This policy explains what personal data is processed when you use evergreenstudy.com, why, on what legal basis, who receives it, how long it is kept, and what rights you have. We have written it in plain language. If anything is unclear, write to info@evergreenstudy.com.
1. Controller
The controller responsible for personal data processed through this website is Emily Charlotte Foster (Evergreen Study), Colmore Row, Birmingham B3 2AA, United Kingdom. Contact details are listed in our Imprint. Privacy questions and requests can be sent to info@evergreenstudy.com.
2. Our approach in short
- You can read every guide, print every checklist and use the "Spot the scam" exercise without creating an account or giving us your name.
- The quiz is checked entirely inside your browser. Your answers are not stored and are not sent to us.
- Optional analytics and advertising cookies are only used if you allow them.
- We never ask for recovery phrases, private keys, passwords, one-time codes or payment details. Please never send them to us.
3. Data we process
3.1 Server logs
Whenever a page is requested, the web server that hosts the site automatically records technical information: the IP address of the device, the date and time, the address of the page requested, the referring page if your browser sends it, the response code, and the browser and operating system identification string. This happens on every website and is necessary to deliver pages and keep the server secure.
3.2 Your cookie choice
When you choose which cookies to allow, a small necessary cookie stores that choice so that the banner does not appear on every page.
3.3 Analytics and advertising data (only with consent)
If we use Google services to measure visits or the performance of our own adverts, and you have allowed this, cookies and similar identifiers may be set and information about your visit may be shared with Google. Without your consent, Google tags, where present, run in a restricted mode that does not set advertising or analytics cookies.
3.4 E-mails you send us
If you write to us, we receive your e-mail address, your name if you include it, and whatever you choose to tell us. Please keep messages free of sensitive details. If you describe a scam you experienced, we will use the information only to answer you and to improve our guides, never to publish your story without permission.
4. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Delivering pages, detecting faults, protecting the site against attacks and abuse | Server logs | Legitimate interests (Art. 6(1)(f) GDPR / UK GDPR) in running a secure website |
| Remembering your cookie choice | Consent cookie | Legal obligation to respect your choice (Art. 6(1)(c)) and legitimate interests |
| Measuring visits and the reach of our own adverts | Cookie identifiers, usage data | Consent (Art. 6(1)(a)); you can withdraw it at any time |
| Answering your messages, corrections and privacy requests | E-mail address, message content | Legitimate interests (Art. 6(1)(f)); for privacy requests, legal obligation (Art. 6(1)(c)) |
5. Security measures
The site is served only over an encrypted HTTPS connection. Access to the server and the content management system is restricted to the people who maintain the site and protected by strong authentication. Automated tools analyse server logs to detect and temporarily block repeated attack attempts; blocks expire automatically.
6. Cookies
We use one necessary cookie to remember your choice. Everything else is optional and switched off until you agree. You can reopen the cookie banner at any time with the "Cookie settings" link in the footer of every page. The full list is in our Cookie Policy.
7. Who receives data
- Our hosting provider, which runs the server on our behalf as a processor under a data processing agreement.
- Google Ireland Limited (and its parent, Google LLC), only if you have consented to analytics or advertising cookies.
- Our e-mail service provider, which handles messages you send to us.
- Authorities, where the law obliges us to disclose information.
We do not sell personal data, and we do not share it with crypto companies, recovery firms or data brokers.
8. International transfers
Google may process data in the United States. Such transfers are based on the EU–US Data Privacy Framework and, for the UK, the UK Extension to it, and where necessary on the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum.
9. Retention
- Server logs: no longer than 30 days, unless a specific security incident requires us to keep particular entries longer to investigate it.
- Consent cookie: 180 days; after that we ask again.
- E-mails: until your request is resolved and then for up to 12 months, unless a longer period is required by law.
- Analytics and advertising cookies: as listed in the Cookie Policy.
10. Your rights
Under the EU General Data Protection Regulation and the UK GDPR you have the right to:
- get confirmation of whether we process your data and receive a copy (Art. 15);
- have inaccurate data corrected (Art. 16);
- have data erased (Art. 17);
- have processing restricted (Art. 18);
- receive data you provided in a portable format (Art. 20);
- object to processing based on legitimate interests (Art. 21);
- withdraw consent at any time, without affecting processing that took place before.
Send requests to info@evergreenstudy.com. We may ask for information to confirm your identity, and we reply within one month. In complex cases this can be extended by up to two further months; we will tell you if so.
11. Complaints
You may complain to a data protection supervisory authority, in particular in the EU or EEA country where you live or work, or where you believe an infringement took place. In the United Kingdom, the supervisory authority is the Information Commissioner's Office (ICO). We would appreciate the chance to resolve your concern first.
12. Children
The site is written for adults. We do not knowingly collect personal data from children under 16. If you think a child has sent us personal data, tell us and we will delete it.
13. No automated decisions
We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly affect you. If you consent to advertising cookies, Google may personalise adverts you see elsewhere; this is governed by Google's own policies.
14. Changes to this policy
We update this policy when the site or the law changes. The date at the top of this page shows the current version.