Privacy Policy (UK GDPR)
Last updated: 22/01/26
Who we are
This website is a personal blog.
Website address: https://samcabrera.com
Data controller: Samantha Cabrera-Díaz
Jurisdiction: United Kingdom
For the purposes of UK data protection law, the data controller is the owner of this website.
What personal data we collect and why we collect it
Comments
When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string. This data is collected to help detect spam, maintain website security, and enable comments to be displayed correctly.
An anonymised string (hash) created from your email address may be provided to the Gravatar service to check whether you are using it. The Gravatar service privacy policy is available at https://automattic.com/privacy/.
Once your comment is approved, your profile picture (if associated with Gravatar) may be visible to the public alongside your comment.
Lawful basis: Legitimate interests (Article 6(1)(f) UK GDPR).
Media
If you upload images to the website, you should avoid uploading images that include embedded location data (EXIF GPS). Visitors to the website can download and extract any location data from images published on the site.
Cookies
This website uses cookies to ensure it functions properly and to improve user experience.
- If you leave a comment, you may opt in to saving your name, email address, and website in cookies for convenience. These cookies last for one year.
- When you visit the login page, a temporary cookie is set to check whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
- When you log in, cookies are set to save your login details and screen display preferences. Login cookies last two days; screen preference cookies last one year.
- Selecting “Remember Me” will keep you logged in for two weeks.
- If you edit or publish an article, an additional cookie is stored containing only the post ID. This expires after one day.
Essential cookies are always enabled. Non-essential cookies will only be used where you have provided consent.
Lawful basis: Legitimate interests and, where applicable, consent.
Embedded content from other websites
Articles on this site may include embedded content (for example videos, images, or articles). Embedded content from other websites behaves in the same way as if you visited the external website directly.
These external websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content, particularly if you have an account with, and are logged into, that service.
Analytics
This website may use Google Analytics to understand how visitors interact with the site. Google Analytics uses cookies to collect information such as pages visited, time spent on pages, and general location data (for example country or city).
The data collected is aggregated and anonymised where possible and is used solely to improve website performance and content.
IP anonymisation is enabled where available.
Google may process this data outside the UK. Where this occurs, appropriate safeguards are relied upon in accordance with UK GDPR.
You can opt out of analytics tracking through your browser settings or Google’s opt-out tools.
Lawful basis: Consent (Article 6(1)(a) UK GDPR).
Email subscriptions
If you subscribe to the website mailing list, we collect your email address and, where provided, your name.
This information is used solely to send you updates, blog posts, or other content you have chosen to receive.
Email subscriptions are managed using MailPoet. Your data is stored securely and is not shared with third parties for marketing purposes.
You may unsubscribe at any time using the link included in every email.
Lawful basis: Consent (Article 6(1)(a) UK GDPR).
Who we share your data with
We do not sell or trade your personal data.
If you request a password reset, your IP address will be included in the reset email as a security measure.
Visitor comments may be checked through automated spam-detection services.
How long we retain your data
- Comments and their metadata are retained indefinitely to allow recognition and approval of follow-up comments.
- For registered users (if any), personal data provided in user profiles is retained until the user deletes it or requests erasure.
- Website administrators may view and edit user data where necessary for site administration.
Your rights under UK GDPR
Under UK data protection law, you have the right to:
- request access to your personal data,
- request correction of inaccurate or incomplete data,
- request erasure of your personal data,
- request restriction of processing,
- object to processing,
- request data portability, where applicable.
To exercise any of these rights, you may contact the site owner via the contact details provided on the website.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been mishandled.
ICO website: https://www.ico.org.uk
Where your data is sent
Visitor comments may be checked through automated spam-detection services, which may process data outside the UK. Where this occurs, appropriate safeguards are relied upon in accordance with UK GDPR.
Changes to this policy
This Privacy Policy may be updated from time to time to reflect legal, technical, or operational changes. The most current version will always be published on this page.