Privacy Policy

What we collect

We only collect what we need to run the site and its newsletter:

• Newsletter signup: your email address, chosen language, and — for our consent records — the date and time you signed up and confirmed, the page you signed up from, and your IP address at that moment.
• Optional measurement: only if you tick the separate box, whether you open and click our emails.
• Analytics: privacy-friendly, cookieless usage statistics (via Fathom) that do not identify you.
• Server logs: standard technical data such as IP address and browser, kept briefly for security and operation.

Why we use it, and our legal basis

We send the newsletter on the basis of your consent (Article 6(1)(a) GDPR), which you can withdraw at any time. We use cookieless, aggregate analytics and keep short-lived security logs on the basis of our legitimate interest in running a safe, working site (Article 6(1)(f) GDPR). We never sell your data or use it for advertising.

Cookies and analytics

The public site does not use tracking or advertising cookies. Our analytics (Fathom) are cookieless and do not build a profile of you, so no cookie-consent banner is shown. A small amount of information (such as recent searches or audio-player settings) may be stored on your own device to make the site work, and never leaves it. Cookies are used only in our staff admin area, and only to keep signed-in staff logged in.

How long we keep it

If you sign up but never confirm, we delete your details within 30 days. If you confirm, we keep your subscription until you unsubscribe. Security logs are kept for a short period only.

Who we share it with

We share data only with the service providers that operate the site on our behalf, under contract and only as needed:

• Email delivery: GoHighLevel (newsletter) and Amazon Web Services / SES (confirmation and service emails).
• Hosting and infrastructure: Vercel, Convex and Cloudflare.
• Analytics: Fathom Analytics.
• Staff sign-in: Clerk (admin area only).

Where your data is processed

Some of these providers are based outside the European Economic Area, including in the United States. Where that is the case, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or a recognised adequacy framework.

Unsubscribing

Every newsletter includes a one-click unsubscribe link and a visible unsubscribe option in the footer. You can leave at any time, and we act on it promptly.