Privacy &
Cookies.

This website is operated by Beckie Brown. If you have any questions about how your data is handled, or to make a data subject request, please contact me at gdpr@beckiebrown.com.

If you accept cookies, this site uses Google Analytics 4 to collect anonymised data about how visitors use the site. This includes:

This data helps me understand which content is useful so I can improve the site. No personally identifiable information — such as your name or email address — is collected through analytics.

If you use the contact form, I collect your name, email address, and the content of your message. I use this information to respond to your enquiry and, where relevant, to discuss potential consulting work.

This data is processed via Mailgun, which delivers the message to my inbox. Mailgun acts as a data processor on my behalf under a Data Processing Agreement. Messages are processed on Mailgun’s EU infrastructure and are not transferred outside the European Economic Area.

I keep contact form messages in my inbox for as long as they are useful for the conversation, typically up to 24 months from the last reply. After that they are deleted unless we are working together, in which case relevant correspondence is retained for the duration of the engagement and up to 6 years afterwards for tax and contractual records.

Newsletter signup is no longer offered on this website. The information below describes records from previous subscriptions.

For previous newsletter signups, your email address and a record of your consent (timestamp, the exact wording you agreed to, the page URL, and the consent version) were stored in a private Google Sheet. Existing consent records remain subject to the retention period below.

You can unsubscribe at any time using the unsubscribe link in any newsletter email, or by replying to ask me to remove you. Unsubscribing removes you from Substack but does not automatically delete the consent record — I keep that for up to 3 years as evidence that consent was properly obtained, after which it is deleted.

Different parts of this site rely on different lawful bases under UK GDPR Article 6:

Analytics data is processed by Google LLC using the Google Analytics 4 service. Google acts as a data processor on my behalf under a Data Processing Agreement.

Google Analytics anonymises IP addresses before any data is stored. Event data is retained for 2 months.

Contact form messages are delivered via Mailgun (operated by Sinch). Mailgun acts as a data processor on my behalf under a Data Processing Agreement. Messages are processed on Mailgun’s EU infrastructure and are not transferred outside the European Economic Area.

Newsletter consent records are stored in Google Sheets via my Google Workspace account. Google LLC acts as a data processor on my behalf under a Data Processing Agreement.

Data at rest is stored in the European Union under Google Workspace data region settings. Some processing operations (such as search indexing and backups) may still be carried out in the United States under appropriate UK GDPR Chapter V safeguards, including Google’s Standard Contractual Clauses.

If you previously opted in to the newsletter, your email address was added to a subscriber list hosted by Substack Inc. Substack is the data controller for the newsletter platform itself (their privacy policy applies to how they handle your subscription); I am the data controller for the decision to add you to the list and the content of the emails I send. Substack is based in the United States; data may be transferred to and processed in the US under Standard Contractual Clauses and other appropriate UK GDPR Chapter V safeguards.

Google LLC is based in the United States. Analytics data may be transferred to and processed in the US. This transfer is carried out under Google’s Standard Contractual Clauses and UK–US Data Bridge certification, which provide appropriate safeguards under UK GDPR Chapter V.

Cookies are only set after you accept. No cookies are set if you decline.

Under UK GDPR you have the right to:

To exercise any of these rights, email gdpr@beckiebrown.com.