// Data-Driven Personal Finance

Legal

Privacy Policy

Last updated: August 27, 2026

This policy explains what personal information this site collects, why, who it is shared with, and the rights you have. It is written in plain language and aims to meet the major privacy laws worldwide, including the EU and UK GDPR, Canada's PIPEDA, California's CCPA/CPRA and other US state laws, and Australia's Privacy Act.

Who runs this site and how to contact us

This site, datadrivenpersonalfinance.com, is a personal blog and email newsletter operated by Armin Norouzi, based in Waterloo, Ontario, Canada. For any privacy question, or to exercise your rights, email newsletter@datadrivenpersonalfinance.com. For the purposes of the GDPR and similar laws, Armin Norouzi is the "data controller" for the information described here.

What we collect, why, and our legal basis

Analytics. We use Cloudflare Web Analytics to understand aggregate, non-identifying traffic patterns such as page views, referrers, and approximate (country-level) region. It is cookieless, uses no persistent identifier, and collects no personal data, so it needs no consent and runs for all visitors. We do not use Google Analytics or any advertising or cross-site tracking.

Newsletter. If you subscribe, we collect your email address to send you new articles and occasional updates. We use double opt-in (you confirm via a link) and rely on your consent. Every email includes a one-click unsubscribe, and you can withdraw consent at any time.

Correspondence. If you email us, we keep your message and address only as long as needed to reply.

We do not ask you to create an account, we do not take payments on this site, and we do not collect personal information you do not volunteer.

Cookies

This site sets no advertising or analytics cookies — our analytics (Cloudflare Web Analytics) is cookieless. The only things stored in your browser are functional: your theme choice and any calculator snapshots you save (see below), which stay on your device. Because there are no non-essential cookies, the site shows no cookie-consent banner. You can clear anything stored locally at any time from within a tool or by clearing your browser's site data. If display advertising is ever added, this notice will be updated and consent obtained where required.

Our analytics is Cloudflare Web Analytics, a privacy-first tool that sets no cookies and collects no personal data. It gives us basic aggregate traffic counts without identifying anyone. You can read Cloudflare's description of its cookieless approach on the Cloudflare Web Analytics page and in the Cloudflare Privacy Policy.

Calculators and tools. Every calculator on this site (net worth, mortgage, portfolio analyzer, take-home pay, contribution room, and the rest) runs entirely in your browser. Any figures you enter (income, balances, allocations) are used only to compute results on your device and are never sent to us or stored on a server. Some tools (such as the net worth calculator) can save snapshots in your browser's local storage; that stays on your device, and you can delete it at any time from within the tool or by clearing your browser storage.

Who we share data with, and international transfers

We use the following third-party service providers ("processors"):

  • MailerLite: newsletter delivery and storage of subscriber emails, European Union / United States
  • Cloudflare: website hosting, security, email routing, and cookieless web analytics, global

Because these providers operate partly in the United States, your information may be transferred outside your country, including to the US. For transfers from the EU, UK, and Switzerland we rely on the EU-US Data Privacy Framework adequacy decision and/or the European Commission's Standard Contractual Clauses, together with each provider's own safeguards. Each provider processes data under its own privacy terms. We never sell or rent your personal information.

How long we keep your data

  • Newsletter email addresses: until you unsubscribe or ask us to delete them.
  • Emails you send us: kept only as long as needed to handle your enquiry.

Your privacy rights

Depending on where you live, you may have the right to: access the personal data we hold about you; correct it; delete it; object to or restrict processing; receive a copy in a portable format; withdraw consent at any time; and opt out of any "sale" or "sharing" of your information. To exercise any right, email newsletter@datadrivenpersonalfinance.com. We will not discriminate against you for exercising these rights.

  • EU / UK: you can also lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office, ico.org.uk).
  • Canada: you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

No automated decisions or profiling

We do not use your personal information to make automated decisions that produce legal or similarly significant effects about you, and we do not build advertising or behavioral profiles about you.

California residents (CCPA / CPRA)

In the past 12 months we have collected these categories of personal information: identifiers (your email address if you subscribe; and an IP address processed transiently by our host for security). Our analytics is cookieless and collects no personal information. We collect the above for the newsletter and site-security purposes described above. We do not sell or share your personal information, and we do not use advertising cookies or cross-context behavioral advertising. You have the right to know, delete, correct, and opt out, and to limit the use of sensitive information, and you will not be treated differently for exercising them. If we ever enable advertising features in the future, this notice will be updated and any required opt-out provided.

Other US states

If you live in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another state with a comprehensive privacy law, you have similar rights to access, correct, delete, and obtain a copy of your data, and to opt out of targeted advertising, sale, and profiling. Email us to exercise them.

Australia

We handle personal information consistently with the Australian Privacy Principles. You can ask for access to or correction of your information, or make a complaint, by emailing us; unresolved complaints can be referred to the Office of the Australian Information Commissioner (oaic.gov.au).

EU and UK representative

We are established in Canada and process EU and UK personal data only occasionally, on a small scale, and without large-scale processing of sensitive data. On that basis we rely on the exemption in Article 27(2) of the GDPR (and its UK equivalent) and have not appointed an EU/UK representative. You can reach us directly at newsletter@datadrivenpersonalfinance.com, and EU/UK residents may also contact their local supervisory authority as noted above.

Children's privacy

This site is intended for a general adult audience and is not directed to children. We do not knowingly collect personal information from children under 16 (or the minimum age in your country, which may be as low as 13). If you believe a child has provided us information, email us and we will delete it.

Data security and breaches

We take reasonable technical and organizational measures to protect your information, and our providers maintain their own security programs. No method of transmission over the internet is completely secure. If a breach affecting your personal information occurs, we will notify you and the relevant authorities as required by law.

Third-party links

Articles link to external sources. Those sites have their own privacy practices, which we do not control.

Changes to this policy

We may update this policy. The "last updated" date above shows the current version, and material changes affecting subscribers will be communicated by email.

Contact

Questions about this policy, or a request to access or delete your data: newsletter@datadrivenpersonalfinance.com.