PRIVACY POLICY

Effective as of May 01, 2025.

Welcome to Enby Meaning™ ("Company," "we," "us," or "our").

Thank you for choosing to be part of our community. We are committed to protecting your personal information and upholding your privacy rights across all jurisdictions in which we operate.

When you visit our website, https://enbymeaning.com (the "Website"), and more broadly, when you use any of our digital services, communications, features, or engage with us through sales, marketing, or events (collectively, the "Services"), you entrust us with your personal information. We take that responsibility seriously.

This Privacy Policy explains, in a clear and legally robust manner, what personal data we collect, how we use it, under what circumstances we may share it, and what rights you have in relation to that data. We encourage you to read this notice in full to understand our practices and your rights.

This Privacy Policy is designed to comply with all applicable data protection laws and frameworks, including but not limited to:

  • The General Data Protection Regulation (EU) 2016/679 ("GDPR")

  • The UK General Data Protection Regulation and Data Protection Act 2018

  • The New Zealand Privacy Act 2020

  • The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA)

  • Other relevant federal and state laws in the United States, including Florida law

  • Emerging or applicable global privacy regulations where users may access our Services

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with any part of this notice, you must discontinue use of our Services immediately.

If you have any questions, concerns, or requests regarding this notice or your personal data, please contact us at: legal@enbymeaning.com.

TABLE OF CONTENTS

  1. What Information Do We Collect?

  2. How Do We Use Your Information?

  3. Legal Bases for Processing Personal Data (GDPR/UK GDPR)

  4. Will Your Information Be Shared With Anyone?

  5. International Data Transfers

  6. Do We Use Cookies and Other Tracking Technologies?

  7. Third-Party Websites and Services

  8. How Long Do We Keep Your Information?

  9. How Do We Keep Your Information Safe?

  10. Your Privacy Rights (NZ, EU, UK, US & Global)

  11. How to Exercise Your Rights

  12. Do Not Track Features and Global Privacy Control Signals

  13. Children’s Privacy (COPPA, NZ, EU)

  14. Advertising, Affiliate, and Sponsored Content Disclosures

  15. Automated Decision-Making and Profiling (optional but useful for EU compliance if relevant)

  16. Data Subject Requests: Access, Rectification, Deletion

  17. Do California Residents Have Specific Privacy Rights? (CCPA/CPRA)

  18. Do New Zealand Residents Have Specific Privacy Rights?

  19. Do UK and EU Residents Have Specific Privacy Rights?

  20. Australia, Canada, and Other Jurisdiction-Specific Rights

  21. Updates to This Privacy Policy

  22. How Can You Contact Us About This Notice?

  23. How Can You Review, Update or Delete the Data We Collect From You?

1. WHAT INFORMATION DO WE COLLECT?

In Short: We collect personal information that you provide to us directly, automatically through your use of our Website and Services, and from third-party sources, in accordance with applicable data protection laws.

A. Personal Information You Disclose to Us

We collect personal information that you voluntarily provide to us when you:

  • Sign up for our newsletter, services, or contact us

  • Make a purchase or donation

  • Participate in surveys, events, or promotional campaigns

  • Submit content (e.g. testimonials, forms, comments)

  • Communicate with us via email, contact forms, or social media

The types of personal information may include:

  • Identifiers: name, email address, postal address, phone number, social media handles, IP address

  • Demographic data: age, gender (if provided), pronouns, country of residence

  • Account data: username, password, preferences

  • Transactional data: billing address, payment method (card brand, expiration date – not full card number), order history

  • Contact data: preferences for communication, consent records

  • Other information: any content you voluntarily provide, such as in comments, reviews, or email

We do not require you to provide special category (sensitive) data, such as health information, ethnicity, or religious beliefs. If you choose to provide such data voluntarily, you consent to our processing of it for the stated purpose.

B. Payment Information

If you make purchases or donations through our Website, we collect payment data via secure third-party processors.

We do not store your full credit/debit card details. Payment information (such as card number, expiration, and CVC) is processed securely through:

  • Stripe – for global and card payments

  • PayPal – for PayPal accounts

These processors may collect information directly from you, such as name, email, billing address, phone number, IP address, device fingerprinting, and transaction history. Your use of their services is governed by their respective privacy policies.

C. Information Collected Automatically

When you visit or interact with our Website, we automatically collect certain information for operational, security, and analytics purposes. This data may include:

  • Device Data: IP address, browser type, device type, operating system, language settings, access times, and geolocation data (if enabled)

  • Usage Data: referring URLs, time spent on pages, click paths, search terms, and interaction with on-page elements

  • Cookies & Tracking: We use cookies, web beacons, and similar technologies to improve performance, remember preferences, personalise content, and analyse traffic. See our Cookie Policy for details.

Where required, we seek your consent for cookie placement and provide options to manage preferences.

D. Information From Third Parties

We may receive personal data about you from third-party services, partners, or public sources where lawful to do so. This may include:

  • Social media platforms (e.g. Meta, Instagram, LinkedIn)

  • Email marketing platforms (e.g. ConvertKit, Mailchimp)

  • Analytics providers (e.g. Google Analytics)

  • Affiliate partners and sponsors

  • Public records or databases

This data is subject to your privacy settings on those platforms and will only be used for the specific purposes for which it was shared.

E. Children’s Data

Our Services are not directed to children under 16. We do not knowingly collect personal information from minors. If you believe we have collected information from a child under 16 (or the minimum legal age in your country), please contact us at legal@enbymeaning.com, and we will promptly delete the data.

2. HOW DO WE USE YOUR INFORMATION?

In Short: We process your personal data lawfully, fairly, and transparently for specific, legitimate purposes. These purposes include providing our services, improving user experience, communicating with you, complying with legal obligations, and safeguarding our platform and community.

We use the personal information we collect via our Website and Services for the following purposes, based on one or more of the following legal bases: consent, contract performance, legitimate interest, and legal obligation.

A. To Provide and Maintain Our Services

  • To create and manage user accounts

  • To fulfil and manage orders, subscriptions, or donations

  • To enable purchases or transactions through trusted third-party payment processors

  • To personalise content, preferences, and user experience
    Legal basis: Performance of a contract; Legitimate interests

B. To Improve, Monitor, and Secure Our Website and Services

  • To analyse trends and traffic

  • To conduct internal testing and quality assurance

  • To detect, investigate, and prevent fraud, abuse, or security threats

  • To administer technical operations, data security, and analytics
    Legal basis: Legitimate interests; Legal obligation

C. To Respond to Your Inquiries and Requests

  • To provide customer support and resolve issues

  • To process contact form submissions, email inquiries, or user feedback

  • To publish testimonials (with explicit consent)
    Legal basis: Consent; Legitimate interests; Performance of a contract

D. To Communicate With You

  • To send administrative emails and service announcements

  • To provide updates about your account, orders, or policy changes

  • To respond to legal requests and enforce our policies
    Legal basis: Legal obligation; Performance of a contract; Legitimate interests

E. For Marketing and Promotional Purposes

  • To send newsletters or promotional content (only with opt-in consent)

  • To conduct surveys or promotional events

  • To deliver targeted content and advertisements based on your interests and preferences (with cookie consent where required)
    Legal basis: Consent; Legitimate interests

You may opt out of non-essential communications at any time by clicking "unsubscribe" in our emails or by contacting us at legal@enbymeaning.com.

F. To Comply With Legal Obligations

  • To meet requirements under tax law, e-commerce law, privacy law, and consumer protection law

  • To cooperate with law enforcement, regulators, or courts when required by applicable law
    Legal basis: Legal obligation

3. LEGAL BASES FOR PROCESSING PERSONAL DATA (GDPR/UK GDPR)

In Short: We only process your personal information when we have a legal basis to do so under applicable law.

Depending on your jurisdiction and the context in which we collect your personal information, we may rely on one or more of the following legal bases to process your data:

  • Consent: You have given clear and specific consent for us to process your personal data for a specific purpose. This includes situations where you voluntarily subscribe to our newsletters, submit content, or opt in to marketing communications. You may withdraw your consent at any time by contacting us at legal@enbymeaning.com.

  • Contractual Necessity: Processing is necessary to enter into or perform a contract with you. This includes providing access to our services, handling purchases, or responding to inquiries initiated by you.

  • Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject. For example, we may be required to retain certain records for tax or accounting purposes or respond to lawful data access requests.

  • Legitimate Interests: Processing is necessary for our legitimate business interests (or those of a third party), provided those interests are not overridden by your rights and freedoms. These interests include improving our services, detecting and preventing fraud, securing our platform, understanding usage patterns, and communicating with our users.

  • Vital Interests: Processing is necessary to protect your vital interests or those of another natural person (e.g., in case of emergency).

  • Public Interest: In rare cases, we may process personal data if it is necessary for a task carried out in the public interest or in the exercise of official authority.

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or other jurisdictions that require it, we ensure that any transfer of personal data complies with applicable legal mechanisms and safeguards.

4. WILL YOUR INFORMATION BE SHARED WITH ANYONE?

In Short: We only share your information where necessary, and in accordance with applicable privacy laws. We do not sell your personal data.

We may process or share your personal information in the following circumstances, with appropriate safeguards and legal bases under the GDPR, UK GDPR, New Zealand Privacy Act 2020, CCPA/CPRA, and other international data protection laws:

A. With Your Consent

We may share your personal information where you have given us explicit consent to do so for a specific purpose.

Legal basis: Consent (Article 6(1)(a) GDPR)

B. To Fulfil a Contract or Provide Services

We may share data with third-party service providers who help us operate our Website and Services (e.g., payment processors, email delivery platforms, IT service providers, legal advisors), where such sharing is necessary for the performance of a contract with you.

Examples of service providers include:

  • Stripe and PayPal for secure payment processing

  • Cloud-based platforms for customer relationship management (e.g., newsletter delivery)

  • Website analytics providers (e.g., Google Analytics)

All service providers are contractually bound by confidentiality and data protection obligations and may only use your information on our behalf and under our instructions.

Legal basis: Performance of a contract; Legitimate interests

C. Legal Obligations and Law Enforcement

We may disclose your information where required to comply with applicable laws and regulations, or to respond to a lawful request, court order, subpoena, or legal process. This includes lawful access by authorities in jurisdictions where we or our processors operate.

Legal basis: Legal obligation; Vital interests

D. Business Transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, acquisition, asset sale, financing, or other corporate transaction. If the transaction results in a material change to your rights, we will provide notice and your choices where required.

Legal basis: Legitimate interests; Performance of a contract

E. To Protect Rights and Prevent Harm

We may share your data when necessary to protect the rights, property, or safety of our users, the public, or ourselves—such as for fraud prevention or to enforce legal claims.

Legal basis: Legitimate interests; Vital interests

F. With Other Users (User-Generated Content)

If you voluntarily share personal information in public areas of the Website (e.g., blog comments, forums), it may be viewed and used by others, and may persist even after deletion. We advise caution when disclosing sensitive data in public areas.

Legal basis: Consent; Legitimate interests

We do not sell, rent, or trade your personal information to third parties for monetary gain. If we ever change this practice, we will notify you and provide a right to opt out in accordance with applicable laws (including the CCPA/CPRA).

5. INTERNATIONAL DATA TRANSFERS

In Short: We may transfer, store, and process your information outside of your country of residence, but we do so in accordance with applicable data protection laws.

Enby Meaning is a global entity, and to provide our Services, your personal data may be transferred to and processed in countries outside of your country of residence, including the United States, New Zealand, the European Union, and other jurisdictions where we or our service providers operate.

When we transfer personal data internationally, we ensure appropriate safeguards are in place to protect your privacy and data rights. These safeguards may include:

  • Adequacy Decisions: Where applicable, we rely on the European Commission’s or UK Government’s adequacy decisions that confirm the receiving country provides an adequate level of data protection.

  • Standard Contractual Clauses (SCCs): For transfers outside the EEA, UK, or other jurisdictions with adequacy decisions, we use SCCs approved by the European Commission or UK Information Commissioner’s Office, as applicable.

  • Binding Corporate Rules: Where applicable, our service providers may implement approved internal policies that ensure adequate protection of personal data within multinational corporate groups.

  • Explicit Consent: In the absence of appropriate safeguards, we may rely on your explicit consent for international data transfers, in compliance with applicable data protection laws.

By using our Services, you acknowledge that your data may be transferred to and processed in jurisdictions that may not provide the same level of protection as your home country. However, we take all necessary steps to ensure your data remains protected in accordance with this Privacy Policy and applicable legal requirements.

If you would like more information about the safeguards we use for international transfers, please contact us at legal@enbymeaning.com.

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: Yes, we use cookies and similar technologies to improve user experience, analyse traffic, personalise content, and deliver targeted ads—with consent where required.

A. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, analyse traffic patterns, and improve functionality.

B. Types of Cookies We Use

We use the following types of cookies on our Website:

  • Strictly Necessary Cookies: Essential for site functionality (e.g., login, security). These cannot be switched off.

  • Performance & Analytics Cookies: Help us understand how visitors interact with the Website (e.g., Google Analytics).

  • Functional Cookies: Remember your preferences (e.g., language, region).

  • Targeting/Advertising Cookies: Used to show personalised ads based on your browsing behaviour.

Some cookies are set by third-party services, including social media platforms and advertisers. These third parties may use cookies to track your activity across websites.

C. Legal Basis and Consent Management

In compliance with the EU GDPR, UK GDPR, and similar global regulations:

  • Consent is required before placing non-essential cookies (e.g., analytics, advertising) on your device.

  • Visitors in regions requiring consent will see a cookie banner or pop-up when first visiting our site.

  • You may withdraw or change your consent at any time using our cookie settings tool.

D. How to Control Cookies

You can control and disable cookies through:

  • Our Website Cookie Preferences Tool

  • Your browser settings (most browsers allow you to block or delete cookies)

  • Opt-out links, such as:

Note: Disabling certain cookies may affect site functionality or your user experience.

E. Other Tracking Technologies

We may also use:

  • Web beacons (also known as pixel tags or clear GIFs) to track interactions with emails or measure campaign effectiveness.

  • Local storage or session storage to remember settings between visits.

These technologies work similarly to cookies and fall under the same regulatory standards.

7. THIRD-PARTY WEBSITES AND SERVICES

In Short: We are not responsible for the privacy, security, or content of third-party websites or services linked on or through our Website.

Our Website may contain links to third-party websites, applications, plug-ins, content, or services (collectively, “Third-Party Services”) that are not operated or controlled by Enby Meaning. These may include external payment processors, advertising partners, affiliate platforms, social media networks, or embedded content from other websites.

When you interact with or click on a Third-Party Service, you may be providing personal data directly to them, and such data will be subject to the third party’s own privacy policies and terms of use. We do not control and are not responsible for how these third parties collect, use, or share your data.

We strongly encourage you to review the privacy notices and data protection practices of any Third-Party Services before engaging with them or submitting your personal information.

Examples include, but are not limited to:

  • Embedded YouTube or Vimeo videos

  • Social media sharing tools (e.g., Facebook, X/Twitter, Instagram)

  • Affiliate or product recommendation platforms

  • Payment processors like Stripe or PayPal

Disclaimer: Linking to a third-party site does not imply endorsement or affiliation. We disclaim all responsibility for any loss or damage that may arise from your use of them.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We retain personal information only for as long as necessary to fulfill the purposes outlined in this notice, unless a longer retention period is required or permitted by law.

We will retain your personal information only for as long as is reasonably necessary for the purposes set out in this Privacy Policy, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements across jurisdictions in which we operate, including but not limited to the United States (including California and Florida), New Zealand, the United Kingdom, and the European Union.

In determining appropriate data retention periods, we consider the:

  • Amount, nature, and sensitivity of the personal data

  • Risk of harm from unauthorised use or disclosure

  • Purpose(s) for which we process your data and whether we can achieve those through other means

  • Legal requirements, including statutory retention periods and evidentiary obligations

For example:

  • Email or contact information used for marketing may be retained until you unsubscribe or withdraw consent.

  • Financial transaction records may be retained for up to 7 years in accordance with tax and audit obligations.

  • Customer support communications may be kept for 2–3 years after resolution to ensure service continuity and compliance.

When retention is no longer necessary, we will either securely delete or anonymise your information, or if not immediately possible (for example, where data is stored in backup archives), isolate it from any further processing until deletion is feasible.

If you request to delete your data, we will follow the procedure outlined in Section 14: How You Can Review, Update or Delete the Data We Collect from You.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We implement industry-standard technical and organisational security measures to protect your personal data. However, no system can be guaranteed 100% secure.

We have implemented appropriate administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of your personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

These safeguards include but are not limited to:

  • Encryption of data in transit and at rest (e.g., SSL/TLS for website traffic, AES-256 for stored data)

  • Access controls limiting data access to authorised personnel on a need-to-know basis

  • Firewalls and intrusion detection systems to monitor and prevent unauthorised access

  • Secure data centres with physical access restrictions

  • Regular audits, vulnerability scans, and penetration testing

  • Two-factor authentication (2FA) for access to administrative tools and payment systems

We also require our third-party service providers and partners (such as Stripe and PayPal) to use similar security measures and to comply with all relevant privacy laws and contractual obligations.

Despite our best efforts, no electronic transmission or digital storage system can be guaranteed to be completely secure. You acknowledge that by using our Services, you transmit your data at your own risk.

Your Responsibilities:
To help maintain the security of your information, we ask that you:

  • Keep your passwords confidential

  • Log out of your account when using shared devices

  • Use strong, unique passwords

  • Notify us immediately at legal@enbymeaning.com if you believe your data or our systems have been compromised

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the appropriate supervisory authorities in accordance with applicable laws, including the NZ Privacy Act 2020, the GDPR, UK GDPR, and the CCPA/CPRA.

10. YOUR PRIVACY RIGHTS (NZ, EU, UK, US & GLOBAL)

In Short: Depending on your location, you may have specific rights under data protection laws regarding access to, correction of, or deletion of your personal data. We honour and respond to all valid rights requests in accordance with the applicable jurisdiction.

A. Your Rights Under the New Zealand Privacy Act 2020

If you are located in New Zealand, you have the right to:

  • Request access to personal information we hold about you.

  • Request correction of that information if you believe it is inaccurate, incomplete, or misleading.

  • Complain to the Office of the Privacy Commissioner (www.privacy.org.nz) if you believe we’ve breached your rights.

B. Your Rights Under the EU General Data Protection Regulation (GDPR)

If you are located in the European Economic Area (EEA), you have the right to:

  • Access: Request a copy of the personal data we hold about you.

  • Rectification: Request correction of inaccurate or incomplete data.

  • Erasure (“Right to be Forgotten”): Request deletion of your data in certain circumstances.

  • Restriction: Request limitation of our processing under specific conditions.

  • Data Portability: Receive your data in a structured, commonly used, and machine-readable format.

  • Objection: Object to our processing of your data where we rely on legitimate interests.

  • Withdraw Consent: Where processing is based on consent, withdraw consent at any time.

You may lodge a complaint with your local supervisory authority. A list is available at:
https://edpb.europa.eu/about-edpb/about-edpb/members_en

C. Your Rights Under the UK GDPR & Data Protection Act 2018

UK residents enjoy similar rights to those under the EU GDPR, enforced by the Information Commissioner’s Office (ICO). You can learn more or lodge a complaint at: https://ico.org.uk

D. Your Rights Under U.S. State Laws (Including California)

If you are a resident of California or certain U.S. states with comprehensive privacy laws, you may have the right to:

  • Know what personal information we collect, use, disclose, or sell.

  • Access specific pieces of information we hold about you.

  • Request deletion of your personal information.

  • Opt out of the sale or sharing of your personal information (where applicable).

  • Non-discrimination for exercising your privacy rights.

To exercise these rights, you may submit a verifiable request to us using the contact information provided in Section 14.

Additional U.S. state rights (e.g., Virginia, Colorado, Connecticut) will be honoured where legally required.

E. Global Privacy Principles

Regardless of where you reside, we are committed to:

  • Responding to all valid requests regarding access, correction, deletion, and objections.

  • Providing clear and transparent communication about your rights and our data use.

  • Using your data only for lawful, fair, and transparent purposes.

To exercise any of the above rights, please contact us at legal@enbymeaning.com with the subject line “Privacy Rights Request.” We will verify your identity before responding and will comply as required by applicable law.

11. HOW TO EXERCISE YOUR RIGHTS

In Short: Depending on your location, you may have the right to access, correct, delete, or restrict how we use your personal information. We are committed to honouring all applicable legal rights and requests.

A. Submitting a Request

You may exercise your rights under applicable data protection laws by contacting us using one of the methods below. We will respond in accordance with the timeframes and procedures required by law:

  • Email: legal@enbymeaning.com

  • Post (U.S.):
    Enby Meaning LLC
    c/o Northwest Registered Agent LLC
    7901 4th St N, STE 300
    St. Petersburg, FL 33702
    United States

  • Post (New Zealand):
    Enby Meaning (NZ-based operations)
    [Physical mailing address]

We may require you to verify your identity before acting on your request, especially when the request pertains to access, deletion, or sensitive personal data.

B. Identity Verification

For your protection, we may ask you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorised representative.

This may include:

  • A government-issued ID or passport (only if required by law)

  • Matching previously provided contact details (email, phone number)

  • A declaration under penalty of perjury (for California residents)

We will only use this information to verify your identity and process your request.

C. Authorised Representatives

If you are submitting a request on behalf of another individual (such as under the CCPA or GDPR), you must provide documentation proving legal authority (e.g. power of attorney, written permission signed by the data subject).

D. Response Timeframes

  • EEA, UK, NZ: We aim to respond within one month of receiving a valid request.

  • California (CCPA): We aim to respond within 45 days, with a possible 45-day extension if reasonably necessary.

  • Other Jurisdictions: We follow applicable legal timeframes where required.

If we are unable to fulfil your request, we will provide you with a written explanation, including the legal basis for refusal and your right to lodge a complaint with a relevant supervisory authority.

E. No Discrimination

We will not discriminate against you for exercising your legal privacy rights. This includes denying you services, charging different prices, or altering service levels or quality.

12. CONTROLS FOR DO-NOT-TRACK FEATURES

In Short: Most browsers and devices include a Do-Not-Track (DNT) setting. Currently, we do not respond to DNT signals, as no uniform standard exists.

Do Not Track (DNT):
Some web browsers and mobile operating systems include a Do Not Track (DNT) feature or setting you can activate to signal your preference that your online browsing activities not be tracked across different websites. At this time, no legally binding or commonly accepted standard for recognising and responding to DNT signals has been established.

As such, we do not currently respond to DNT signals or any other mechanism that automatically communicates your choice not to be tracked online.

Global Privacy Control (GPC):
Where required by applicable law (e.g. California Consumer Privacy Act (CCPA/CPRA), Colorado Privacy Act, and other U.S. state laws), we recognise and honour Global Privacy Control (GPC) signals. GPC is a browser or device-level signal that indicates a consumer's desire to opt out of the sale or sharing of personal information or targeted advertising.

When we detect a valid GPC signal from a supported browser or extension, we will treat it as a legally valid opt-out request from that browser or device for the relevant data processing purposes (e.g. targeted advertising or sale of data), to the extent required by law.

For more information on GPC and how to use it, please visit https://globalprivacycontrol.org.

If a standard for online tracking is adopted in the future that we are required to follow, we will inform you in a revised version of this Privacy Policy.

For more information about our use of cookies and tracking technologies and your control options, please see Section 6: Do We Use Cookies and Other Tracking Technologies? and our Cookie Policy.

13. CHILDREN’S PRIVACY (COPPA, NZ, EU)

In Short: We do not knowingly collect, process, or solicit personal data from children under the age of 13 (or the applicable age of digital consent in your jurisdiction). If we become aware that we have inadvertently collected such data, we will take immediate steps to delete it.

United States (COPPA Compliance):
Under the Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. Our Website and Services are not directed at or intended for children. If you are a parent or guardian and believe your child under 13 has provided us with personal information without your consent, please contact us immediately at legal@enbymeaning.com, and we will take steps to remove the data promptly.

European Union (GDPR):
In accordance with Article 8 of the General Data Protection Regulation (GDPR), we do not process personal data of children under the age of 16 without parental or guardian consent, unless a lower age threshold is set by the Member State (not below 13). If we learn that we have collected personal data from a child without the appropriate consent, we will delete it as soon as reasonably practicable.

New Zealand (Privacy Act 2020):
We do not knowingly collect personal information from children under 16 unless we have obtained the express permission of a parent or legal guardian. Any such collection will be limited, proportionate, and used only for the express purpose for which consent was granted.

Parental Rights:
If you believe that your child has submitted personal data to us without your consent, you have the right to request access to that data and request its deletion. Please contact us at legal@enbymeaning.com with "Children’s Privacy Request" in the subject line.

14. ADVERTISING, AFFILIATE, AND SPONSORED CONTENT DISCLOSURES

In Short: We believe in transparency and ethical practice. Some content on our Website may include affiliate links, advertisements, or sponsored posts. These are clearly disclosed, and we only partner with brands that align with our values.

Affiliate Links: Some links on our Website may be affiliate links, meaning we may earn a small commission—at no additional cost to you—if you click through and make a purchase. This helps support our work and maintain our platform. We only recommend products or services we genuinely believe in or have vetted.

Affiliate relationships include, but are not limited to, programs through:

  • Amazon Associates (U.S. and international)

  • Bookshop.org

  • ShareASale

  • Commission Junction

  • Awin

  • Other relevant ethical and/or LGBTQ+ supportive affiliate platforms

You will always know when a link is an affiliate link through either inline notation, an icon, or a disclosure statement at the top or bottom of the post.

Sponsored Content: Occasionally, we may collaborate with brands or organisations to feature sponsored content. Sponsored content is always marked clearly—typically at the top of the page—with a notice such as “This post is sponsored by…” or “In partnership with…”. We only accept sponsorships that align with our values of inclusivity, justice, accessibility, and ethical conduct.

Sponsored content does not influence our editorial integrity. All opinions expressed are our own unless explicitly stated.

Display Advertising: We may display ads on our Website from third-party advertising networks. These may be personalised or non-personalised depending on your privacy settings and jurisdiction. These networks may collect anonymised data via cookies or other tracking technologies to display ads tailored to your interests. You may opt out of interest-based advertising through the settings on your browser or by visiting www.aboutads.info/choices or www.youronlinechoices.eu.

We are not responsible for the accuracy, reliability, or practices of third-party advertisers or vendors. Please refer to their privacy policies for more information.

Endorsement Disclaimer: Any product claims, statistics, quotes, or other representations about a product or service should be verified directly with the provider. Enby Meaning is not liable for any dissatisfaction, damage, or issues arising from purchases made through affiliate or advertising links.

15. AUTOMATED DECISION-MAKING AND PROFILING (IF APPLICABLE)

In Short: We do not engage in fully automated decision-making that has legal or similarly significant effects on individuals. Any profiling is limited, transparent, and based on consent or legitimate interest.

What This Means

Under certain privacy laws such as the EU and UK GDPR, individuals have the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects or significantly affects them. Other jurisdictions, such as New Zealand and certain U.S. states (e.g., California, Colorado), provide similar or emerging protections.

Our Current Practices

At present, Enby Meaning:

  • Does not use any automated systems to make decisions that have legal or comparable significant effects on users.

  • May use limited forms of profiling (e.g., to deliver personalised content, advertising, or email recommendations) based on user interactions with our website, only where:

    • You have given explicit consent, or;

    • The processing is necessary for the performance of a contract, or;

    • We rely on a legitimate interest, balanced against your rights and freedoms.

Profiling used for analytics or advertising purposes is non-intrusive and does not involve sensitive categories such as gender identity, race, health data, or religious beliefs without your clear consent.

Your Rights

Depending on your jurisdiction, you may have the right to:

  • Object to profiling or automated processing

  • Request human intervention in decision-making

  • Receive an explanation of how such decisions are made

  • Contest the outcome of any automated decision

To exercise these rights or inquire whether a decision affecting you was made using automated processing, contact us at legal@enbymeaning.com.

16. DATA SUBJECT REQUESTS: ACCESS, RECTIFICATION, DELETION

In Short: You have the right to access, correct, or request deletion of the personal data we hold about you, subject to applicable law and certain limitations.

Your Rights

Depending on your jurisdiction, including New Zealand, the European Economic Area (EEA), the United Kingdom, and certain U.S. states, you may exercise the following rights regarding your personal data:

  • Right of Access: You may request confirmation of whether we process your personal data and obtain a copy of the data we hold about you.

  • Right of Rectification: You may request correction of inaccurate, outdated, or incomplete personal information.

  • Right of Erasure ("Right to Be Forgotten"): You may request deletion of your personal data when:

    • It is no longer necessary for the purposes it was collected;

    • You withdraw your consent (where applicable);

    • You object to processing and there are no overriding legitimate grounds;

    • The data was unlawfully processed;

    • The data must be erased to comply with a legal obligation.

We may deny a deletion request where we are required or permitted by law to retain certain data (e.g., tax, legal defence, fraud prevention, or compliance obligations).

Submitting a Request

To exercise these rights, you may submit a request by emailing us at:
📧 legal@enbymeaning.com
Include the subject line: “Data Subject Request – [Access/Correction/Deletion]”

Please include:

  • Your full name and email address associated with your interaction with us

  • The specific right(s) you wish to exercise

  • Any relevant supporting information

We may request additional verification to confirm your identity before acting on your request.

Response Timeframes

We aim to respond to valid requests within:

  • 30 days (as required under the NZ Privacy Act and GDPR)

  • 45 days (under the CCPA/CPRA), with one optional extension of another 45 days if reasonably necessary

If we are unable to fulfil your request or must limit it due to legal obligations, we will explain the reasons in our response.

17. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS? (CCPA/CPRA)

In Short: Yes. If you are a California resident, you are granted specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Under the California Consumer Privacy Act of 2018 (CCPA) and its 2020 amendment via the California Privacy Rights Act (CPRA), California residents have the following rights regarding their personal information:

A. Right to Know and Access

You have the right to request that we disclose the following about your personal information collected over the past 12 months:

  • The categories of personal information collected.

  • The specific pieces of personal information collected.

  • The categories of sources from which the personal information was collected.

  • The business or commercial purpose for collecting, sharing, or selling personal information.

  • The categories of third parties with whom we disclose or share personal information.

B. Right to Request Deletion

You may request that we delete personal information we have collected about you, subject to certain exceptions permitted by law (e.g., to complete a transaction, comply with legal obligations, or detect security incidents).

C. Right to Correct Inaccurate Information

You may request that we correct inaccurate personal information that we maintain about you.

D. Right to Opt-Out of Sale or Sharing of Personal Information

Enby Meaning does not sell personal information, including for purposes of behavioural advertising. However, if this changes in the future, you will be provided with a mechanism to opt-out as required by law.

E. Right to Limit Use and Disclosure of Sensitive Personal Information

If we collect “sensitive personal information” as defined under California law (e.g., precise geolocation, financial account details, racial or ethnic origin, health data), you have the right to direct us to limit its use to only what is necessary to perform our services or comply with the law.

F. Right to Non-Discrimination

We will not discriminate against you for exercising your rights under the CCPA/CPRA, including by:

  • Denying you services.

  • Charging you different prices or rates.

  • Providing a different level or quality of services.

  • Suggesting you may receive a different price or quality of service.

G. Verification and Submitting Requests

To exercise any of the rights described above, please submit a verifiable consumer request to us by:

  • Email: legal@enbymeaning.com

  • Subject line: “CCPA Privacy Request – California Resident”

  • Include: Your name, email address, the specific request(s), and proof of residency in California.

We will verify your identity using the information you provide and respond within the timeframe required by law (generally within 45 days). If you authorise an agent to make requests on your behalf, we may require the agent to provide written proof of their authority.

18. DO NEW ZEALAND RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes. If you are a resident of Aotearoa New Zealand, you have specific rights under the Privacy Act 2020, which provides protections and principles governing the collection, use, disclosure, and storage of your personal information.

Your Rights Under the New Zealand Privacy Act 2020

As a data subject in New Zealand, you have the right to:

  • Access your personal information that we hold;

  • Request correction of any personal information you believe is inaccurate, incomplete, or out of date;

  • Be informed of the purpose for which your data is collected;

  • Object to certain forms of data processing;

  • Request not to receive direct marketing communications; and

  • Make a complaint if you believe we have breached your privacy rights.

We are committed to respecting your rights and complying with the Information Privacy Principles (IPPs) set out in the Privacy Act.

Submitting a Privacy Request

To access or correct your information, or to make a complaint regarding our handling of your data, please contact us at:

📧 legal@enbymeaning.com
📬 Or by post (Attn: Legal & Compliance), see Section 20 of this policy.

We will acknowledge your request promptly and respond within 20 working days, as required by New Zealand law. If your request is complex or requires more time, we will notify you and provide a timeframe for completion.

Complaints

If you believe that we have breached your privacy rights under New Zealand law and you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner:

19. DO UK AND EU RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes. If you are located in the United Kingdom or the European Union, you have enhanced data protection rights under the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).

Your Rights under the UK and EU GDPR

Subject to certain limitations under applicable law, you have the following rights:

  • Right of Access: You have the right to obtain confirmation of whether we process your personal data and to request access to that data.

  • Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data.

  • Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you may request the deletion of your personal data.

  • Right to Restriction of Processing: You may request that we restrict the processing of your personal data in specific situations.

  • Right to Data Portability: Where processing is based on consent or contractual necessity, and carried out by automated means, you have the right to receive your data in a commonly used, machine-readable format and transmit it to another controller.

  • Right to Object: You may object to the processing of your personal data based on our legitimate interests, including profiling. You may also object to direct marketing at any time.

  • Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

  • Right to Lodge a Complaint: If you believe we have not complied with data protection laws, you have the right to lodge a complaint with your local data protection authority.

Supervisory Authorities

You may contact the following data protection authorities:

A full list of EU data protection authorities is available here:
https://edpb.europa.eu/about-edpb/board/members_en

Exercising Your Rights

To exercise any of the rights described above, please email us at legal@enbymeaning.com with the subject line “GDPR Data Request.” We may need to verify your identity before fulfilling your request, in line with applicable legal requirements.

20. AUSTRALIA, CANADA, AND OTHER JURISDICTION-SPECIFIC RIGHTS

In Short: We strive to comply with privacy laws not only in New Zealand, the United States, the United Kingdom, and the EU, but also in other countries where our services may be accessed, including Australia and Canada.

Australia (Privacy Act 1988 & APPs)

If you are an Australian resident, your personal information is protected under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You are entitled to:

  • Access your personal data;

  • Request correction of inaccuracies;

  • Be notified about data collection practices; and

  • Lodge a complaint if you believe your privacy has been breached.

To exercise these rights or raise a concern, please contact us at legal@enbymeaning.com. If your concern is not resolved to your satisfaction, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Canada (PIPEDA)

If you are a Canadian resident, your personal information is protected under PIPEDA (Personal Information Protection and Electronic Documents Act). Under this law, you have the right to:

  • Know what personal data is being collected and why;

  • Access and correct your personal data;

  • Withdraw consent (with reasonable notice);

  • Challenge our compliance with PIPEDA via formal complaint.

For privacy inquiries or access/correction requests under PIPEDA, email legal@enbymeaning.com. If needed, you may also contact the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca.

Other Jurisdictions

We will take reasonable steps to comply with privacy laws in other jurisdictions where we do business or where our website is accessible, including:

  • Brazil (LGPD)

  • Mexico (LFPDPPP)

  • South Africa (POPIA)

  • Thailand (PDPA)

  • Japan (APPI)

If you are located in a country not specifically addressed above and have questions or rights under your local privacy law, we encourage you to contact us at legal@enbymeaning.com, and we will respond in accordance with applicable legal obligations.

21. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to remain compliant with relevant laws and to reflect changes in our practices.

We may update this Privacy Policy from time to time in response to legal, technical, or business developments. When we make material changes to this Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make.

The updated version will be indicated by an updated “Effective Date” at the top of this notice and will be effective as soon as it is made accessible. If we make material changes that significantly impact your privacy rights or how we process your personal information, we may notify you prominently on our site or via email if you have provided us with your contact information.

We encourage you to review this Privacy Policy regularly to stay informed about how we are protecting the personal information we collect.

22. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

In Short: You can contact us via email or post regarding this Privacy Policy or your data rights.

If you have questions, concerns, or comments about this Privacy Policy, your personal information, or your data rights under applicable laws, you may contact us using the details below:

By Email:
Enby Meaning LLC
Attn: Legal & Compliance Team
Email: legal@enbymeaning.com
Website: https://enbymeaning.com

By Website:
Enby Meaning LLC
Attn: Legal & Compliance Team
Website: https://enbymeaning.com/contact

By Post (Legal Correspondence):
Northwest Registered Agent LLC
Attn: Enby Meaning LLC
Address: 7901 4th St N, STE 300
St. Petersburg, FL 33702
United States

If you reside in the UK, EU, New Zealand, or any other jurisdiction with a designated data protection authority, you may also have the right to lodge a complaint with your supervisory authority if you believe our processing of your personal data infringes applicable law.

23. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

In Short: Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict the use of your personal data.

You have the right to request access to the personal information we collect from you, to correct or update it, to request deletion, or to object to or restrict certain processing activities. These rights vary based on your country or state of residence. For example:

  • European Union/UK: Under the GDPR and UK Data Protection Act, you may access, rectify, erase, or port your data, and object to or restrict processing in certain circumstances.

  • New Zealand: You have the right to access and request correction of your personal information under the Privacy Act 2020.

  • California (USA): Residents may exercise rights under the CCPA/CPRA, including the rights to access, delete, or opt out of the sale of personal data.

To exercise your rights or submit a request, please contact us by emailing legal@enbymeaning.com or by mail (see Section 13). We may ask you to verify your identity before fulfilling your request.



TOP