Who controls your data

This policy covers what this site collects, why, how long it is kept and what you can do about it. It does not cover the platforms we link to. The data controller — who decides why and how your data is processed — is the operator of Reechly.

What we collect

• Server logs. Our host records IP address, timestamp, page requested, referrer, browser and OS, for security and fault diagnosis.
• Analytics. Which pages are read and how visitors arrive: approximate location, device type, referrer.
• Contact messages. Whatever you send — address, name if given, message — used to reply and log corrections.
• Newsletter address. Where a signup is offered and you use it: the address, date of consent and confirmation status, so we can send it and prove consent was given.

We are a publication, not a service you log in to: no accounts, no payment details. We do not knowingly collect special-category data such as health, political or biometric information.

Cookies and affiliate tracking

Cookies are small files stored by your browser. The point most policies bury: when you click an affiliate link here — any address beginning /go/ — you are redirected to a third party, which will normally set its own cookie. Brevo links pass through PartnerStack, its affiliate platform, which sets a cookie with a stated 90-day lifetime so a later signup can be credited to us. That cookie is set under the destination’s and the network’s policies, not ours, and gives us no identifying data about you. If you would rather it were not set, go to the vendor directly. Our affiliate disclosure explains the commercial side.

Our own analytics may set a first-party identifier, and our host a strictly necessary security cookie. Where consent is required in your region it is requested on your first visit.

Legal bases for processing

• Legitimate interests for server logs, security, abuse prevention and aggregate analytics.
• Consent for non-essential cookies where the law requires it, and for newsletters. You may withdraw consent at any time; withdrawal does not affect processing already carried out.
• Legitimate interests for replying to messages you send us.
• Legal obligation where records must be retained, for example for tax.

Third parties who process data for us

A few suppliers process data on our behalf: a web host, an analytics provider, an email provider, and the affiliate networks behind our commercial links. Each is bound by its own terms.

We do not share personal information with advertisers for their own marketing.

How long we keep data

Server logs are kept weeks, not years, then deleted or overwritten by our host. Analytics is retained in aggregate. Correspondence is kept while the matter is open, and where a correction was logged. Newsletter addresses stay until you unsubscribe.

International transfers

Suppliers may process data outside your country, including in the United States. Where data leaves the UK or EEA, transfers rely on the mechanisms GDPR permits — an adequacy decision, or standard contractual clauses.

Your rights

In the UK or EEA you have the right to access the data we hold about you, to have it corrected or erased, to restrict or object to processing (including processing based on legitimate interests), to receive it in a portable format, and to withdraw consent. You may also complain to your supervisory authority — in the UK, the ICO.

California residents have the right under the CCPA and CPRA to know what is collected and how it is used, to delete or correct it, and to opt out of the sale or sharing of personal information. We do not sell personal information and we do not share it for cross-context behavioural advertising. We will not discriminate against you for exercising any right.

To exercise a right, contact us and say which one. We reply within the statutory period — one month under GDPR, 45 days under CCPA — and may ask for enough detail to confirm the request is yours. Requests are free unless excessive.

Children’s data

This site is written for people running email marketing at work. It is not directed at children and we do not knowingly collect data from anyone under 16. Tell us if you believe a child has sent us data and we will delete it.

Changes to this policy

We update this policy when the site changes: a new analytics tool, network or form. The version on this page is the current one, and material changes are noted here with their effective date. Questions: contact us.