Privacy Policy - Lovely Harbor

Last updated: September 30, 2026

This Privacy Policy explains what personal data we collect when you visit lovelyharbor.com (the “Website”), how we use it, who we share it with, and the choices and rights you have. It does not cover other websites we link to. Please read it alongside our Terms and Conditions.

Who we are

The Website is operated by Novyra Marketing LLC, a Wyoming limited liability company (“we”, “us”, “our”), which is the data controller responsible for your personal data. You can reach us using the details in the “Contact us” section at the end of this policy.

How this policy is organised

The section “Visiting the Website” covers the data processed whenever you visit. The sections under “Features and services we use” each describe one feature or partner: what data is involved, why, our legal basis if you are in the EU, EEA, UK or Switzerland, and how long it is kept. The general sections that follow (cookies, sharing, transfers, your rights) apply to all of them.

Visiting the Website

When you visit, our hosting provider and security and performance services (such as Cloudflare) process your IP address, browser and device details, the pages you request and the time of each request, in order to deliver the Website and protect it against abuse and attacks. Depending on the features described below and the choices you make, we and our partners may also collect data through cookies and similar technologies, such as pages viewed, clicks and interactions, approximate location (country, region or city derived from your IP address), and cookie or device identifiers.

Legal basis (EU/UK): legitimate interests (running a secure, functioning website). Retention: for as long as our hosting and security providers keep their logs to run and protect the Website.

Features and services we use

Contact form and emails

When you use our contact form or email us, we receive your name, email address, your message and anything else you choose to include. We use them to read and reply to your message, to follow up on it, and to keep a record of our conversation. We reply by email from our own email account, so our reply and your message are also stored by our email provider.

Legal basis (EU/UK): legitimate interests (responding to your enquiry and keeping a record of our correspondence). Retention: for as long as needed to deal with your enquiry and any follow-up, and to keep a record of our correspondence. You can ask us to delete your messages; we will do so unless we need to keep them, for example to establish or defend a legal claim.

Comments

When you comment, we collect the name, email address and (optional) website you enter, your comment, and your IP address and browser user agent to help detect spam. An anonymised string created from your email address (a “hash”) may be sent to Automattic’s Gravatar service to check whether you have a profile picture; see the Automattic Privacy Policy. After approval, your name, comment and profile picture are publicly visible. If you tick the box to save your details, a cookie stores your name, email and website on your device so you don’t have to re-enter them.

Legal basis (EU/UK): legitimate interests (running a moderated comment section and preventing spam). Retention: for as long as the comment is published, and afterwards as needed for moderation and spam prevention.

Quizzes and free guides

When you take a quiz, we record your answers, result and score, and show you your result for free. We use your answers to show you your result and, if you request it, to send you the matching guide.

If you request the detailed guide, we also collect your email address, the signup date, your IP address and the version of the signup form you used, and we email you a personal link to a private page on the Website where you can read it. The link contains a random ID linked to your signup record, so when you visit the page, we record that you viewed your guide. We do not use cookies or pixels for this. As stated on the signup form, requesting the guide also subscribes you to our newsletter, and your signup record (including your quiz result) is shared with our newsletter provider.

Legal basis (EU/UK): consent for sending the guide (given when you sign up); legitimate interests for keeping a signup record (to show that you signed up and to prevent spam) and for recording whether you viewed your guide (to understand whether our guides reach and interest readers). You can object to this recording at any time by contacting us. Retention: for as long as needed to run and improve our quizzes and guides; the signup record for as long as needed to show that you signed up.

Notice of financial incentive (California): offering a free guide in exchange for signing up may count as a “financial incentive”. The personal data involved is your email address and signup record. You opt in by submitting the signup form and can withdraw at any time by unsubscribing. We estimate the value of your data to be reasonably related to the cost of creating and delivering the guide.

If you subscribe, we add your email address to Grow (a service by Mediavine), which sends our newsletter. We keep your email address and subscription status. Grow uses tracking pixels and tracked links to measure whether you open our emails and which links you click, which we use to understand which content readers find useful and to keep our list healthy. You can block open tracking by turning off automatic image loading in your email app. You can unsubscribe at any time using the link in every email, which also stops all tracking. See the Mediavine Privacy Policy, which covers Grow.

Legal basis (EU/UK): consent, given when you subscribe (including open and click measurement); you can withdraw it at any time by unsubscribing. Retention: while you are subscribed, and afterwards as needed to respect your unsubscribe request and to show that you had subscribed.

Form protection

Some forms are protected by Cloudflare Turnstile, which checks whether you are a human using your IP address and browser signals. See the Cloudflare Privacy Policy.

Legal basis (EU/UK): legitimate interests (protecting our forms against spam and bots). Retention: according to Cloudflare’s policy.

Advertising

Legal basis (EU/UK): consent, given through our consent banner; some advertising partners may rely on legitimate interests for non-personalised ad delivery and ad measurement, which you can object to in the banner. In the US, this may count as “selling” or “sharing” personal data; you can opt out as described in “Your US state privacy rights”. Retention: according to each partner’s own privacy policy.

Mediavine Programmatic Advertising (Ver 1.1)

The Website works with Mediavine to manage third-party interest-based advertising appearing on the Website. Mediavine serves content and advertisements when you visit the Website, which may use first and third-party cookies. A cookie is a small text file which is sent to your computer or mobile device (referred to in this policy as a “device”) by the web server so that a website can remember some information about your browsing activity on the Website.

First party cookies are created by the website that you are visiting. A third-party cookie is frequently used in behavioral advertising and analytics and is created by a domain other than the website you are visiting. Third-party cookies, tags, pixels, beacons and other similar technologies (collectively, “Tags”) may be placed on the Website to monitor interaction with advertising content and to target and optimize advertising. Each internet browser has functionality so that you can block both first and third-party cookies and clear your browser’s cache. The “help” feature of the menu bar on most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, how to disable existing cookies and how to clear your browser’s cache. For more information about cookies and how to disable them, you can consult the information at All About Cookies.

Without cookies you may not be able to take full advantage of the Website content and features. Please note that rejecting cookies does not mean that you will no longer see ads when you visit our Site. In the event you opt-out, you will still see non-personalized advertisements on the Website.

The Website collects the following data using a cookie when serving personalized ads:

IP Address
Operating System type
Operating System version
Device Type
Language of the website
Web browser type
Email (in hashed form)

Mediavine Partners (companies listed below with whom Mediavine shares data) may also use this data to link to other end user information the partner has independently collected to deliver targeted advertisements. Mediavine Partners may also separately collect data about end users from other sources, such as advertising IDs or pixels, and link that data to data collected from Mediavine publishers in order to provide interest-based advertising across your online experience, including devices, browsers and apps. This data includes usage data, cookie information, device information, information about interactions between users and advertisements and websites, geolocation data, traffic data, and information about a visitor’s referral source to a particular website. Mediavine Partners may also create unique IDs to create audience segments, which are used to provide targeted advertising.

If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visit National Advertising Initiative opt out page. You may also visit Digital Advertising Alliance website and Network Advertising Initiative website to learn more information about interest-based advertising. You may download the AppChoices app at Digital Advertising Alliance’s AppChoices app to opt out in connection with mobile apps, or use the platform controls on your mobile device to opt out.

For specific information about Mediavine Partners, the data each collects and their data collection and privacy policies, please visit Mediavine Partners.

Grow reader features

Grow (a service by Mediavine) provides on-site features, such as saving posts, following the Website and signing up for updates. It may collect your email address, identifiers and data about how you use these features, and may recognise you across other websites that use Grow. It follows the choices you make in our consent banner. See the Mediavine Privacy Policy, which covers Grow.

Legal basis (EU/UK): consent, given through our consent banner. In the US, this may count as “sharing”; you can opt out as described in “Your US state privacy rights”. Retention: according to Mediavine’s privacy policy.

Analytics (Google Analytics)

We use Google Analytics 4 to understand how visitors use the Website, for example which pages are popular and how people find us. It collects data such as pages viewed, time spent, clicks, device and browser details and approximate location, using cookies. Learn more in How Google uses information from sites that use its services.

Legal basis (EU/UK): consent, given through our consent banner; where consent is required, Google Analytics runs only after you give it. Retention: as set in our Google Analytics settings.

Affiliate links

The Website contains affiliate links. When you click one, the retailer or affiliate network may set cookies or collect data to record that you came from our Website and credit us with a commission if you make a purchase. We do not receive your payment details or your name. See our Affiliate Disclosure for more. The networks we work with include:

Amazon Associates: Third parties, including Amazon, may provide content and advertising on the Website, collect information directly from visitors, and place or recognise cookies on your browser. See the Amazon Privacy Notice.
CJ Affiliate: Links may pass through CJ tracking domains, which set cookies to attribute sales to us. See the CJ Privacy Policy.

Legal basis (EU/UK): legitimate interests (earning commissions that fund the Website); the tracking happens on the retailer’s or network’s side after you click. Retention: according to each retailer’s or network’s own policy.

Stay22

Stay22’s script turns content on our pages into affiliate links and shows related offers. When it detects a likely interest, it may automatically open a related offer in a new browser tab behind the page you are reading. Like other affiliate links, these offer pages contain tracking so that the partner can credit us with a commission if you book or buy. To do this, Stay22 analyses the page content, collects technical and usage data (such as your IP address, device details and how you interact with the page) and may recognise your device, including by combining technical characteristics of your device and browser (a technique known as “fingerprinting”). See the Stay22 Privacy Policy.

Legal basis (EU/UK): consent, given through our consent banner; it runs only after you give it. In the US, this may count as “selling” or “sharing”; you can opt out as described in “Your US state privacy rights”. Retention: according to Stay22’s privacy policy.

Pinterest’s script adds a button to images on our pages so you can share them on Pinterest. Pinterest receives information about the page you are viewing and your device, and may use it to personalise content and ads. See the Pinterest Privacy Policy.

Legal basis (EU/UK): consent, given through our consent banner; it runs only after you give it. In the US, this may count as “sharing”; you can opt out as described in “Your US state privacy rights”. Retention: according to Pinterest’s privacy policy.

Embedded content

Articles may include embedded content from other websites (such as videos or social media posts). Embedded content behaves as if you had visited the other website, which may collect data about you, use cookies and track your interaction, especially if you are logged in to that website.

Cookies and your choices

We and our partners use cookies and similar technologies (such as browser storage, pixels and device recognition) for the features described above. Some are strictly necessary for the Website to work and stay secure, for example bot protection and remembering your privacy choices; these do not require consent. Others are used for preferences, analytics, advertising, affiliate attribution or social features.

Visitors in the EU, EEA, UK and Switzerland see a consent banner before non-essential cookies or similar technologies are used. You can accept, reject or customise your choices, and change them at any time using the privacy settings link shown on the Website. The banner also lets you see our partners. You can also block or delete cookies in your browser settings.

Where our partners build interest profiles (for example, that a device is interested in a certain topic) to show more relevant content or ads, this happens in the EU, EEA, UK and Switzerland only with your consent. We do not make any decisions based solely on automated processing that have legal or similarly significant effects on you.

Who we share data with

We do not sell your data for money. We share it only as needed with:

Service providers that run the Website and our communications for us, such as hosting, security and performance services, and our email and form tools.
The partners described in “Features and services we use”, for the purposes described there.
Authorities and advisers where required by law, or to protect our rights, users or the public.
A buyer or successor if we sell or transfer all or part of our business or the Website.

International transfers

The Website is hosted in the United Kingdom. We are based in the United States, and some of our partners and service providers process data in the United States and other countries. When personal data from the EU/EEA, UK or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards, such as the EU-U.S. Data Privacy Framework (and its UK Extension and Swiss framework) where the recipient is certified, or the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.

How long we keep data

Each section above states how long that data is kept. We delete or anonymise data when it is no longer needed for the purpose it was collected for, unless we must keep it longer to comply with the law or to deal with a legal claim. Backups may retain data for a limited time before being overwritten.

Security

We use appropriate measures to protect your data, such as HTTPS encryption, secure hosting, bot protection and restricted access. No system is completely secure; if you suspect misuse of your data, please contact us.

Children

The Website is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, please contact us and we will delete it.

Your rights (EU, EEA, UK and Switzerland)

You have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Delete your data
Restrict how we use your data
Port your data to another service
Object to processing based on legitimate interests, and to direct marketing at any time
Withdraw consent at any time, without affecting processing that happened before

Giving us your data is voluntary. Some features need certain data to work (for example, we need your email address to reply to you); if you do not provide it, you can still browse the Website.

To exercise these rights, contact us using the details in the “Contact us” section. We will respond within one month, and requests are free unless they are manifestly unfounded or excessive. We may need to verify your identity first.

You also have the right to complain to a data protection authority: in the UK, the Information Commissioner’s Office (ICO); in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU/EEA, the authority in your country (see the list of EU data protection authorities).

Visitors in other countries (for example Canada, Brazil, Australia or India) may have similar rights under local law. Contact us and we will handle your request in line with the laws that apply to you.

Your US state privacy rights

If you live in a US state with a privacy law (such as California), you may have the right to:

Know what personal data we collect, use and disclose, and access a copy of it
Correct or delete your personal data
Opt out of the “sale” or “sharing” of your personal data and of targeted advertising
Appeal our decision if we deny your request
Not be discriminated against for exercising your rights

Personal data we collect, use and disclose

In the past 12 months, we have collected the categories of personal data below, from you, your device and our partners, for the purposes described in “Visiting the Website” and “Features and services we use”, and kept them for the periods stated there. We disclose them for business purposes to our service providers and to the partners described in this policy.

Identifiers: such as name, email address, IP address, and cookie or device IDs
Internet or other electronic activity: such as pages viewed, clicks and interactions with the Website and our emails
Approximate geolocation: country, region or city derived from your IP address
Inferences: such as interests derived from your activity or answers

We do not collect sensitive personal data.

Sale, sharing and targeted advertising

We do not sell personal data for money. However, allowing partners described in this policy to collect data through cookies and similar technologies, which they may use for advertising or their own purposes, may count as “selling” or “sharing” personal data, or “targeted advertising”, under some US state laws. In the past 12 months, we have disclosed identifiers (such as IP address and cookie or device IDs), internet activity (such as pages viewed, clicks and ad interactions), approximate geolocation and inferences (such as interests) to advertising, affiliate and social media partners for these purposes. We do not knowingly sell or share the personal data of consumers under 16.

How to opt out: use the “Do Not Sell or Share My Personal Information” link shown on the Website, or enable Global Privacy Control (GPC) in your browser; where required by law, we treat GPC as a valid opt-out request for that browser. We act on opt-out requests within 15 business days. Your browser’s older “Do Not Track” setting is not a uniform standard, so we do not respond to it.

Making a request

To exercise your rights, contact us using the details in the “Contact us” section. We will verify your request by confirming your email address, and respond within 45 days. You may use an authorised agent, who must provide proof of authorisation. If we deny your request, you may appeal by replying to our decision; if your appeal is denied, you may contact your state Attorney General.

Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date above and, where required by law, inform you of significant changes.

Contact us

Contact form (preferred): lovelyharbor.com/contact/
Email: [email protected]