Privacy Policy

Last updated: 2026-07-31

This Privacy Policy explains how Foremy (“Foremy,” “we,” “us,” or “our”), accessible at foremy.com/, collects, uses, discloses, and protects information when you visit our website. It is written to address the requirements of the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). If you have questions, contact us at admin@foremy.com.

1. Who We Are (Data Controller)

For purposes of the GDPR, Foremy is the data controller responsible for the personal data described in this policy. You can reach our privacy contact point at admin@foremy.com.

2. Information We Collect

Information you provide directly: name and email address when you subscribe to our newsletter, submit a comment, or contact us.
Automatically collected information: IP address, browser type and version, device identifiers, operating system, referring URLs, pages viewed, time spent on pages, and general location (city/country level) derived from IP address.
Cookies and similar technologies: as described in our Cookie Policy, including analytics cookies and affiliate/advertising tracking identifiers.
Information from third parties: aggregated or anonymized analytics data from service providers such as web analytics platforms and affiliate networks.

3. How We Use Information

To operate, maintain, and improve the Foremy website and its content.
To send newsletters and updates to subscribers who have opted in (see our Email & Newsletter Policy).
To measure site traffic, understand which content is useful, and detect technical issues.
To track affiliate referrals so that our partners can attribute purchases and pay commissions.
To respond to inquiries, correction requests, and legal notices.
To comply with legal obligations and enforce our Terms of Service.

4. Legal Bases for Processing (GDPR, Article 6)

Consent — for non-essential cookies, newsletter sign-up, and similar optional features. You may withdraw consent at any time.
Legitimate interests — for basic analytics, security, fraud prevention, and improving our content, balanced against your rights and interests.
Contractual necessity — where processing is required to provide a service you have requested (e.g., delivering a newsletter you subscribed to).
Legal obligation — where we must retain or disclose information to comply with law.

5. Sharing of Information

We do not sell personal information for money. We may share information with:

Service providers (hosting, email delivery, analytics) acting as processors under contractual confidentiality and data-protection obligations.
Affiliate networks and advertising partners, generally in the form of pseudonymous identifiers or tracking parameters used for commission attribution and interest-based advertising.
Law enforcement or regulators where required by valid legal process.
A successor entity in the event of a merger, acquisition, or sale of assets, subject to this policy continuing to apply to previously collected data.

6. International Data Transfers

Because Foremy may use service providers located outside your country of residence, your information may be transferred to and processed in countries with different data protection laws than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect data transferred from the EEA/UK.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy: newsletter data until you unsubscribe, comment data for as long as the comment remains published, and analytics data in line with our analytics provider’s default retention windows, unless a longer period is required by law.

8. Your Rights Under the GDPR

If you are located in the EEA, UK, or a jurisdiction with similar protections, you have the right to:

Access the personal data we hold about you;
Request rectification of inaccurate data;
Request erasure (“right to be forgotten”);
Request restriction of processing;
Object to processing based on legitimate interests or for direct marketing;
Request data portability;
Withdraw consent at any time without affecting prior lawful processing;
Lodge a complaint with your local data protection authority.

To exercise these rights, email admin@foremy.com. We will respond within one month as required by Article 12(3) GDPR, with a possible two-month extension for complex requests.

9. Your Rights Under the CCPA/CPRA (California Residents)

If you are a California resident, you have the right to:

Know what categories of personal information we collect, use, and disclose, and the categories of sources and recipients;
Access the specific pieces of personal information collected about you;
Delete personal information we have collected, subject to certain exceptions;
Correct inaccurate personal information;
Opt out of the “sale” or “sharing” of personal information (including cross-context behavioral advertising) — see our dedicated Do Not Sell or Share My Personal Information page;
Limit the use and disclosure of sensitive personal information;
Not receive discriminatory treatment for exercising any of these rights;
Appeal a denial of a rights request (see below).

Categories of Personal Information Collected (CCPA Taxonomy)

Identifiers (e.g., email address, IP address, online identifiers, cookie IDs);
Internet or other electronic network activity (browsing behavior, pages viewed, click-through data);
Geolocation data (approximate, city/region level);
Inferences drawn from the above to create a profile of preferences (e.g., which content categories interest you), used for content personalization and advertising.

We do not knowingly collect sensitive personal information as defined by the CPRA (such as precise geolocation, government identifiers, or health data).

How to Submit a Request

Email admin@foremy.com with the subject “CCPA Request” and specify which right you are exercising. We will verify your request using the email address associated with your account or subscription and respond within 45 days, with a possible 45-day extension where reasonably necessary.

Appeal Process

If we deny your CCPA/CPRA request in whole or in part, you may appeal by replying to our denial email within 30 days with the subject “CCPA Appeal.” We will respond to appeals within 45 days. If your appeal is denied, we will provide you with information on how to file a complaint with the California Privacy Protection Agency.

Authorized Agents

You may designate an authorized agent to submit requests on your behalf. We may require proof of the agent’s authorization and verification of your identity directly.

Shine the Light

California residents may separately request information once per year about disclosures of personal information to third parties for their direct marketing purposes under California Civil Code Section 1798.83. We do not currently share personal information with third parties for their own direct marketing purposes.

10. Children’s Privacy

Foremy is not directed at children under 16, and we do not knowingly collect personal information from children under that age. If we learn we have inadvertently collected such information, we will delete it promptly.

11. Security

We use reasonable administrative, technical, and organizational measures to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.