Privacy Policy
Last updated: September 17, 2026
Lindsay Sanchez (“I,” “me,” “my,” or “Author Lindsay Sanchez”) operates the website https://lindsaysanchez.com (the “Site”). This Privacy Policy explains how I collect, use, disclose, and safeguard your information when you visit the Site, sign up for my newsletter, submit a contact form, leave a comment, or otherwise interact with my content.
I am committed to protecting your privacy. This policy applies to visitors who access the Site, including visitors in the European Economic Area (EEA), United Kingdom, and Utah. This page is written in plain language and is not legal advice.
1. Who I Am / Site URL
I am Lindsay Sanchez, author of cozy mysteries and related bookish content. The Site is https://lindsaysanchez.com. For privacy questions or rights requests, please use the contact form at https://lindsaysanchez.com/contact/.
2. Information I Collect
Information you provide directly
- When you sign up for my newsletter (via Kit, formerly ConvertKit), I collect your email address and any optional name or preferences you provide. Newsletter signup is available at https://lindsaysanchez.kit.com/df467d33a4 and may also appear on the Site.
- When you use the contact form, I collect your name, email address, and any message details you submit.
- When you leave a comment on a blog post (if comments are enabled), I collect your name, email address, website (optional), and comment content. Spam protection may be provided by Akismet.
Information collected automatically
Like most websites, certain information is collected automatically when you visit, including:
- IP address
- Device and browser type/version
- Operating system
- Pages viewed, date/time of visit, and time spent
- Referring/exit pages
This may come from hosting/server logs (Bluehost / Newfold hosting) and from Jetpack Stats (Automattic), which is currently active for traffic analytics on the Site.
No sensitive data by design. I do not intentionally collect sensitive personal information (for example health data, precise geolocation, racial or ethnic origin, or financial account details).
3. How I Use Your Information
- Send newsletter updates, book recommendations, writing updates, podcast episodes, or exclusive content (if you subscribed).
- Respond to inquiries or messages submitted via the contact form.
- Moderate and display blog comments (if enabled) and help reduce spam (including via Akismet where used).
- Operate, secure, and troubleshoot the Site (hosting logs, security measures).
- Understand how the Site is used and improve it, including via Jetpack Stats analytics.
- Comply with legal obligations or protect against misuse.
4. Cookies and Similar Technologies
The Site may use cookies and similar technologies. I show a cookie consent banner to visitors in GDPR regions (the EU/EEA and UK) so they can choose whether to allow non-essential cookies and similar technologies. Visitors outside those regions typically will not see the banner. Essential/technical cookies needed for the Site to work may still load. Where the banner is shown, non-essential analytics (including Jetpack Stats) should only run after you give consent.
Essential / technical. Cookies or similar tech may be used for basic site operation (for example session management, security, or remembering preferences needed for the Site to work).
Jetpack Stats (Automattic). Jetpack Stats is used for traffic analytics (for example page views and referrers). I treat this as non-essential analytics. For visitors in GDPR regions (EU/EEA/UK), Jetpack Stats should only run after you accept Statistics/Analytics cookies via the consent banner. Outside those regions, Stats may load in the ordinary course of site analytics. Where the banner is shown, you can change or withdraw cookie choices through the banner controls when available.
Image optimization / CDN. Images may be delivered or optimized through Optimole and/or Jetpack / WordPress.com image CDN services to improve performance.
Kit (newsletter). When you interact with newsletter forms (on the Site or on Kit’s pages), Kit may set cookies or similar technologies related to signup and email delivery.
Google Analytics / Google Tag Manager. Google Site Kit is installed on the Site but is not connected. Google Analytics and GTM are not currently active / not firing. If that changes later, this policy will be updated.
You can also manage cookies through your browser settings. Blocking some cookies may affect how parts of the Site work.
5. Sharing Your Information
I do not sell your personal information. I may share information only with service providers (“processors”) who help me run the Site, and only as needed for those services, or when required by law. Relevant processors may include:
- Kit — newsletter signup and email delivery
- Automattic / Jetpack — WordPress-related services including Jetpack Stats and related CDN/features where used
- Optimole — image optimization / CDN
- Bluehost / Newfold — website hosting
- Akismet — spam protection for comments, if comments are enabled
- Other WordPress/plugins used to operate the Site (for example security, SEO, forms, or redirects) as needed to provide the Site
I may also disclose information if required by law, subpoena, or government request, or to protect the rights, property, or safety of myself or others.
6. Lawful Bases (GDPR-style, plain language)
If you are in the EEA or UK, I rely on one or more of the following bases, depending on the activity:
- Consent — for newsletter signup (and for non-essential analytics if/when a consent banner is used).
- Legitimate interests and/or steps needed to respond to you — for operating a secure Site, preventing spam/abuse, and answering contact-form messages.
- Contract / pre-contract steps — where processing is needed to provide something you asked for (for example answering a specific request).
- Analytics / consent — Jetpack Stats is non-essential analytics. For EU/UK visitors (and where required), I rely on your consent via the cookie banner before running Stats.
7. Retention
I keep personal information only as long as needed for the purposes described above, or as required by law. For example:
- Newsletter data: while you remain subscribed, and for a reasonable period afterward to honor unsubscribe/suppression needs.
- Contact-form messages: for as long as needed to respond and keep a reasonable record of the conversation.
- Comments: while the comment remains published, or until removed.
- Hosting logs and analytics: for limited operational/analytics periods typical of those tools, then deleted or aggregated.
You can request deletion where applicable (see Rights below). Email subscribers can unsubscribe at any time via the link in emails.
8. International Transfers
The Site is hosted in the United States, and several processors (including Kit, Automattic/Jetpack, Optimole, and Bluehost/Newfold) are US-based or may process data in the US or other countries. If you access the Site from outside the US (including the EEA/UK), your information may be transferred to and processed in the United States, where privacy laws may differ from those in your country. Where required, I rely on appropriate safeguards used by these providers (such as standard contractual clauses or equivalent mechanisms they offer).
9. Your Rights
GDPR / UK GDPR (if you are in the EEA or UK). Subject to applicable law, you may have the right to:
- Access your personal data
- Rectify (correct) inaccurate data
- Erase (delete) your data
- Restrict processing
- Data portability
- Object to certain processing (including, where applicable, processing based on legitimate interests)
- Withdraw consent at any time (for example, unsubscribe from the newsletter), without affecting the lawfulness of processing before withdrawal
- Lodge a complaint with your local supervisory authority
Utah residents (Utah Consumer Privacy Act — UCPA). Subject to the UCPA’s thresholds and exemptions, Utah residents may have rights to access, delete, and opt out of certain processing (such as targeted advertising or sales of personal data). I do not sell personal data and I do not engage in targeted advertising as those terms are commonly used under the UCPA. The UCPA also includes a right to correct inaccuracies in personal data (effective July 1, 2026). I will respond to qualifying requests within the time required by applicable law (for example, generally 45 days, with a possible extension where allowed).
To exercise rights, please use the contact form at https://lindsaysanchez.com/contact/. You can unsubscribe from newsletters anytime via the unsubscribe link in emails.
10. Children’s Privacy
The Site is not directed to children under 13. I do not knowingly collect personal information from children under 13 (COPPA-style). If I become aware of such collection, I will delete it promptly. Under GDPR, the age for digital consent can be up to 16 depending on the country; I do not knowingly collect personal data from children below the applicable age. Contact me via the contact form if you believe a child has provided information.
11. Security
I take reasonable measures to protect your information (for example secure forms, limited access, hosting/security tooling, and spam protection where applicable). However, no internet transmission or storage method is 100% secure.
12. Third-Party Links
The Site may link to third parties such as Apple Podcasts, Spotify, YouTube, Amazon, Kit, and other retailers or platforms. Their privacy practices are separate—please review their policies. I am not responsible for the content or privacy practices of those sites.
13. Changes to This Policy
I may update this policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of the Site after changes are posted means you acknowledge the updated policy.
14. Contact
For questions, rights requests, or concerns about this Privacy Policy, please use the contact form at https://lindsaysanchez.com/contact/.
Thank you for trusting me with your information while enjoying cozy mysteries, podcasts, and bookish chats!