Privacy Policy

Last updated: 23 September 2026

This Privacy Policy describes how MakeLifeNotSmoke (“we”, “us”, “our”) collects, uses, and shares personal information when you visit makelifenotsmoke.com (the “Site”). We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and other applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

2. What Personal Data We Collect

We collect the following categories of personal data:

2.1 Data you provide directly

• Contact form: name, email address, subject, and message content.
• Donations: if you donate, payment is processed by Robokassa. We do not store your full card details. We may receive confirmation of the transaction and the amount.

2.2 Data collected automatically

• Technical data: IP address, browser type, operating system, device type, screen resolution, referring URL.
• Usage data: pages visited, links clicked, time spent on pages, access times.
• Location data: approximate country/region derived from IP address.
• Cookies and similar technologies: see our Cookies Policy.

2.3 Data from third parties

• Google Analytics 4: aggregated and anonymised usage statistics.
• Payment processors: Robokassa may share transaction status and amount with us.

3. Legal Bases for Processing (GDPR / UK GDPR)

We process your personal data on the following legal bases:

• Legitimate interest (Art. 6(1)(f)): operating and securing the Site, preventing spam and abuse.
• Consent (Art. 6(1)(a)): analytics cookies and, where required, marketing communications. You may withdraw consent at any time.
• Performance of a contract (Art. 6(1)(b)): responding to your inquiries when you contact us.
• Legal obligation (Art. 6(1)(c)): complying with applicable laws.

4. How We Use Your Data

• To respond to your messages and support requests.
• To analyse Site traffic and improve our content.
• To process donations and comply with financial regulations.
• To protect the Site from spam, fraud, and abuse.
• To comply with legal obligations.

We do not sell your personal data.

5. Data Sharing and Recipients

We may share your data with the following categories of recipients:

• Hosting provider: Beget (servers located in the Russian Federation).
• Analytics provider: Google (Google Analytics 4), data may be transferred to the United States.
• Payment processor: Robokassa (for donations).
• Anti-spam services: Akismet, WP Armour (honeypot).
• Legal authorities: when required by law.

6. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), including in the United States and the Russian Federation. Where we transfer personal data outside the EEA, we rely on:

• Adequacy decisions of the European Commission (where applicable),
• Standard Contractual Clauses (SCCs) approved by the European Commission,
• Your explicit consent where required.

Transfers to the Russian Federation: We acknowledge that Russia is not covered by an EU adequacy decision and is considered a high-risk destination by EU regulators. We implement appropriate safeguards, including encryption and access controls, to protect your data. However, we cannot guarantee a level of protection equivalent to that in the EEA. By using the Site, you acknowledge this risk.

7. Data Retention

• Contact form data: retained for as long as necessary to handle your request, then deleted within 12 months.
• Analytics data: retained according to Google Analytics settings (default 14 months).
• Donation records: retained as required by financial and tax laws.
• Server logs: retained for a short period (typically 30–90 days) for security purposes.

8. Your Rights

Depending on your location, you may have the following rights:

• Right of access: request a copy of your personal data.
• Right to rectification: correct inaccurate data.
• Right to erasure: request deletion of your data.
• Right to restrict processing.
• Right to data portability.
• Right to object to processing based on legitimate interests.
• Right to withdraw consent at any time (without affecting the lawfulness of prior processing).
• Right to lodge a complaint with your local supervisory authority.

California residents (CCPA/CPRA): You have the right to know what personal information we collect, to request deletion, to opt out of the sale or sharing of personal information (we do not sell or share), and to non-discrimination. To exercise these rights, contact us at info@makelifenotsmoke.com.

9. Children’s Privacy

The Site is not intended for children under 16 (or under 13 where applicable). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates the latest revision. Continued use of the Site after changes constitutes acceptance of the updated policy.

11. Contact Us

For any privacy-related questions or requests, contact us at:

This document is provided for general informational purposes and does not constitute legal advice. You should consult a qualified legal professional for advice specific to your situation.