Privacy Policy

Section 01

Data Controller

The data controller responsible for your personal data in connection with this website is:

• Company: Kontigo Marketing
• Address: Manilva, Málaga, Spain
• Email: hi@overthinkbetter.com
• Website: overthinkbetter.com

This website, OverthinkBetter.com, is owned and operated by Kontigo Marketing. All data processing activities described in this policy are carried out by or on behalf of Kontigo Marketing.

Section 02

What Data We Collect

We only collect personal data that is necessary for the operation of this website. The categories of data we may collect are:

Data you provide directly

• Email address — if you sign up for The Weekly Overthink newsletter
• Name — if you provide it when subscribing or contacting us
• Message content — if you contact us via email or a contact form

Data collected automatically

• IP address — collected automatically by our hosting provider and analytics tools
• Browser type and version — collected via analytics
• Pages visited and time spent — collected via analytics to understand how the site is used
• Referring website — the site you came from before visiting OverthinkBetter.com
• Device type — desktop, mobile, or tablet
• Cookie data — see the Cookies section below for full details

Data we do NOT collect

• Payment or financial information — we do not process payments directly at this time
• Sensitive personal data such as health information, political views, or religious beliefs
• Data from children under 16

Section 03

How We Use Your Data

We use the data we collect for the following purposes:

• To operate the website — ensuring pages load correctly, monitoring for errors, and maintaining site security
• To send the newsletter — if you have subscribed to The Weekly Overthink, we use your email address to send you the newsletter you signed up for
• To respond to enquiries — if you contact us, we use your details to respond
• To understand site usage — we use analytics data to understand which content is useful and how to improve the site
• To comply with legal obligations — we may process data where required by law

We do not use your data for automated decision-making or profiling. We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.

Section 04

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we are required to have a legal basis for processing your personal data. Our legal bases are:

• Consent — for newsletter subscriptions and non-essential cookies. You can withdraw consent at any time.
• Legitimate interests — for website analytics and security monitoring, where our interest in running a safe, well-functioning website does not override your rights
• Contract performance — where processing is necessary to fulfil a service you have requested
• Legal obligation — where we are required to process data to comply with applicable law

Section 05

Cookies

This website uses cookies — small text files stored on your device when you visit. We use the following categories of cookies:

Strictly necessary cookies

These are essential for the website to function and cannot be disabled. They do not store any personally identifiable information.

Analytics cookies

We use Google Analytics to understand how visitors interact with the site. This service may set cookies and collect data including your IP address, browser type, and pages visited. This data is aggregated and anonymised where possible. Google Analytics data is processed in accordance with Google's privacy policy.

Functional cookies

These remember your preferences (such as cookie consent choices) to improve your experience on return visits.

Marketing and advertising cookies

If we display third-party advertisements or affiliate links in the future, those providers may set their own cookies. We will update this policy and obtain fresh consent before activating any such cookies.

You can control and manage cookies through your browser settings and through our cookie consent tool which appears when you first visit the site. Please note that disabling certain cookies may affect the functionality of the website.

For a full list of the specific cookies in use on this site, please see our Cookie Policy.

Section 06

Third-Party Services

We use a small number of trusted third-party services to operate this website. Each processes data only as necessary for the service they provide:

WordPress / Automattic

This website is built on WordPress. Automattic (WordPress's parent company) may process technical data as part of hosting and platform services. See Automattic's Privacy Policy.

Google Analytics

We use Google Analytics to analyse site traffic. Google may process data in the United States. We have enabled IP anonymisation where available. See Google's Privacy Policy.

Email newsletter provider

If you subscribe to The Weekly Overthink, your email address is stored and processed by our email marketing provider. We will name the specific provider here once the newsletter is operational. You can unsubscribe at any time via the link in any email we send.

Affiliate partners

This site may in the future include affiliate links to third-party products and services. If you click an affiliate link, the third party may set cookies and collect data according to their own privacy policy. We are not responsible for third-party data practices.

We do not sell, rent, or otherwise share your personal data with third parties for their own commercial purposes.

Section 07

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

• Newsletter subscribers — your email address is retained for as long as you remain subscribed. You can unsubscribe at any time and your data will be deleted within 30 days of your request.
• Contact enquiries — correspondence is retained for up to 2 years for reference purposes, then deleted.
• Analytics data — aggregated analytics data is retained for up to 26 months in Google Analytics, in line with Google's standard retention settings.
• Cookie consent records — retained for up to 12 months to demonstrate compliance.

When data is no longer needed, it is securely deleted or anonymised.

Section 08

Your Rights Under GDPR

As a resident of the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can request that inaccurate data be corrected
• Right to erasure — you can request that we delete your personal data ("right to be forgotten")
• Right to restriction — you can request that we restrict how we process your data in certain circumstances
• Right to data portability — you can request your data in a structured, machine-readable format
• Right to object — you can object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting prior processing

To exercise any of these rights, please contact us at hi@kontigomarketing.com. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.

Section 09

International Data Transfers

Some of the third-party services we use (including Google Analytics) may transfer and process data outside the European Economic Area, including in the United States.

Where such transfers occur, we ensure they are carried out in accordance with applicable data protection law — including through the use of Standard Contractual Clauses (SCCs) approved by the European Commission, or by relying on providers who participate in approved transfer frameworks.

Section 10

Children's Privacy

OverthinkBetter.com is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us at hi@kontigomarketing.com and we will delete it promptly.

Section 11

Changes to This Policy

We may update this Privacy Policy from time to time — for example, if we add new features, change our service providers, or if data protection law changes. When we make significant changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of the website after changes are posted constitutes acceptance of the updated policy.

Section 12

Contact Us

If you have any questions about this Privacy Policy, how we handle your data, or wish to exercise your rights, please get in touch: