Privacy Policy
Last update: 26 March 2026
Effective date: 19 October 2025
We respect your privacy. This policy explains what we collect, why, and how you can exercise your rights.
1. Who we are (Controller)
Unpolished Dispatch ("we", "us", "our"). If you are in the UK or EU, we process personal data in accordance with the GDPR, UK GDPR, and applicable e-privacy rules.
2. What we collect
- Newsletter data: email address and, if provided, your first and last names.
- Analytics data:
- Google Analytics 4 (GA4): pseudonymous identifiers and event data such as pages viewed, device and browser info, and approximate location based on IP at a regional level.
- Cloudflare Web Analytics: aggregate usage and performance data such as page views, page path, referrer host, browser, operating system, device type, country, page-load timing, and Core Web Vitals.
- Technical data: IP address (short-lived in logs for security), user-agent, and cookie consent choices.
We do not intentionally collect sensitive categories of data. We do not sell personal data.
3. How we obtain data
- Directly from you, for example when you subscribe.
- Automatically via analytics cookies and analytics beacons when you consent to analytics.
4. Why we use your data (lawful bases)
- Newsletter: to send you issues and manage subscriptions; consent.
- Analytics: to understand readership and improve content; consent.
- Security and maintenance: to protect the site and detect abuse; legitimate interests and or legal obligation.
5. Sharing and processors
We do not share your data with third parties for their own marketing. We use trusted processors that act on our instructions:
- Brevo for email delivery and list management.
- Google for GA4 analytics.
- Cloudflare for Web Analytics.
These providers may store or process data in multiple locations. Where transfers occur outside your jurisdiction, we rely on appropriate safeguards made available by providers.
6. Data retention
Newsletter data is kept until you unsubscribe, plus up to 12 months to maintain suppression lists and audit records.
Analytics data is retained according to GA4 settings, typically 2 or 14 months for event-level data. Aggregated, non-identifiable reports may be kept longer.
Cloudflare Web Analytics data remains available according to Cloudflare service settings and documentation.
Server and security logs are typically retained for up to 90 days unless issues are being investigated.
7. Your rights
Subject to local law, you can:
- Access, correct, or delete your personal data.
- Object to or restrict processing in certain cases.
- Withdraw consent at any time, for example by unsubscribing or changing cookie preferences.
Use the contact form on the site to exercise these rights.
8. Children
Our content is not directed at children under 16. Do not subscribe if you are under that age.
9. Security
We use reasonable technical and organisational measures, including access controls, encryption in transit, and least privilege, to protect personal data. No system is 100 percent secure.
10. Changes to this policy
We will post updates here and adjust the effective date when needed.
11. Contact
Use the contact form on the site if you have questions about this policy.