Privacy Notice

erichathaway.com is Eric Hathaway's personal site — a portfolio and writing hub. It is not operated by any LLC. Eric's product work lives on separate domains (LinkUpOS, LucidORG.com, COO Playbook) operated by LucidORG LLC or other entities; those have their own Privacy Policies.

• Analytics — aggregate, privacy-first analytics (no cross-site tracking, no cookies that identify you personally).
• Contact form / email — if you email Eric directly, that message and your email address are processed through Google Workspace to deliver the message.
• No marketing automation — this site does not run newsletters, retargeting, or marketing pixels.

The only cookies this site sets are strictly-necessary ones for the analytics script and basic rendering. No third-party advertising or retargeting cookies.

This site relies on two legal bases under the GDPR:

• Legitimate interest for aggregate analytics. The data is not used to profile or identify individual visitors and runs only what is needed to understand overall site performance.
• Consent when you email Eric directly. Your message and email address are processed only to reply to you.

If you are a visitor from the EU, UK, or EEA, the GDPR gives you the following rights over your personal data:

• Access — ask what personal data this site holds about you.
• Rectification — ask for inaccurate data to be corrected.
• Erasure — ask for your data to be deleted, also known as the right to be forgotten.
• Restriction — ask that processing of your data be limited.
• Objection — object to processing based on legitimate interest.
• Portability — request a copy of your data in a portable format.
• Complaint — lodge a complaint with your local data protection authority if you believe your rights have been violated.

To exercise any of these rights, email hello@erichathaway.com. Because this is a personal site with no commercial operations, most requests can be handled within a few days and at no cost.

Aggregate analytics data is retained by the analytics provider according to its own retention schedule and is not tied to any individual visitor. Email correspondence is retained in Google Workspace under Eric's standard inbox policy and can be deleted on request.

Analytics and email infrastructure are provided by US-based companies (Vercel, Google). If you are an EU/UK/EEA visitor, your data may be transferred to the United States under the EU-US Data Privacy Framework or equivalent Standard Contractual Clauses maintained by those providers.

Questions? Email hello@erichathaway.com. Your message will go directly to Eric and will not be processed by any automated system beyond normal email delivery.

If this site's data practices change (e.g., a newsletter is added), this page will be updated with a new effective date at the top.