Privacy Policy

At Everyana News, we value your privacy and are committed to protecting your personal information in accordance with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

This Privacy Policy explains how we collect, use, store, and share your information when you interact with our website (https://everyana.com/).

1. Who we are (Data Controller)

We collect the following types of information:Everyana News we operates https://everyana.com.
Controller contact: NAME/TITLE, POSTAL ADDRESS, COUNTRY
Email:connect@everyana.com


2. What data we collect

Information you provide (e.g., name, email in forms/newsletters, comments).
Technical/usage data (IP, device, browser, pages viewed, referrer, timestamps, cookie IDs).


3. Why we process your data & our lawful bases

Some content on Everyana News may be created or assisted by AI tools like ChatGPT. All content is reviewed and edited for quality, accuracy, and compliance with journalistic standards. If you spot errors or have concerns, please contact us.


4. Why we process your data & our lawful bases

We process personal data for the purposes below. For EU/EEA users we must state a lawful basis (Art. 6 GDPR):

PurposeExamplesLawful basis (EU/EEA)
Site operation & securityload pages, prevent abuse/fraud, logsLegitimate interests (running a secure, reliable service)
Analytics & performanceunderstand engagement, improve content/navigationConsent (via cookie banner before non-essential cookies)
Newsletters & updatessend email updates you requestedConsent (you opt in; can withdraw anytime)
Respond to inquiriessupport/contact repliesLegitimate interests or Contract (if you ask us to take steps)
Legal compliancerecord-keeping, enforcementLegal obligation

We use cookies and similar tech. Non-essential cookies (e.g., Analytics/ads) are off by default in the EU/EEA and load only after your consent in our cookie banner. You can change or withdraw consent anytime in Cookie Settings (link in footer).
Provide a Cookie Policy with a table listing each cookie, provider, purpose, and lifespan..


6. Who receives your data

We share data with service providers who help us run the site (e.g., hosting/CDN, Google Analytics, email marketing like Mailchimp). We require them to protect your data and use it only for our instructions. We do not sell personal data.


7. International transfers

If we transfer personal data outside the EEA, we use lawful transfer tools (e.g., Standard Contractual Clauses (SCCs) under Art. 46) and apply additional safeguards as needed. You can request copies of relevant safeguards.


8. How long we keep data

We keep personal data only as long as necessary for the purposes above, then delete or anonymize. Typical periods:

  • Newsletter data: until you unsubscribe + up to 24 months to maintain suppression lists.
  • Contact form messages: up to 24 months.
  • Analytics data: see our Cookie Policy table (e.g., GA events/logs retention 14–26 months).

9. Your rights (EU/EEA)

You have the right to access, rectify, erase, restrict, port, and object to certain processing; and rights relating to automated decision-making/profiling (we do not make decisions with legal or similarly significant effects solely by automated means). You may withdraw consent at any time (this won’t affect past lawful processing).


10. Whether you must provide data

Providing basic data may be necessary to deliver services (e.g., email to receive a newsletter). If you choose not to provide it, we may be unable to deliver that service.


11. Children’s privacy

Our content targets a general audience and is not directed to children under 16. If you believe we have collected children’s data, contact us to delete it.


12. AI-assisted content

Articles are AI-assisted but are human-edited for accuracy, safety, and compliance


13. Third-party links and services

We are not responsible for third-party privacy practices. Review their policies before using their services.


14. Updates to This Policy

We may update this Privacy Policy occasionally.
All changes will be posted here with an updated “Last updated” date.

Implementation Checklist (So You Pass a GDPR Review)

Follow this checklist before finalizing your AdSense or GDPR compliance review:

  1. Add a cookie banner (CMP):
    • It must block non-essential cookies (analytics/ads) until consent.
  2. Fill in placeholders:
    • Add your Controller’s name, address, and contact info.
    • If you serve EU/EEA users, appoint and list an EU Representative.
  3. Create a detailed Cookie Policy page:
    • List every cookie or script (name, purpose, provider, retention).
    • Example: “ga – Google Analytics – 14 months – tracks traffic metrics”.
  4. Update vendor disclosures:
    • Identify each third-party tool that handles personal data (hosting, analytics, newsletter provider, CDN, etc.).
  5. Add international transfer details:
    • For each EU→non-EU transfer, specify use of SCCs or other safeguards.
  6. Implement a data rights process:
    • Add a “Request My Data” or “Delete My Data” form (or email link).
    • Respond within 30 days (GDPR standard).
  7. Align retention schedules:
    • Make sure data deletion timelines match what’s written above.
  8. Test your consent flow:
    • Visit your site in incognito mode (from EU region).
    • Ensure no analytics/ads load before accepting cookies.
  9. Document compliance:
    • Keep internal records of data processors, consents, and data flow (GDPR Art. 30).
  10. Re-audit annually:
  • Review your privacy policy and cookies each year or when you add new tools.
Back to top button