privacy policy.

last updated: May 4, 2026.

This privacy policy explains how andreythenomad.com handles personal information. It is written for a small creator, newsletter, resources, and coaching website, and is meant to be practical, transparent, and easy to use.

who is responsible

The person responsible for this website is Andrey Talalaev. For privacy questions or requests, email hey [at] andreythenomad [dot] com .

what this site collects

This site collects personal information in a few limited ways:

• Newsletter and forms: your email address, name if you provide it, and any message or preferences you submit.
• Coaching and booking inquiries: contact details, scheduling details, and context you choose to share before or after a call.
• Free resources: your email address and the resource you requested, if a resource is delivered by email.
• Basic technical data: IP address, device/browser information, pages requested, timestamps, referrer URLs, and security logs generated by hosting infrastructure.
• Email engagement data: delivery, open, click, unsubscribe, and preference information, if the newsletter provider makes this available.
• Payment or purchase data: if paid services are offered through a third-party checkout, that provider may process payment information. This site does not need or intentionally collect full card numbers.

why it is used

The information is used for these purposes:

• to send the newsletter, free resources, updates, and occasional offers you asked to receive;
• to reply to messages, manage booking requests, and provide coaching-related follow-up;
• to operate, secure, debug, and improve the website;
• to understand which content is useful, preferably through privacy-respecting and aggregated measurement;
• to comply with legal, tax, accounting, fraud-prevention, and recordkeeping obligations;
• to protect the rights, safety, and integrity of the site, readers, and service providers.

legal bases

Where laws such as the GDPR or UK GDPR apply, the site relies on these legal bases: consent for newsletter subscription, optional marketing, and non-essential cookies; contract or pre-contract steps for coaching, booking, resource delivery, and paid services; legitimate interests for site security, basic analytics, responding to messages, improving content, and preventing abuse; and legal obligation where records must be kept for tax, accounting, compliance, or dispute purposes.

sensitive information

This site does not ask for sensitive personal information such as government ID numbers, precise health details, financial account credentials, biometric data, or information about children. Please do not send sensitive information unless it is genuinely necessary for your request.

cookies and tracking

This site is designed to avoid unnecessary tracking. Based on the current site code, it does not intentionally set advertising cookies or behavioral tracking cookies. Some third-party services, such as hosting, newsletter, booking, email, payments, or embedded tools, may use cookies or similar technologies when you interact with them. Read the cookie policy for more detail.

Non-essential cookies should only be used with consent where required. Strictly necessary cookies and security technologies may be used without consent when they are needed to provide the site or a service you requested.

who it is shared with

Personal information is shared only when needed to run the site, deliver what you requested, or meet legal obligations. Categories of recipients may include:

• website hosting, DNS, deployment, security, and infrastructure providers;
• newsletter, email delivery, CRM, and form providers;
• booking, calendar, video-call, payment, and accounting providers;
• analytics providers, if privacy-respecting analytics are enabled;
• professional advisers, legal authorities, or regulators when required or reasonably necessary.

This site does not sell personal information. It also does not intentionally share personal information for cross-context behavioral advertising. If that changes, this policy should be updated before the change happens and any required opt-out or consent mechanism should be provided.

international transfers

This is a digital nomad website, and service providers may process information in countries other than your own, including the United States, the European Economic Area, the United Kingdom, or other places where providers operate. When required, transfers should rely on appropriate safeguards such as adequacy decisions, standard contractual clauses, the EU-U.S. Data Privacy Framework, the UK extension, or equivalent protections offered by the relevant provider.

how long it is kept

Personal information is kept only as long as reasonably needed for the purpose it was collected:

• newsletter records are kept until you unsubscribe or ask for deletion, plus a limited suppression record so you are not added again by mistake;
• inquiries and coaching notes are usually kept only while the relationship is active and for a reasonable follow-up period;
• transaction, tax, accounting, and legal records are kept for the period required by law;
• security logs are usually kept for a short operational period unless needed to investigate abuse, fraud, or security incidents;
• backup copies may remain for a limited period until they rotate out of normal backup systems.

your choices and rights

You can unsubscribe from marketing emails at any time using the unsubscribe link in an email or by contacting hey [at] andreythenomad [dot] com .

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, appeal of a privacy decision, or information about how your data is used and shared. California residents may also have rights to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and be free from discrimination for exercising privacy rights. This site does not knowingly sell or share personal information as those terms are commonly used in California privacy law.

To exercise a right, email hey [at] andreythenomad [dot] com with enough detail to understand and verify the request. If a request must be handled by a third-party provider, you may be directed to that provider or asked for information needed to locate your record.

You may use an authorized agent where privacy law allows it. The request may need to include proof of permission and enough information to verify the account or email address involved.

children

This site is intended for adults building remote work and travel systems. It is not directed to children under 13, and it does not knowingly collect personal information from children. If you believe a child has provided personal information, email hey [at] andreythenomad [dot] com and it will be deleted where required.

security

Reasonable technical and organizational measures are used to protect personal information, including secure hosting, HTTPS, limited access, and reliance on reputable service providers. No website, email system, or cloud provider can promise perfect security, but the goal is to collect less, keep it only as long as needed, and reduce avoidable risk.

automated decisions

This site does not use personal information to make decisions with legal or similarly significant effects through automated decision-making or profiling.

complaints

Please email hey [at] andreythenomad [dot] com first so the issue can be handled directly. If privacy law gives you the right to complain to a regulator, you may also contact your local data protection authority, attorney general, or privacy regulator.

changes

This policy may be updated when the site, providers, or legal requirements change. The "last updated" date above shows when the current version took effect. Material changes should be reflected here before they apply.