Potential affiliate cookies – Amazon Associates adds “ad-id” and “tracking-id” cookies if/when we join the program.(Amazon Associates)
Visitors in the EU/UK see a consent banner that meets the ePrivacy Directive’s prior consent and withdraw at any time standards.
4. How long we keep your data
| Data set | Retention rule |
|---|---|
| Google Analytics events | 26 months then auto-deleted |
| WPForms messages | 12 months after we close the ticket |
| Mailchimp subscribers | Until you unsubscribe or after 36 months of inactivity |
These periods align with GDPR Art. 13(2)(a) (“storage limitation”).(GDPR, Google Help)
5. When we share or transfer data
| Recipient | Safeguard |
|---|---|
| Google LLC (USA) – analytics | Standard Contractual Clauses (2021) |
| The Rocket Science Group LLC d/b/a Mailchimp (USA) – email marketing | SCCs + supplementary measures(Mailchimp) |
| Hostinger International Ltd. (USA data center) – web hosting | SOC 2-aligned security; servers in Arizona/ Massachusetts(Hostinger Help Center) |
We do not sell personal information. If we ever “share” data for cross-context advertising, California residents can opt out via the “Do Not Sell/Share” link in our footer, fulfilling Cal. Civ. Code §1798.120.(oag.ca.gov)
6. Your rights
EU/UK/EEA
You may access (GDPR Art. 15), rectify, erase, restrict, port, or object to processing. We respond within 30 days.(GDPR)
California (CCPA/CPRA)
Residents can know, delete, correct, and opt out of sale/share of personal info with no discrimination.(oag.ca.gov)
7. Security measures
We enforce HTTPS, firewall protection, and least-privilege admin access. Third-party processors are vetted for SOC 2 or ISO 27001 controls.
8. Affiliate & sponsored content disclosures
When we use Amazon Associates links, we add a conspicuous note (“As an Amazon Associate I earn from qualifying purchases”) inline with FTC Endorsement Guides §255.5.(Federal Trade Commission, Amazon Associates)
9. Changes to this policy
We may update for legal or operational reasons. Material changes post a banner plus “Last updated” date; continued use means acceptance.(GDPR)
10. Contact
Questions? Email contact@apartmentcharm.com