Privacy Policy
Last updated: 28 May 2026
1. Data Controller
The data controller responsible for this website is:
Kati Matt (operating as Kara Mistgrove) karamistgrove.com info@karamistgrove.com
2. Scope of This Policy
This Privacy Policy applies to all personal data collected through karamistgrove.com, including through newsletter subscription and general use of the website. This policy does not apply to third-party websites linked from this site.
3. What Personal Data We Collect and Why
3.1 Newsletter subscription
When you subscribe to The Undercurrent newsletter, we collect your email address. The legal basis for this processing is your consent (Article 6(1)(a) GDPR). Your email address is used solely to send you the newsletter you have subscribed to. You may withdraw your consent at any time by using the unsubscribe link included in every newsletter email.
3.2 Website analytics
This website uses Google Analytics 4 to collect anonymised data about website traffic, including pages visited, time spent on site, browser type, and general geographic location by country. Google Analytics uses cookies that persist for up to two years. The legal basis for this processing is your consent (Article 6(1)(a) GDPR), obtained through the cookie consent banner displayed on your first visit.
Google Analytics is operated by Google LLC, based in the United States. Data collected through Google Analytics may be transferred to and processed in the United States. This transfer is carried out under the EU-US Data Privacy Framework. Google's privacy policy is available at policies.google.com/privacy.
3.3 Website hosting
This website is hosted by Ghost.org, operated by The Ghost Foundation, based in Singapore. By visiting this site, certain technical data including IP addresses may be processed by Ghost as part of standard website hosting operations. Ghost's privacy policy is available at ghost.org/privacy.
4. Cookies
This website uses cookies. Google Analytics 4 sets cookies that collect anonymised usage data. These cookies are non-essential and will only be placed on your device after you have given your consent through the cookie consent banner.
You may withdraw your consent to cookies at any time by clearing your browser cookies and declining consent on your next visit, or by using the cookie settings available in the consent banner.
For more information about how to manage cookies in your browser, visit aboutcookies.org.
5. Data Retention
Your email address is retained for as long as you remain subscribed to The Undercurrent newsletter. Upon unsubscription, your email address will be removed from the mailing list within 30 days.
Analytics data collected through Google Analytics is retained in accordance with Google's standard retention settings, which can be configured to a minimum of two months. No personally identifiable information is retained through analytics.
6. Disclosure of Personal Data
Your personal data is not sold, rented, or shared with third parties for marketing purposes. Personal data may be disclosed in the following limited circumstances:
To service providers necessary for the operation of this website, including Ghost.org for hosting and Google LLC for analytics, solely to the extent necessary for those services.
Where required by law, by court order, or by a competent regulatory authority.
7. Your Rights Under GDPR
As a data subject under the GDPR, you have the following rights:
The right to access the personal data we hold about you. The right to rectification of inaccurate personal data. The right to erasure of your personal data. The right to restriction of processing. The right to data portability. The right to object to processing. The right to withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, please contact us at info@karamistgrove.com. We will respond within 30 days.
8. Right to Lodge a Complaint
If you are not satisfied with how your personal data has been handled, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):
Tatari 39, Tallinn 10134, Estonia info@aki.ee www.aki.ee
9. Changes to This Policy
This policy will be updated when material changes occur, including when products or services are added to this website. The date at the top of this page reflects the most recent revision. Continued use of the website following any update constitutes acceptance of the revised policy.
10. Contact
For any questions regarding this Privacy Policy or the handling of your personal data, please contact: