RESPECTING YOUR PRIVACY AND SECURITY

PRIVACY POLICY

dandomench.com only retains email addresses; and the first and last names of customers. WE NEVER SELL OR SHARE YOUR NAME OR EMAIL TO ANY THIRD PARTIES.

dandomench.com DOES NOT USE GOOGLE ANALYTICS OR ANY CUSTOMER TRACKING.

dandomench.com DOES NOT ALLOW THIRD-PARTY LOGINS SUCH AS FACEBOOK OR TWITTER FOR YOUR SECURITY.

dandomench.com WILL NEVER STORE OR IN ANY WAY RETAIN YOUR PAYMENT INFORMATION IF YOU CHOOSE TO CONTRIBUTE WITH A PAID SUBSCRIPTION.

STRIPE is the only payment service that ghost.org uses. Click on this link to review the STRIPE Privacy Policy.

dandomench.com is a ghost.org website and complies with GDPR and the California Consumer Privacy Act (CCPA. which governs the collection, processing and selling of California residents’ personal information (PI).

dandomench.com WILL NEVER SELL OR SHARE YOUR PERSONAL INFORMATION AND IS GDPR AND CCPA COMPLIANT.

THE FOLLOWING IS THE GHOST.ORG GDPR PRIVACY POLICY:

We act as both a data processor and a data controller under the GDPR.

When customers use our products and services to process EU personal data, we act as a data processor. For example, we will be a processor of EU personal data and information that gets uploaded into a Ghost site.

We act as a data controller for the EU customer information we collect to provide our products and services and to provide timely customer support. This customer information includes things such as customer name and contact information.

What personal data do we collect and store from our customers?

We store data that customers have given us voluntarily. For example, in our role as data controller, we may collect and store contact information such as name and email address when customers sign up for our products and services or seek support. We also may collect other identifying information from our customers, such as IP address.

We separately act as a data processor when customers use our products and services to process EU personal data, such as uploading personal data to a Ghost site. Customers decide what personal data, if any, is uploaded to our products and services.

What is the Ghost Data Processing Agreement ("DPA")?

Customers that handle EU personal data are required to comply with the privacy and security requirements under the GDPR. As part of this, they must ensure that the vendors they use to process the EU personal data also have privacy and security protections in place. Our DPA outlines the privacy and security protections we have in place. We are committed to GDPR compliance and to helping our customers comply with the GDPR when they use our services. We have therefore made our DPA available to all our customers and it can be found here: Data Processing Agreement.

Are customers required to sign the Ghost DPA?

In order to use our products and services, you need to accept our DPA, which we have provided a link to on our website: Data Processing Agreement. By agreeing to our terms of service, you are automatically accepting our DPA and do not need to sign a separate document.

Can a customer share the Ghost DPA with its customers?

Yes. The DPA is a publicly available document and customers who wish to share it with their customers to confirm our security measures and other terms may feel free to do so.

Do customers need to notify anyone upon accepting our DPA?

No. You are not required to notify us or any third party upon accepting our DPA though, as mentioned above, you are free to do so.

Are there unique DPA needs for individual countries?

The GDPR applies to all of the EU and we offer a DPA that is compliant in all EU countries.

Do we transfer data internationally?

Ghost stores all data in the EU. In certain circumstances, we will process personal data that originates from the EU in outside of the EU when conducting support and maintenance of our services. We provide a level of protection of privacy that complies with the EU rules.

How do we handle delete instructions from website owner customers?

Customers have the ability to remove or delete information they have uploaded to our products. Likewise, customers may deactivate their account and request that all personal data we have collected and stored is deleted. Log into your account at my.ghost.org for further instructions.

How can a website owner download content from our services and transfer it to another provider?

You can easily download all content from a Ghost site at any time by exporting content or theme using the UI provided within Ghost Admin. If you wish to download a copy of your image assets, we are also more than happy to provide those by emailing support@ghost.org.FAQ