Privacy Policy

Draft privacy policy — legal review required before use.

Who we are

[set in admin], [set in admin]. Contact: [set in admin].

Data and purposes

We collect newsletter email addresses, signup and confirmation dates, IP addresses, browser user agents, source pages and the wording accepted. Marketing is based on your consent and double opt-in. You may withdraw consent at any time. We use inquiry details to respond and forward your request to the relevant operator, and owner correspondence to maintain directory information, on the basis of legitimate interests. You may object to that processing. We retain server logs for security and troubleshooting.

Retention and suppression

We keep signup evidence while subscribed and after unsubscribe to demonstrate consent and honour suppression, until an erasure request is processed or the information is no longer necessary. Pending signups and operational records are reviewed for deletion when no longer needed; no automatic deletion schedule is currently configured. Erasure removes newsletter personal data and retains a keyed suppression hash to prevent future marketing. This is pseudonymous data, not a promise of complete anonymisation. Inquiry and correspondence retention is reviewed according to purpose and legal obligations.

Service providers and transfers

Resend processes email, Replit hosts the service and data, and Anthropic provides drafting assistance for owner correspondence. Operators receive inquiries addressed to them. These services may process data outside your country, including outside the UK or EEA. Appropriate contractual safeguards and applicable transfer requirements must be reviewed by the controller before use.

Your rights

You may request access, rectification, erasure, restriction or portability, object to legitimate-interest processing, and withdraw marketing consent without affecting earlier lawful processing. Contact [set in admin]. You may complain to your local data protection authority or the UK ICO.

Cookies

The application uses an essential admin-session cookie for authenticated administration. Newsletter subscription does not require a marketing cookie. Hosting infrastructure may use technical cookies or logs. Any additional analytics or advertising technology must be disclosed and, where required, consented to before activation.