Privacy Policy

Last updated: 2 August 2026

Salt & House (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information. This policy explains what we collect when you visit saltandhouse.com or subscribe to our emails, how we use it, who we share it with, and the rights you have over it.

We handle personal information in line with the New Zealand Privacy Act 2020. If you are located in the European Economic Area (EEA) or the United Kingdom, we also aim to comply with the General Data Protection Regulation (GDPR) and UK GDPR. Our website address is: https://www.saltandhouse.com.

Who we are and how to contact us

Salt & House is a Christian devotional brand based in New Zealand. For any questions about this policy or your personal information, or to make a privacy request, please contact us at hello@saltandhouse.com.

The information we collect

Information you give us. When you subscribe to our email list or free devotional, we collect your email address and any name you provide. If you contact us or leave a comment, we collect the information you choose to share, such as your name, email address and message.

Information collected automatically. When you visit the site, our hosting provider and any analytics tools may automatically record technical information such as your IP address, browser type, device, referring page and the pages you view. This helps us keep the site secure and understand how it is used.

Email newsletters and the devotional series

When you sign up, we use your email address to send you the free devotional series and occasional emails from Salt & House. We send these emails using MailerLite, our email service provider, which stores and processes your subscriber information on our behalf. You can read MailerLite’s privacy policy at https://www.mailerlite.com/legal/privacy-policy.

Our emails include tracking that tells us whether an email was opened and whether links were clicked. This is done using a small invisible image (a “tracking pixel”) and tagged links, and it helps us understand which content is helpful and improve what we send. If you would prefer not to be tracked, you can set your email programme to block images.

Where we rely on your consent to send you marketing or devotional emails, you can withdraw that consent at any time by clicking the “unsubscribe” link at the foot of any email, or by contacting us. Unsubscribing stops further emails but does not affect emails already sent.

Our lawful bases for using your information (EEA/UK visitors)

Where the GDPR or UK GDPR applies, we rely on the following lawful bases: your consent (for sending marketing and devotional emails, which you may withdraw at any time); our legitimate interests (in keeping our site secure, preventing spam, and understanding how our content is used, balanced against your rights and freedoms); and legal obligations (where we are required to keep certain records).

Cookies

If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

We may also use cookies and similar technologies to make the site work properly and, where enabled, for analytics (for example, cookies set by our theme, by embedded forms, or by analytics services). You can control or delete cookies through your browser settings; blocking some cookies may affect how the site works.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.

Analytics

We may use analytics services (such as [Google Analytics or your analytics tool]) to collect anonymised, aggregated information about how visitors use our site, such as pages visited and time on the site, so that we can improve it. If we use Google Analytics, you can opt out using Google’s browser add-on. [Delete this section if you do not use analytics.]

Who we share your data with

We do not sell your personal information. We share it only with the trusted service providers who help us run Salt & House, and only as needed for them to provide their service:

• MailerLite — email delivery and subscriber management.
• Hostinger — website hosting and server logs.
• Automattic / Gravatar — profile images for comments, if you use Gravatar.
• An automated spam-detection service — to check comments for spam.

If you request a password reset, your IP address will be included in the reset email. We may also disclose personal information if we are required to do so by law.

Where your data is sent

Because our service providers operate internationally, your information may be stored or processed outside New Zealand — including in the European Union, the United Kingdom or the United States. Where information is transferred internationally, we rely on providers who offer appropriate safeguards and comply with applicable data-protection laws. Visitor comments may be checked through an automated spam detection service.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

If you subscribe to our emails, we keep your subscriber information for as long as you remain subscribed. If you unsubscribe, we may retain a minimal record (such as your email address on a suppression list) so that we do not email you again, unless you ask us to delete it entirely.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

How we keep your information secure

We take reasonable steps to protect your personal information from loss, misuse and unauthorised access, including using reputable service providers and secure (HTTPS) connections. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

What rights you have over your data

You have the right to ask us to access the personal information we hold about you, correct it if it is wrong, delete it, or provide it to you in a portable format. If the GDPR or UK GDPR applies to you, you also have the right to object to or restrict certain processing, and to withdraw consent at any time. You will not be treated unfairly for exercising these rights.

If you have an account on this site, or have left comments, you can request an exported file of the personal data we hold about you, including any data you have provided to us, and you can request that we erase it. This does not include any data we are obliged to keep for administrative, legal or security purposes. To make any request, email us at hello@saltandhouse.com. We may need to verify your identity before we act on a request.

Children’s privacy

Our site and emails are intended for adults and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Complaints

If you are concerned about how we have handled your personal information, please contact us first at hello@saltandhouse.com so we can try to put things right. You also have the right to complain to a data-protection authority: in New Zealand, the Office of the Privacy Commissioner (privacy.org.nz); in the EU, your local supervisory authority; and in the UK, the Information Commissioner’s Office (ico.org.uk).

Changes to this policy

We may update this policy from time to time. When we do, we will change the “last updated” date at the top of this page. Please check back occasionally to stay informed of how we protect your information.