1. Introduction
This policy outlines how Ned Helyar collects, uses, stores, and protects the email data of individuals who subscribe to our mailing list. This policy complies with the UK General Data Protection Regulation (UK GDPR) and other relevant data protection legislation.
2. Data Collection
Method of Collection: We collect email addresses primarily through:
Voluntary subscription forms on our website or other online platforms.
In-person sign-up sheets at events.
Email opt-in forms within our marketing materials.
Data Collected: We only collect the email addresses necessary for sending our mailing list communications.
3. Data Usage
Purpose: We use email data solely for the purpose of:
Sending our mailing list communications, which may include:
Newsletters
Updates on our products or services
Invitations to events
Promotional offers
Analysing mailing list engagement (e.g. open rates, click-through rates) to improve our communication strategies.
Legal Basis: Our lawful basis for processing email data is:
Legitimate Interests: To communicate with our subscribers about our organisation, products, and services. We ensure that our legitimate interests are balanced against the rights and freedoms of individuals.
Consent: Where required, we obtain explicit and informed consent from individuals before adding them to our mailing list.
4. Data Storage and Security
Storage: Email data is stored securely on secure servers provided by Square Space.
Security Measures: We implement appropriate technical and organisational security measures to protect email data from unauthorised access, use, disclosure, alteration, or destruction, including:
Access controls
Encryption
Regular security audits
Anti-virus and anti-malware software
Data Retention: We retain email data for as long as the individual remains subscribed, or as required by law.
5. Subscriber Rights
Access: Individuals have the right to access their personal data, including their email address.
Rectification: Individuals have the right to request the rectification of inaccurate or incomplete personal data.
Erasure ("Right to be Forgotten"): Individuals have the right to request the erasure of their personal data, including their email address.
Restriction of Processing: Individuals have the right to restrict the processing of their personal data.
Data Portability: Individuals have the right to receive their personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Objection: Individuals have the right to object to the processing of their personal data, including for direct marketing purposes.
6. Unsubscribing
We provide a clear and easy-to-use unsubscribe mechanism in every email communication, allowing subscribers to opt-out of receiving further messages at any time.
Unsubscription requests are processed promptly and efficiently.
7. Contact Information
For any questions or concerns regarding this Email Data Policy, please contact Ned Helyar, using helyar.ned@gmail.com.
8. Policy Updates
This Email Data Policy may be updated from time to time. We will notify subscribers of any significant changes to this policy.