Privacy Policy

1. Who we are

This site, Boreholeflow (“the site,” “we,” “us”), is operated by Ateya, the sole owner of the website. The site publishes informational and review content about well water equipment for an English-speaking audience worldwide, including the United States, the United Kingdom and Europe. The operator is based in Kenya. The site is hosted by Hostinger.

This Privacy Policy explains what personal information we collect when you use the site, how we use it, who we share it with, and what rights you have over it. By using the site, you agree to the practices described here. If you disagree, please stop using the site.

2. Information we collect

We collect personal information only in the following situations:

When you subscribe to the newsletter. We collect your email address (and your name, if you choose to provide it).

When you submit the contact form. We collect your name, email address, the subject you select, and the contents of your message.

When you post a comment on an article. WordPress, which runs this site, collects the name, email address, optional website URL, and IP address you submit with your comment.

Automatically, when you visit any page. Our hosting provider’s server logs record your IP address, browser type and version, operating system, referring URL, and the pages you view. Google Analytics (via Google Site Kit) records anonymized usage data including pages viewed, session duration, approximate geographic region, and device type. Google AdSense and other advertising services we use may record information about ad impressions and clicks.

Through cookies. See Section 5 below.

We do not collect health information, financial information, government identification numbers, or precise location data. We do not require user accounts, and we do not process payments — the site does not sell anything directly.

3. How we use your information

We use the information described above to:

• Send you the newsletter you subscribed to (if you subscribed)
• Reply to messages you send through the contact form or post in comments
• Operate, maintain, secure, and improve the website
• Understand how visitors use the site (which articles are read, where readers come from, what works and doesn’t)
• Detect and prevent spam, abuse, and security threats
• Comply with legal obligations applicable to us

We do not sell your personal information to anyone. We do not share your email address with other affiliate sites, marketers, or any third party except the service providers listed below.

4. Third parties that process data on our behalf

The following third-party services help us run the site. Each has its own privacy policy that governs how it handles data:

If we add or remove a third-party service that processes personal data, we will update this table.

We may also disclose personal information when required by law, court order, or government request, or when necessary to protect our rights, property, or safety, or to prevent fraud or abuse.

5. Cookies and tracking technologies

Cookies are small text files stored on your device by your browser. We use cookies and similar technologies for:

• Essential functions — making the site work (e.g., remembering whether you’ve dismissed a notification)
• Analytics — measuring how the site is used (Google Analytics)
• Advertising — delivering and measuring ads (Google AdSense)
• Affiliate tracking — recording when you click an affiliate link so commissions can be attributed correctly

You can disable or delete cookies through your browser settings. Disabling cookies may affect your experience of the site. Browser-level “Do Not Track” signals are not currently honored by most browsers in a consistent way; we do not respond to them.

For visitors from the European Union, the United Kingdom, and other jurisdictions requiring explicit cookie consent, our cookie consent tool lets you accept or reject categories of cookies before they are set.

6. Affiliate links and Amazon Associates

When you click an affiliate link on this site — for example, a link to a pump or pressure tank on Amazon — the destination retailer may set tracking cookies on your device that record the referral. This allows the retailer to attribute any subsequent purchase to Boreholeflow and pay us a commission. The retailer’s privacy policy governs how it uses that tracking data.

See the Affiliate Disclosure for more on how affiliate links work and how they affect (or do not affect) our recommendations.

7. International data transfers

The site’s operator is located in Kenya. The site is hosted by Hostinger, which operates servers in multiple countries. Several of the third-party services we use (Google, Kit, Amazon, Cloudflare, Wordfence) are based in or operate from the United States.

If you visit the site from the European Union, the United Kingdom, or another jurisdiction with data protection laws different from those in Kenya or the United States, your information may be transferred to and processed in those locations. By using the site, you consent to this transfer. Where required, the third-party services listed in Section 4 maintain their own legal mechanisms (such as Standard Contractual Clauses) for cross-border data transfer.

8. Your privacy rights

General rights

You have the right to:

• Request a copy of the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information (subject to legal retention requirements)
• Object to or restrict certain types of processing
• Withdraw consent for processing where consent is the legal basis (e.g., unsubscribe from the newsletter)

To exercise any of these rights, email hello@boreholeflow.com with “Privacy Request” in the subject line. We will respond within 30 days. We may need to verify your identity before acting on a request.

European Union and United Kingdom visitors (GDPR / UK GDPR)

If you are in the EU, UK, or another country with comparable laws, you have additional rights under the General Data Protection Regulation, including:

• The right to data portability — receive your data in a structured, machine-readable format
• The right to lodge a complaint with your local data protection supervisory authority

The legal bases on which we process your data include: your consent (newsletter, cookies), legitimate interest (site analytics, security, fraud prevention), and legal obligation (where required by law).

California visitors (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act gives you additional rights, including the right to know what personal information we have collected, the right to delete it, and the right to opt out of any “sale” or “sharing” of personal information. We do not sell or share personal information within the meaning of the CCPA. To exercise your other rights, contact us at the email above.

9. Children’s privacy

This site is not directed at children. We do not knowingly collect personal information from anyone under the age of 13 (or, for visitors in the EU/UK, under the age of 16). If you are a parent or guardian and believe a child has provided us with personal information, please contact us and we will delete it.

10. Data security

We use industry-standard measures to protect personal information, including SSL/TLS encryption for all data transmitted to and from the site, a security firewall (Wordfence), and restricted access to data stored by our service providers. No internet service can be guaranteed 100% secure, however, and we cannot warrant absolute security of information you submit.

If a data breach occurs that materially affects your personal information, we will notify affected users and relevant authorities as required by applicable law.

11. Data retention

• Newsletter subscriber data: retained until you unsubscribe or request deletion
• Contact form messages: retained for up to 3 years for reference and to respond to follow-up correspondence
• Comment data: retained as long as the comment is published on the site
• Analytics data: Google Analytics data is retained according to Google’s settings (currently 14 months for user-level data; aggregated data is retained indefinitely)
• Server logs: retained by our hosting provider per their standard retention period

When data is no longer needed for the purposes it was collected, it is deleted or anonymized.

12. Changes to this Privacy Policy

We may update this Privacy Policy as our practices, technology, or legal requirements change. When we make material changes, we will update the “Last updated” date at the top of this page. For significant changes, we will post a prominent notice on the site or — if you are a newsletter subscriber — notify you by email.

Your continued use of the site after changes means you accept the updated policy.

13. Contact

Questions, requests, or concerns about this Privacy Policy can be sent to:

Email: hello@boreholeflow.com
Subject line for privacy requests: “Privacy Request”

You can also use the contact page.

By using Boreholeflow, you acknowledge that you have read and understood this Privacy Policy.