Privacy Policy

Website Operator and Data Controller
Sulis International operates this website at https://sulisinternational.com. We act as the data controller for personal data processed through the site.

GDPR Compliance
This policy complies with the General Data Protection Regulation (GDPR) where applicable (e.g., for visitors in the European Economic Area). Processing is based on legitimate interests (site functionality, spam prevention) or consent (where required, e.g., non-essential cookies).

Personal Data Collected
We collect minimal personal data via standard WordPress features:

Comments
Submitted data (name, email, website, comment), IP address, and browser user agent for spam detection.

An anonymized email hash may be sent to Gravatar for profile pictures (policy: https://automattic.com/privacy/). Approved comments show public profile pictures.

Uploaded Media
Avoid images with embedded location data (EXIF GPS), as visitors can extract it.

Contact Forms
Submitted data is used only to respond to inquiries; retained as needed and not shared.

Cookies

• Optional comment cookies store name, email, website (1 year).
• Session cookies verify browser compatibility (discarded on closure).
• Login cookies save details and preferences (2 days to 1 year; “Remember Me” extends to 2 weeks).
• Editing cookies identify posts (1 day).

No non-essential tracking cookies are used without consent.

Embedded Content from Third-Party Sites
Embedded items (e.g., videos) act as if visiting the third-party site directly. Third parties may collect data, set cookies, or track interactions if logged in.

Data Retention and Security
Data is retained only as long as necessary (e.g., comments indefinitely for context; cookies as noted). We implement reasonable security measures but cannot guarantee absolute protection.

International Transfers
Data may be processed in countries outside the EEA (e.g., via third-party services with standard safeguards).

Your Rights Under GDPR
If GDPR applies, you have the right to:

• Access your personal data.
• Rectify inaccuracies.
• Erase data (“right to be forgotten”).
• Restrict or object to processing.
• Data portability.
• Withdraw consent (where applicable).
• Lodge a complaint with a supervisory authority.

Requests are free and responded to within one month.

We do not use automated decision-making or profiling.

Changes and Contact
This policy may update; continued use implies acceptance. For questions or rights exercises, contact us via the site.

Last updated: December 31, 2025.