Privacy Policy — Raising Green

Last updated: 30 June 2026

This Privacy Policy explains how I, Iliyana Stareva (”I,” “me,” “Raising Green”), collect, use, and protect your personal information when you subscribe to or interact with the Raising Green newsletter, website, and related content (the “Publication”).

For the purposes of EU data protection law (GDPR), I am the data controller for the personal information described below. Raising Green is published using Substack, which acts as a data processor on my behalf for hosting, email delivery, and payment processing. Substack’s own handling of your data is also described in Substack’s Privacy Policy.

1. What I collect

Information you provide directly:

• Email address, when you subscribe to the newsletter

• Name, if you provide one at signup or in correspondence

• Payment and billing information, if you purchase a paid subscription or the Eco-Expat Guide (processed by Substack via Stripe — I do not see or store your full card details)

• Any information you include in replies, comments, or emails to me

Information collected automatically:

• Basic engagement data such as open rates, click-throughs on links, and subscription status, provided to me through Substack’s analytics

• Standard website usage data (e.g. pages visited) collected by Substack on the publication’s behalf

I do not independently track you across other websites, and I do not sell your personal information to third parties.

2. Why I collect it

I use your information to:

• Send you the newsletter and any content you’ve subscribed to

• Process payments for paid subscriptions or digital products

• Respond to your messages, comments, or support requests

• Understand which content is useful (in aggregate, not by tracking you individually)

• Comply with legal obligations, including tax and consumer protection requirements

3. Legal basis for processing (GDPR)

Where GDPR applies, I rely on the following legal bases:

• Consent — for sending you the newsletter, which you give by subscribing (with double opt-in confirmation)

• Contract — for processing payments and delivering paid content you’ve purchased

• Legitimate interest — for basic engagement analytics used to improve the Publication

• Legal obligation — for record-keeping required for tax or consumer law purposes

You can withdraw consent at any time by unsubscribing — see Section 7.

4. Who I share your data with

• Substack — hosts the Publication, sends emails, and processes payments via Stripe. Substack’s role and safeguards are described in its own Privacy Policy and Publisher Agreement.

• Affiliate and analytics partners — if you click an affiliate link in a post, the third-party retailer or affiliate network may receive information about that click, governed by their own privacy policy, not mine.

• Legal and regulatory authorities — only where required by law.

I do not share your email address or personal details with any third party for their own independent marketing purposes.

5. International data transfers

Because Substack is a US-based company, your data may be processed outside the EU/EEA. Substack has stated mechanisms (including Standard Contractual Clauses) in place to safeguard such transfers, as described in its Publisher Agreement and Privacy Policy.

6. How long I keep your data

I keep your subscriber information for as long as you remain subscribed, and for a reasonable period after unsubscribing where needed for legal, accounting, or dispute-resolution purposes. Payment records are retained as required by Spanish tax law.

7. Your rights

If GDPR or another applicable privacy law applies to you, you have the right to:

• Access the personal information I hold about you

• Correct inaccurate information

• Request deletion of your data (”right to be forgotten”), subject to legal retention requirements

• Object to or restrict certain processing

• Request a copy of your data in a portable format

• Withdraw consent at any time

You can unsubscribe at any time using the link at the bottom of any email, or manage your subscription through your Substack account. For any other request, contact me at iliyanaatraisinggreen@gmail.com. You also have the right to lodge a complaint with the Spanish data protection authority (Agencia Española de Protección de Datos, www.aepd.es) or your local supervisory authority.

8. Children’s privacy

The Publication is not directed at children, and I do not knowingly collect personal information from anyone under 16. If you believe a child has provided me with personal information, please contact me so it can be removed.

9. Cookies and tracking

Substack may use cookies or similar technologies to operate the Publication, including for login, embedded subscribe forms, and basic analytics. Substack’s use of cookies is described in its own Privacy Policy. I do not add independent third-party tracking beyond what Substack provides.

10. Changes to this policy

I may update this Privacy Policy from time to time to reflect changes in how the Publication operates or to comply with legal requirements. Material changes will be noted in the Publication where practical.

11. Contact

Questions or requests about your personal information can be sent to iliyanaatraisinggreen@gmail.com.

This document is a general-purpose template and has not been reviewed by a lawyer. It’s a reasonable starting point for a small EU-based publication collecting email addresses, processing payments, and using affiliate links, but it should be reviewed by someone qualified in Spanish/EU data protection law before you scale up paid offerings, to make sure it accurately reflects your actual practices and any tools you add later (e.g. additional analytics, CRM, or email platforms outside Substack).