Privacy Policy

Last updated: 17 September 2026

Who I am

I’m Viktoriia Niezhentseva, known publicly as Victoria Nezh, an independent designer and author based in Portugal. I am the data controller for the personal data described in this policy and used to provide my free book chapter and optional newsletter through this landing page.For privacy questions or requests, contact hello@victorianezh.com.

What information is collected

The signup form asks for your email address only. Subscription records also include your signup source, confirmation status and newsletter-consent choice. Kit hosts the landing page, manages subscriptions and sends the emails. In providing these services, Kit may also process technical and activity information such as your IP address, browser or device information, page visits, confirmation activity, email-open events and link-click events. Further details are provided below. If you contact me directly, I also receive the information you choose to include in your message.

Why I use your information

To provide your free chapter. I use your email address to send the confirmation and chapter-download instructions you request. This processing is necessary to take steps at your request and provide the chapter. Providing an email address is voluntary, but it is necessary to receive the chapter by email.

To send the optional newsletter. If you select the separate newsletter checkbox and confirm your email address, I will send creative notes, design discoveries, ideas from conferences and occasional updates about my books and projects—about once a month. The legal basis is your consent. Receiving the free chapter does not require agreeing to the newsletter. You can withdraw your newsletter consent at any time by using the unsubscribe link in a newsletter email or by contacting me. Withdrawal does not affect processing that was lawful before it occurred.

Administration, compliance and security. I use relevant records to respond to privacy requests, record consent and withdrawal, honour opt-outs, resolve delivery problems and demonstrate compliance with data-protection obligations. I may process limited technical information where necessary for my legitimate interests in protecting the service, preventing misuse and maintaining its security, subject to your rights.

Email analytics

Emails sent through Kit may contain a small tracking image that records an email-open event. Links may also be redirected through Kit so that a click event can be recorded. These events may be connected to an individual subscriber profile and are not necessarily anonymous.

I use this information, where permitted by applicable law, to understand email delivery and general engagement, troubleshoot problems and improve future communications. I do not use email-activity information for third-party advertising or automated decisions that produce legal or similarly significant effects.

Kit has confirmed that its Privacy-first Emails setting disables the open-tracking pixel, including in confirmation and incentive-delivery emails. Kit has also confirmed that link rewriting and click tracking cannot currently be disabled through the account settings. Because settings may affect which events are recorded, you may contact me if you would like information about the configuration currently applied to my account.

Cookies and local storage on the landing page

According to information provided by Kit support, the hosted landing page currently uses the following browser technologies:

__cf_bm cookies: two short-lived Cloudflare cookies, each lasting approximately 30 minutes, used for bot detection and security. One is placed on the landing page’s Kit domain and the other on Kit’s script domain.
ckid local-storage entry: a random identifier used to count unique visits and recognise repeat visitors to the page. Kit has stated that this entry does not have a set expiry. It is stored when the page loads, before any consent action on the hosted page.
cksubscribed-1e21d73726 local-storage entry: set after the form is submitted. It records that the browser has already subscribed so the page can apply its returning-visitor setting. Kit has stated that this entry does not have a set expiry.
mailappsession and XSRF-TOKEN cookies: short-lived session and security cookies used within the confirmation overlay after the form is submitted. mailappsession lasts approximately 10 minutes. These cookies are used within the overlay rather than on the landing page itself.

Kit’s landing-page script otherwise uses local storage rather than setting its own cookies. At the date of this policy, I have not connected Google Analytics, Google Tag Manager, Meta/Facebook Pixel, Segment, Pinterest, Fathom, SparkLoop or other optional advertising or analytics integrations to this landing page, and reCAPTCHA is disabled. If I later add an optional analytics, advertising or similar service, I will update this policy and implement any information and consent controls required by applicable law.

Service providers and international transfers

I use Kit and its service providers to host the landing page, manage subscriptions, deliver the chapter and send emails. For subscriber data processed on my instructions, I act as the data controller and Kit acts as my data processor. Kit may also process certain service-usage information for its own purposes, as described in its Privacy Policy.

Processing may take place outside the European Economic Area, including in the United States. Kit describes the safeguards it uses for international transfers in its Data Processing Addendum⁠, including the EU–U.S. Data Privacy Framework where applicable and the European Commission’s Standard Contractual Clauses.

How long information is kept

Unconfirmed requests: kept for no longer than 30 days after signup, unless a longer period is reasonably necessary to investigate a delivery or security problem.
Chapter-only requests: kept for no longer than 30 days after the chapter-delivery process is completed, unless a longer period is reasonably necessary to resolve a delivery problem or respond to a request.
Newsletter subscriptions: kept while you remain subscribed and the newsletter continues to operate.
Opt-out and compliance records: limited information may be kept after unsubscription or deletion for as long as reasonably necessary to respect your opt-out, establish that consent was obtained or withdrawn, and meet legal obligations.
Technical records and backups: limited information may be kept after unsubscription or deletion for as long as reasonably necessary to record consent or withdrawal, honour your opt-out, respond to disputes and meet legal obligations.

When a subscriber profile is deleted from Kit, Kit has stated that deletion begins approximately 24 hours after the request and that the subscriber profile and custom fields are removed from its active database. Kit retains an email suppression record indefinitely so that an unsubscribe or opt-out continues to be honoured.

Backup copies are retained for a limited period on a rolling cycle before being overwritten and are isolated from further processing in the meantime. Kit has not provided a fixed number of days covering every backup, log, consent record or downstream copy used by Kit and its subprocessors. Its contractual commitments concerning deletion and protected backups are described in its Data Processing Addendum.

I periodically review the information I control and delete or anonymise it when it is no longer needed for the purposes described above.

Your rights

Depending on the circumstances and applicable law, you may ask to access, correct or delete your personal data, restrict its processing, receive a portable copy, or object to processing based on legitimate interests. You can withdraw consent at any time. Email hello@victorianezh.com to make a request. I may need proportionate information to verify your identity. I will normally respond within one month and will explain any lawful extension. You may also complain to Portugal’s data-protection authority, the Comissão Nacional de Proteção de Dados (CNPD)⁠, or another competent supervisory authority.

Other websites and policy updates

Links to bookshops, social platforms and other external websites take you to services with their own privacy practices. I am not responsible for the privacy practices of those external services.

I will update this policy when the way I process information changes and will revise the “Last updated” date above. Where a change requires new consent, updating this page alone will not replace that consent.

Victoria Nezh.

Designer and author of

How to Work Without Losing Your Mind (or Your Weekend)