AMOMANA operates https://amomana.com and decides how personal information under its control is processed; where the law uses the term, it is the controller. Some organizations we work with, advertising vendors in particular, act as controllers in their own right.

Any registered address, company number, data protection officer or local representative the publisher has configured appears on the Contact page.

What is processed depends on how you use the site and which optional services the publisher has enabled. Section 4 sets out the purposes these categories serve.

We do not ask for special category information such as health, religious or political details, and an ordinary editorial message never requires a password, a full card number or government identification.

• Directly from you when you email us, comment, subscribe or submit material.
• Automatically from your browser each time a page, image or script is requested.
• From hosting and security infrastructure that logs requests in order to serve and protect the site.
• From configured services for analytics, advertising, embedded media, newsletters, comments or spam prevention.
• From you during a request where information is needed to verify identity or assess a rights notice.

A third-party service may combine activity observed here with information it already holds about a browser or account, under its own notice. That happens on the provider’s systems, not ours.

1. Deliver and maintain the website — serve pages, remember settings, operate comments or subscriptions and troubleshoot errors.
2. Respond to people — answer messages, assess correction reports and handle rights requests.
3. Protect the service — detect spam, fraud, misuse, unauthorized access and malicious traffic.
4. Understand performance — measure which pages are read and how the site behaves across devices.
5. Support and measure advertising — display, limit, secure and report on ads where those tools are enabled and a valid basis exists.
6. Meet legal obligations — retain or disclose information when required by law, legal process or the defense of legal claims.

Marketing goes only to addresses that asked for it, with a working unsubscribe route in every message. What you send us is used to handle your request and run the publication; it is not sold, and not supplied to other organizations to train their systems.

Where data-protection law requires a legal basis, processing may rely on one or more of the following.

• Consent for non-essential cookies where consent is required, for newsletters, and for other clearly optional processing.
• Contractual necessity when you ask us for something the information is needed to provide.
• Legitimate interests in operating, securing, measuring and improving the publication, where they are not overridden by your rights.
• Legal obligation where a law, regulator or valid legal process requires particular processing or retention.

The right basis depends on the feature and your location, and you may ask which applies. Consent must be freely given and can be withdrawn at any time; withdrawal affects future processing only.

This website uses a little browser storage to remember choices such as your cookie decision and display mode. That is what keeps the consent notice from reappearing on every page, and it is listed item by item in the Cookie Policy.

Optional analytics, tag management, embedded media and advertising technologies may be added by the publisher. Where consent is required for non-essential storage, those technologies should not run until a valid choice is recorded, and rejecting should be as easy as accepting. Rejecting optional technologies is intended to stop them loading, not merely to hide the notice.

You can limit personalized advertising with the controls below, each run by the organization named and covering only participating companies.

• Google ad settings — review or turn off personalized ads at myadcenter.google.com.
• Digital Advertising Alliance — the AdChoices opt-out at optout.aboutads.info.
• Network Advertising Initiative — member-company opt-out at optout.networkadvertising.org.
• Your Online Choices — the European industry tool at youronlinechoices.com.
• Device and browser controls — mobile systems offer an advertising identifier reset, and browsers can block third-party cookies.

The same controls, together with browser-level instructions and the analytics opt-out, are listed in section 5 of the Cookie Policy.

Information is disclosed only as needed, to defined categories of recipient: hosting and content delivery, security and spam prevention, email delivery, analytics, advertising and measurement, embedded media platforms, and professional advisers. A recipient may act on our instructions, as an independent business, or both.

Disclosure may also occur where a valid legal requirement applies, where it is needed to protect the rights or safety of readers, contributors or the publisher, or in a merger, in which case the receiving organization stays bound by this policy until it publishes a replacement.

The internet is not organized by border. Hosting providers, security services and advertising vendors may sit in different countries, so information may be processed outside the country where you live, including where data-protection law differs from your own.

Where information covered by the GDPR or UK GDPR moves outside the EEA or the United Kingdom, the transferring organization should rely on a recognized mechanism: an adequacy decision, standard contractual clauses with the UK addendum or International Data Transfer Agreement, or another safeguard permitted by law. You may ask which applies to a service.

Information is kept only as long as its purpose requires, then deleted, anonymized or securely isolated, subject to backup cycles and legal requirements.

Records needed for tax, contractual or dispute purposes may be kept for the period the relevant law requires.

Reasonable administrative, technical and organizational measures reduce risks such as unauthorized access, alteration, loss and misuse: limiting access to those who need it, keeping the platform updated, serving pages and form submissions over an encrypted connection where the hosting environment provides one, and reviewing which third-party tools may run.

No method of internet transmission or storage is perfectly secure, so absolute security cannot be promised. Where a personal data breach occurs and applicable law requires notification, the publisher will notify the relevant supervisory authority and affected individuals as that law requires.

Which rights you have depends on where you live and on the processing involved. Rights carry conditions and exemptions, so a request can be refused in part; we explain why when that happens.

EEA and United Kingdom (GDPR and UK GDPR). Where these laws apply, you may ask to:

• confirm whether personal data about you is processed, and receive a copy;
• have inaccurate data corrected and incomplete data completed;
• have data erased where the conditions for erasure are met;
• restrict processing while an objection or accuracy question is examined;
• object to processing based on legitimate interests, and to direct marketing at any time;
• receive data you provided in a portable, machine-readable format;
• withdraw consent where processing relies on it.

California and other US privacy laws (CCPA and CPRA). Where these apply, they generally give you the right to:

• know the categories and specific pieces collected, the sources, the purpose and the categories of third parties receiving it;
• request deletion, and correction of inaccurate personal information, subject to statutory exceptions;
• opt out of the sale or sharing of personal information, including for cross-context behavioral advertising, via section 7 or by contacting us;
• limit the use and disclosure of sensitive personal information where that right applies;
• act through an authorized agent, and not be discriminated against for exercising a right.

Other states and countries provide comparable rights, some adding a right to appeal a refusal. This website is not designed to make decisions about readers by solely automated means that produce legal or similarly significant effects.

1. Send the request

   Email info@amomana.com with the subject “Privacy Request”, naming the right you want and what it concerns.

2. Verification

   We may ask for proof proportionate to the request so data is not disclosed or deleted for the wrong person, used only for that purpose.

3. Review and reply

   Answered within the period applicable law allows, extended only where the law permits and we tell you why. Requests are free unless the law allows a fee for excessive ones.

4. If you disagree

   Ask for reconsideration, use any statutory appeal route in your state, and, where applicable, complain to a supervisory authority.

In the EEA you may complain to your national authority; the European Data Protection Board publishes the list. In the United Kingdom the regulator is the Information Commissioner’s Office. Contacting us first is welcome but not required.

This website is intended for a general adult audience and is not directed to children. We do not knowingly collect personal information from a child below the age of valid consent where they live: under 13 in the United States, and 13 to 16 depending on the country in Europe.

Where advertising is enabled, the publisher does not knowingly permit the sale or sharing of the personal information of readers under 16. Parents and guardians who believe a child has provided personal information here can write to info@amomana.com so the record can be reviewed and removed.

This policy is reviewed when the website, the configured services or the applicable legal requirements change. The version shown here replaces earlier ones, the review date above changes with the wording, and material changes should be highlighted rather than made silently.

Questions, objections and formal privacy requests all go to info@amomana.com. If something here does not match what you observe on the site, tell us the page and what you saw; that is the fastest way to bring description and practice back into line.