This policy explains how TheRoundup collects, uses, shares, and retains personal information through TheRoundup.org, our newsletter signup forms and hosted landing pages, our emails sent through Kit and GetResponse, and direct communications with us. It also explains your choices and privacy rights.
TheRoundup.org is operated by Two Bells Publishing Ltd, company number 17467920. We are the data controller responsible for the personal information described in this policy.
Our registered office is Hexagon House, Avenue Four, Station Lane, Witney, Oxfordshire, OX28 4BN, United Kingdom.
For privacy questions or requests, email [email protected] or write to us at our registered office.
This policy explains our data practices. It is not a request for consent.
Information you provide: When you subscribe, we collect your email address and any name or other details you choose to provide. If you contact us, we receive your contact details, the content of your message, and any attachments or other information you send.
Subscription records: Our email providers store your subscription status, signup source, available signup and confirmation records, changes to your details, and unsubscribe or complaint records.
Email activity: Our email providers record delivery, bounces, and unsubscribes. Kit records opens and link clicks, and GetResponse can record these where tracking is enabled. This information is linked to subscriber profiles and can include activity dates and times, IP addresses, browser or device information, and approximate location. The email tracking section below explains this further.
Website and technical information: Our website, hosted signup pages, and service providers may collect IP addresses, browser and device information, referring pages, pages visited, and access dates and times through server logs, cookies, and similar technologies. IP addresses and other online identifiers can be personal information.
You do not have to subscribe to browse our website. An email address is needed to send you the newsletter and deliver guides by email. Providing other information is voluntary unless a particular form explains why it is required.
Where UK data protection law applies, we use the following legal bases for the purposes described below.
We use email engagement information to understand newsletter performance and identify inactive subscribers. Consent is required for its collection or use where applicable law requires it; our interest in maintaining the mailing list does not override that requirement.
We may retain limited records to establish, exercise, or defend legal claims where necessary for our legitimate interests. We do not use a change to this policy as permission for an unrelated new use of your information.
Our newsletter includes reviews, practical eco-friendly tips, updates, and promotional offers. It may include sponsored emails featuring partner products and services. There is no fixed sending schedule.
Our Kit signup process uses double opt-in. We ask you to confirm your subscription by clicking the confirmation link in an email. After confirmation, we use your details to deliver any guides offered with your signup and send the newsletter, including welcome and follow-up emails. GetResponse subscriptions remain subject to the permissions obtained when those subscribers joined.
We use Kit, formerly ConvertKit, and GetResponse to manage subscriptions, store subscriber information, and send emails.
Both providers process subscriber information on our behalf to provide their services. See Kit's Data Processing Addendum and GetResponse's Data Processing Agreement. The Kit Privacy Policy and GetResponse Privacy Policy explain each provider's own data practices.
You can update your details using the Preferences link in our Kit emails, any equivalent link in other emails, or by contacting us. You can withdraw marketing consent at any time using the unsubscribe link or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Unsubscribing stops future newsletter marketing covered by that subscription. It does not necessarily delete every record we hold about your subscription; see the retention section below.
Our Kit emails use a small tracking image and tracked links to record opens and link clicks. GetResponse emails can use similar technologies where tracking is enabled. Recorded activity is linked to your subscriber profile and may include its date and time.
We use this information to monitor newsletter engagement and help identify inactive subscribers when reviewing our mailing list. These records are not always accurate. Image blocking, email privacy features, and automated security checks can affect whether an open or click is recorded.
Blocking remote images in your email app may prevent the tracking image from loading, but does not necessarily prevent link-click tracking. To raise an objection to tracking or withdraw any tracking consent, email [email protected]. The Preferences link in our emails updates your details; it does not provide a tracking setting.
Where applicable law requires consent for email tracking, that consent is required in addition to any permission to send marketing emails. This policy explains the technology; it does not itself obtain that consent.
We send sponsored newsletter emails through our email service provider. Subscribing to the newsletter does not authorize sponsors to receive your contact details or send their own marketing emails to you.
Our website may use cookies and similar technologies to support basic functions and remember preferences. Server logs also help operate the website and investigate errors or misuse.
Some links are affiliate links. If you follow one and make a qualifying purchase, we may receive a commission. The retailer or affiliate network may use referral identifiers, cookies, and transaction information to attribute the purchase. This is separate from giving a newsletter sponsor your email address.
You can use your browser settings to block or delete cookies and use the relevant provider's privacy controls. Blocking cookies may affect website functions. Browser controls do not necessarily prevent all forms of tracking. Where consent is legally required for nonessential technologies, it must be obtained before those technologies are used; simply continuing to browse is not sufficient consent.
We use service providers to help operate the website and newsletter. These include Kit, GetResponse, and providers of hosting, technical support, and communication services. They receive information needed for the services they perform. Retailers and affiliate networks may receive the technical and referral information described in the affiliate links section.
We may disclose information to professional advisers or public authorities where necessary to comply with law, address a legal claim, or protect people's rights and security. Any disclosure must have a lawful basis and be limited to what is necessary.
We are based in the United Kingdom. Our service providers may process personal information in other countries, including the United States, where data protection laws may differ.
GetResponse's published agreement also describes its use of subprocessors and arrangements for transfers outside the European Economic Area, including adequacy decisions and Standard Contractual Clauses. Its processing locations depend on the service and account arrangement. See GetResponse's Data Processing Agreement for details.
Where UK data protection law restricts a transfer, an applicable adequacy arrangement or appropriate safeguards are required. Kit's Data Processing Addendum sets out its transfer arrangements, including Standard Contractual Clauses and the UK International Data Transfer Addendum for applicable UK transfers. You can read Kit's Data Processing Addendum or contact us for information about the safeguards relevant to your information.
Active subscriptions: We keep subscriber information while your subscription remains active, subject to periodic reviews of whether we still need it. We aim to remove inactive subscribers after approximately six months without a recorded email open. This is a review practice rather than an automatic deletion deadline.
Unconfirmed subscriptions: We keep unconfirmed signup information only as long as needed to administer the confirmation process, handle related issues, or prevent misuse. Unconfirmed signups are not treated as permission to send ordinary newsletter marketing.
Unsubscribe and consent records: We may retain limited information to document consent, deal with complaints, and prevent someone who has opted out from being added back by mistake. Kit retains unsubscribed profiles unless they are separately deleted. An unsubscribe therefore stops marketing without necessarily erasing the underlying record.
Other records: We retain inquiries and technical information only as long as needed for their purpose. Retention depends on the time needed to resolve an inquiry, investigate a technical or security issue, meet a legal obligation, or handle a complaint or dispute.
Our retention policy is to delete or anonymize personal information when it is no longer needed. Limited records may remain where needed for an unresolved dispute, a legal requirement, or to honor an opt-out.
Depending on the law that applies and the circumstances, you may request access to your personal information, correction of inaccurate information, deletion, restriction of processing, or a portable copy. You may also object to processing based on legitimate interests and withdraw consent where we rely on it.
You have the right to object to the use of your personal information for direct marketing at any time. We will stop using it for that purpose when you object.
To exercise your rights, email [email protected] or write to our registered office. We may need reasonable information to verify your identity. Rights are subject to applicable conditions and exceptions; for example, an erasure request does not necessarily require deletion of a minimal record needed to honor your marketing opt-out.
We normally respond to UK data protection requests without undue delay and within one month, subject to lawful extensions or pauses. We normally respond free of charge and charge a reasonable fee only where the law permits it.
You can raise a privacy complaint by emailing [email protected] or writing to our registered office. We will acknowledge it within 30 days, investigate it, and communicate the outcome without undue delay.
You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint, or to another competent data protection authority.
Where a US state privacy law applies to our processing, residents may have additional rights to know about, access, correct, or delete personal information; obtain a copy; and opt out of certain sales, sharing, targeted advertising, or profiling. Some laws also provide rights concerning sensitive information, authorized agents, and appeals. We will not unlawfully discriminate against you for exercising an applicable privacy right.
Send requests or appeals to [email protected]. We will apply the verification requirements, response deadlines, and exceptions required by the law that applies. Where the CCPA applies, requests to know, correct, or delete generally have a 45-calendar-day response period, with a permitted extension where necessary. Other requests, including opt-outs, can have shorter deadlines.
We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, or disclosure. No website, email service, or method of transmission can be guaranteed completely secure. Please avoid sending unnecessary sensitive information in an ordinary email.
Our website and newsletter are not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided information to us, contact us so we can investigate and remove it where appropriate. Additional protections may apply to older children under applicable law.
Our content may link to third-party websites, products, and services. Their operators are responsible for their own privacy practices. Review their notices before providing personal information. This does not remove our responsibility for any disclosure of information that we make to them.
We may update this policy to reflect changes to our services, practices, or legal obligations. The date at the top shows when it was last updated. Where required, we will bring material changes to your attention and obtain fresh consent before a new use that requires it. An update does not retrospectively authorize a new use of your information.
