Privacy Policy

Last updated: August 24, 2026

This Privacy Policy explains how Can We Talks (“we,” “us,” or “our”), operated at https://canwetalks.com, collects, uses, and protects your personal data. It applies to all visitors and users of our website, regardless of where you are located.

We are committed to protecting your privacy in accordance with:

The General Data Protection Regulation (GDPR) – applicable to visitors from the European Union and European Economic Area.
The California Consumer Privacy Act (CCPA/CPRA) – applicable to residents of California, USA.
General best practices for all other visitors worldwide.

1. Who We Are (Data Controller)

The data controller responsible for your personal data is:

Can We Talks

Website: https://canwetalks.com

Contact email: 1canwetalks1@gmail.com

If you have any questions about how we handle your data, or wish to exercise any of your rights, please reach out to us at the email address above.

2. What Data We Collect and Why

We only collect personal data that is necessary for the specific purpose stated below. Here is a breakdown of each context in which data is collected.

2.1 Comments

When you leave a comment on our site, we collect:

Your name and email address (as entered in the comment form)
Your website URL (optional)
Your IP address and browser user agent string (for spam detection)

An anonymized hash of your email address may be sent to the Gravatar service to check whether you have a profile picture associated with it.

If you do, that picture will appear publicly next to your comment.

Gravatar is operated by Automattic, Inc. You can review their privacy policy at https://automattic.com/privacy/.

Legal basis (GDPR): Legitimate interest (Article 6(1)(f)) – to maintain comment quality and prevent spam.

2.2 Media / Uploaded Images

If you upload images to the website (e.g., as part of a guest post or profile), please be aware that uploaded images may contain embedded location metadata (EXIF GPS data). We recommend removing this data from images before uploading. Visitors to the website can download any image and extract location data from it.

We do not actively collect or process EXIF data ourselves, but we cannot prevent visitors from extracting it from publicly available files.

2.3 Cookies

We use cookies in the following ways:

Comment cookies: If you leave a comment, you may opt in to saving your name, email address, and website in cookies. This is purely for your convenience – so you do not have to re-enter your details on your next visit. These cookies last for one year.

Analytics cookies: We use Google Analytics to understand how visitors interact with our content. This involves cookies that collect information about your device, browser, approximate location (country/city level), pages visited, and time spent on the site. This data is aggregated and used to improve our blog.

Google Analytics may transfer data to Google LLC servers in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, which provides an adequate level of data protection. You can learn more at https://policies.google.com/privacy.

You can opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-Out Browser Add-on: https://tools.google.com/dlpage/gaoptout

Legal basis (GDPR): Consent (Article 6(1)(a)) for analytics cookies.

We obtain your consent via our cookie consent banner before placing non-essential cookies.

For a full breakdown of the cookies we use, their names, and their expiry dates, please see our Cookie Policy.

2.4 Newsletter and Email Communications (MailPoet)

If you subscribe to our newsletter, we collect:

Your email address
Your name (if provided)

We use MailPoet (operated by Wysija SARL / WooCommerce) to manage our mailing list and send you updates, articles, and occasional marketing emails. MailPoet acts as a data processor on our behalf.

You can unsubscribe at any time by clicking the “unsubscribe” link at the bottom of any email from us, or by contacting us directly. After unsubscribing, we will remove your email from our active mailing list promptly.

Legal basis (GDPR): Consent (Article 6(1)(a)) – you voluntarily subscribe and can withdraw consent at any time.

2.5 Contact Forms and Direct Emails

When you contact us via a contact form or directly by email, we collect the information you choose to provide (typically your name and email address). This data is used solely to respond to your inquiry. We do not use contact form submissions for marketing purposes unless you separately subscribe to our newsletter.

Legal basis (GDPR): Legitimate interest (Article 6(1)(f)) – to respond to your inquiry.

2.6 Password Reset

If you have a registered account and request a password reset, your IP address will be included in the reset email as a security measure.

Legal basis (GDPR): Legitimate interest (Article 6(1)(f)) – account security.

3. Who We Share Your Data With

We do not sell, rent, or trade your personal data to third parties.

We share your data only with the following trusted service providers, who act as data processors on our behalf and are contractually bound to protect your data:

Hostinger – Our website hosting provider. Your data may be stored on Hostinger’s servers. Privacy policy: https://www.hostinger.com/privacy-policy
MailPoet / WooCommerce (Automattic) – Our newsletter platform.

Google LLC (Google Analytics) – Website analytics. Privacy policy: https://policies.google.com/privacy
Gravatar (Automattic) – Profile pictures for comment authors.

We may also disclose your data if required by law, court order, or governmental authority.

4. International Data Transfers

Some of the third-party services listed above (e.g., Google Analytics, Gravatar, MailPoet) are operated from the United States. Where personal data is transferred outside the EU/EEA, we ensure that appropriate safeguards are in place, such as:

The EU-U.S. Data Privacy Framework (for Google LLC)
Standard Contractual Clauses (SCCs) approved by the European Commission

5. How Long We Retain Your Data

We retain data only for as long as necessary for its original purpose, or as required by law.

Comments: Retained indefinitely, along with metadata, so that we can recognize and approve follow-up comments automatically.
Newsletter subscribers: Retained until you unsubscribe. After unsubscribing, your data will be deleted or anonymized within a reasonable timeframe.
Contact form inquiries: Retained for as long as needed to handle your request, and then deleted unless a longer retention period is required (e.g., for legal or contractual reasons).
Analytics data (Google Analytics): Governed by Google’s own retention settings (typically 14 months by default in our configuration).

6. Your Rights Under GDPR (EU/EEA Residents)

If you are located in the EU or EEA, you have the following rights regarding your personal data:

Right of access – You can request a copy of the personal data we hold about you.

Right to rectification – You can ask us to correct inaccurate or incomplete data.

Right to erasure (“right to be forgotten”) – You can ask us to delete your personal data, where no overriding legal obligation requires us to keep it.

Right to restriction of processing – You can ask us to limit how we use your data while a dispute is being resolved.

Right to data portability – You can request your data in a structured, machine-readable format.

Right to object – You can object to processing based on our legitimate interest, including for direct marketing.

Right to withdraw consent – Where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of prior processing.

Right to lodge a complaint – You have the right to lodge a complaint with your local data protection authority. In Hungary, this is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH): https://www.naih.hu

To exercise any of these rights, please contact us at 1canwetalks1@gmail.com. We will respond within 30 days.

7. Your Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA:

Right to know – You can request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.

Right to delete – You can request that we delete personal information we have collected, subject to certain exceptions.

Right to correct – You can request correction of inaccurate personal information we hold about you.

Right to opt out of sale or sharing – We do not sell or share your personal information for cross-context behavioral advertising.

Right to non-discrimination – We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact us at 1canwetalks1@gmail.com with the subject line “CCPA Privacy Request.” We will respond within 45 days as required by law.

8. Children’s Privacy

Our website is not directed at children under the age of 13 (or 16 for users in the EU). We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately so we can delete it.

9. Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites, and we encourage you to review their privacy policies independently.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy, please contact us: