Notice version: 2026-09-19.4. This notice takes effect when it is published with the corresponding privacy settings on The Working Gal.
Who is responsible
Dimitra Lioliou, an individual operating as The Working Gal in the United States, is the controller responsible for the personal information described in this notice.
Privacy contact: info@workingal.com.
Correspondence address: Dimitra Lioliou, The Working Gal, PO Box 103, Kirkland, WA 98083, United States.
Your choices
You can read the site and this policy without enabling optional services. Where a service needs your permission first, our controls offer Accept all, Decline all and Customize, with the optional boxes initially unchecked. Where audience analytics starts on arrival, they tell you so and offer Settings and Accept all. Accept all enables audience analytics and advertising. Settings shows both choices, selected unless you have already refused one, so saving without a change enables what is selected; untick what you do not want, or use Decline all there to stop everything. Until you choose, audience analytics runs, advertising stays off, and the message stays on the page. Privacy settings itself always opens with Accept all, Decline all and Customize, whichever way analytics started; individual choices appear after you select Customize, selected where analytics starts on arrival unless you have already refused one, and unchecked elsewhere. Closing the controls, scrolling, following an ordinary editorial link or continuing to read does not grant permission, and does not by itself stop measurement that has already started — use Decline all in Settings or Privacy settings for that. The Privacy settings control on this page lets you change your choices or reject optional services at any time; every page links here from its footer.
Audience analytics and advertising have separate permissions. A permission is available only when its corresponding service is ready. Enabling one does not enable the other.
Where you read from decides how audience analytics starts. In the European Economic Area, the United Kingdom and Switzerland it never starts until you enable it. Elsewhere, including the United States, it starts when you open the site; we tell you this on the page rather than starting quietly, and Decline all in Settings stops it. Advertising never starts anywhere without your permission. If we cannot determine where you are reading from, or cannot confirm this notice, analytics does not start.
If your browser sends a Global Privacy Control signal, we treat it as a refusal of audience analytics and do not start it, and where you have not already chosen, Settings opens with no optional service selected. We do not act on Do Not Track signals; that setting is unmaintained and we do not consult it.
We remember your choice for 180 days, whether it was a permission or a refusal, and we do not extend that period just because you visit again. When it lapses we ask again: where analytics needs your permission it does not start until you give it, and where analytics starts on arrival it starts again unless you decline again. Clearing browser storage removes the saved choice, and some browsers remove stored choices on their own after about a week without a visit. Marketplace links, social media content and the newsletter form work independently of these choices. Loading a newsletter form does not subscribe you to the newsletter.
A material change to a purpose, recipient or use of information sets aside a permission you have given. It does not set aside a refusal: if you declined, that decision stands until it lapses or you replace it. Where analytics needs your permission, nothing starts again until you give it, with the optional boxes initially unchecked. Where analytics starts on arrival, we tell you again, and measurement continues unless you have already declined or you decline now. On 2026-09-19 the controls offered where analytics starts on arrival changed to Settings and Accept all; a choice made there under an earlier notice is asked again, because it answered a different offer, while a refusal made there stands. Choices made where a service needs your permission first are not affected by that change. Preferences are specific to the browser and device you use.
If the browser cannot save your choices, or the page cannot verify its current privacy notice, analytics and advertising stay off. Withdrawing their consent stops future activity controlled by this site and may reload the page to stop an already loaded analytics or advertising service. A request already sent cannot be recalled. Withdrawal does not affect the lawfulness of processing before withdrawal. To request deletion of information already collected, contact us or use the relevant provider's privacy controls.
Delivering the site and remembering preferences
Our hosting and content-delivery providers, including Amazon Web Services, receive the network information needed to deliver a requested page or image: an IP address, requested resource, request time and browser/network headers. Requests can also produce operational and security records. We use necessary delivery and security processing on the basis of our legitimate interests in operating and protecting the site. Required browser storage remembers your privacy choices and supports the consent controls. This storage is separate from optional audience measurement.
The site delivers its fonts with its own assets. Our editorial content and eligible product images can remain visible when optional services are off. An image or product description does not by itself activate an advertising service.
Marketplace links
Paid product links are available in articles without a separate privacy-settings choice. Product images and titles can remain unlinked, with a marketplace action alongside them. Affiliate disclosures remain visible.
Our affiliate programmes include Amazon Associates, AvantLink, impact.com and Awin. Their links may use Amazon or network redirect domains before taking you to the retailer identified in the article. Following a paid link sends network information and affiliate attribution information to the network and retailer. They may use cookies or similar identifiers to associate a later purchase with our referral. Their own notices govern purchases, accounts and their subsequent processing. We may receive commission and referral reports from these programmes. Our accounting and commission records are processed for operating the business and meeting applicable recordkeeping obligations.
For details, see our affiliate disclosure policy and the provider notices: Amazon, AvantLink, impact.com and Awin.
Audience analytics
When audience analytics is running, Google Analytics receives information about page visits and the browser or device used. Our integration sends the page address together with a fixed list of campaign parameters, and nothing else from the address: utm_source, utm_medium, utm_campaign, utm_term, utm_content, gclid, fbclid and msclkid. Any other query parameter and the fragment are removed before sending. It also sends the address of the page you arrived from, reduced to that site and path, without that page's own query string or fragment. It uses browser identifiers to measure readership. We disable Google signals and advertising-personalisation signals in this integration and do not supply names or email addresses to it. Where analytics requires your permission, the analytics library is not loaded until you give it. Where analytics starts on arrival, the library loads with the page and stops when you decline. Declining does not activate a cookieless measurement alternative.
Analytics cookies created by our configuration expire after 180 days without a sliding extension. Cookie expiry and Google's retention of information already received are separate. Google's account retention controls and its privacy information explain retention of collected information. You can stop analytics at any time in Privacy settings — withdrawing your permission where you gave one, or declining where it started on arrival — and contact us about information held in our analytics account.
Advertising
With advertising permission, we load Meta Pixel for advertising measurement. Where audience analytics starts on arrival, Accept all gives that permission and Settings offers it selected unless you have already refused it; advertising still never starts until you choose. It can receive IP addresses, browser and device information, page information, identifiers and cookie information, and it measures visits associated with advertising. We do not serve advertisements on this site, and no other advertising service loads with this permission. You can decline or change your advertising choice at any time in our Privacy settings.
Meta can associate information with its own services and accounts according to the Meta privacy policy. Its notices and controls identify its uses, applicable recipients, retention and controls. Consent to audience analytics does not authorise advertising.
Social media content
We load supported YouTube, Instagram and Pinterest embeds and Instagram photos without a separate privacy-settings choice. A request to those providers discloses your IP address and browser information. They may use cookies, identify a logged-in account and process your viewing or interaction information under their own policies. YouTube embeds use its privacy-enhanced embedding domain; that domain does not make the network requests anonymous.
The providers' own account and browser cookies may require their controls to remove. See Google's privacy policy, Instagram's privacy information and Pinterest's privacy policy.
Newsletter
We load a signup form supplied by MailerLite without a separate privacy-settings choice. Loading it sends network and browser information to MailerLite and its form-delivery providers. If you separately submit the signup form, MailerLite processes the information you provide, including your email address, for us to manage the mailing list and send the newsletter. Subscription is voluntary and is based on your signup consent. MailerLite also processes subscription status, consent records and email delivery or interaction information as described in its privacy policy and data-processing agreement.
We keep an active subscription while you want the newsletter. Each newsletter provides an unsubscribe control, and you can also contact info@workingal.com. Changing analytics or advertising choices in Privacy settings does not unsubscribe an existing email subscription. After unsubscribe, we retain the minimum suppression and consent information needed to respect that choice and resolve disputes. A deletion request can address information already held by us or MailerLite on our behalf.
Reports and information you send us
This version does not enable browser reports of broken content or loading performance. Those services require their own separate choices and notices before collection begins.
If you contact us, we use your contact details and the information you send to answer you, handle your request and maintain necessary correspondence. Our legitimate interests in responding and administering the site, and applicable legal duties such as handling privacy rights requests, provide the basis for this processing. Please send only information needed for the request.
Retention and consent records
The 180-day browser preference includes the purposes selected, the decision and expiry times, and the notice and consent revisions. It is used to enforce and explain your choices, not as an analytics identifier. We retain versioned notices so that the information accompanying a choice can be identified.
Operational, correspondence and business records are retained for the period needed to deliver and secure the site, resolve the relevant request, honour suppression choices and meet applicable legal recordkeeping or claims requirements. Information no longer needed for those purposes is deleted or anonymised. Providers can have separate retention periods for processing for which they are responsible; the provider notices linked above explain their criteria and controls. Ask our privacy contact for information about records relating to you.
Recipients and international processing
Information may be handled by the hosting and delivery providers needed to serve the site, the optional providers you enable, our audience analytics provider wherever analytics starts on arrival and you have not stopped it, our newsletter provider if you subscribe, professional advisers where necessary, and authorities where disclosure is legally required. Paid-link destinations also receive information when you follow them.
We operate in the United States. Our providers may process information in the United States, Europe and other countries where they or their service providers operate. Where GDPR transfer restrictions apply, transfers must use an applicable adequacy decision or appropriate safeguards, such as the European Commission's standard contractual clauses, with any necessary additional measures. You can ask our privacy contact about the mechanism relevant to a particular transfer and how to obtain information about its safeguards. An ordinary optional-feature checkbox is not a separate waiver of international-transfer protections.
Your rights
Depending on the law applicable to you and the circumstances, you may request access to your personal information, correction, deletion, restriction of processing or a portable copy. You may object to processing based on legitimate interests, including objecting to direct marketing, and withdraw consent at any time. Contact info@workingal.com or write to the correspondence address above. We may request proportionate information to verify a request, and we respond within the applicable legal time limit.
You may also complain to a competent data-protection authority. Where GDPR applies, this can include the authority in the EU/EEA country where you live or work or where the alleged infringement occurred. You do not have to contact us first.
Changes to this notice
We publish updated notices with their version and the corresponding privacy controls. A wording correction does not automatically erase a refusal, and neither does a material change: a refusal ends only when its 180 days lapse or you give permission. Where a service needs your permission, a material change to optional processing requires a fresh affirmative choice before that processing starts again. Where audience analytics starts on arrival, a material change is notified to you, and analytics continues for readers who have not declined until they decline; a change to the controls offered there asks you to choose again.