Privacy Policy
Effective September 4, 2026
Not legal advice, and not final. This is a working draft built on standard practice for a US-based health and wellness publication. It needs an attorney’s review before it governs real user data — the specifics depend on exactly what’s collected and which state and international rules apply. See the bracketed notes below for what’s still unresolved.
This policy explains what information Now or Never collects, why, and what you can do about it.
Now or Never is operated by [LEGAL ENTITY], [ADDRESS].
What we collect
Information you give us. When you use the contact form, subscribe to emails, or write to us directly, we collect what you send: your name, email address, and anything in your message. When subscribing, we collect your email address and any optional details you provide.
Information collected automatically. Like most websites, we collect technical information when you visit: IP address, browser type and version, device type, operating system, referring page, pages viewed, and time spent. This comes from cookies and similar technologies — see our Cookie Policy.
We do not knowingly collect health information about you. Reading an article about a health topic is not us collecting a health record. Don’t send us medical details through the contact form; we’re not equipped to hold them and we’re not your care provider.
Why we use it
- To respond to your messages
- To send emails you asked for
- To understand which content is useful, in aggregate
- To keep the site working and secure
- To meet legal obligations
We do not sell your personal information. We do not share it with third parties for their own marketing.
Who we share it with
Service providers who help us run the site, and only what they need:
- Analytics — we do not currently run analytics tooling on this site. If that changes, it will be named here before it goes live.
- Email platform — we do not currently operate an email list. If that changes, the platform will be named here.
- Hosting — Vercel and/or Cloudflare, who serve the site and provide security infrastructure.
- Form processing — Formspree, for contact form delivery.
Each has its own privacy policy. We may also disclose information if legally required, or to protect rights and safety.
How long we keep it
Contact form messages: as long as needed to handle the inquiry, and up to 2 years afterward. Email subscribers: until you unsubscribe, plus a suppression record so we don’t email you again. Analytics: not applicable while no analytics tooling is in use.
Your choices
You can unsubscribe from any email using the link in it. You can ask us to delete your information by writing to [PRIVACY EMAIL]. You can control cookies through your browser and through our cookie settings.
If you’re in the EU or UK: you have rights of access, correction, erasure, restriction, portability, and objection under GDPR. Our lawful basis is consent for marketing email and legitimate interest for site security. You may complain to your local supervisory authority.
If you’re in California: you have rights to know, delete, correct, and opt out of sale or sharing under the CCPA/CPRA. We do not sell or share personal information as those terms are defined. We will not discriminate against you for exercising these rights.
Other US states: residents of states with comparable privacy laws have similar rights. Write to [PRIVACY EMAIL] and we’ll honor them.
To exercise any of these, email [PRIVACY EMAIL]. We may need to verify your identity first.
Children
This site isn’t directed at children under 13 and we don’t knowingly collect their information. If you believe a child has given us information, contact us and we’ll delete it.
Security
We use reasonable measures to protect your information. No website is perfectly secure, and we can’t guarantee absolute security.
Changes
We’ll update this policy when practices change, and revise the effective date. If changes are significant we’ll say so on the site.
Contact
[PRIVACY EMAIL] · [LEGAL ENTITY], [ADDRESS]