Privacy Policy
Honest version first: this site is built to collect as little as possible. Today it is a static site — we set no cookies of our own, run no analytics, and have no accounts or forms. The details below describe exactly what exists now and what will exist at launch, clearly separated.
Who is responsible (the controller)
Controller: [YOUR NAME] PRE-LAUNCH-EDIT, operating The Wraplist from [EU COUNTRY] PRE-LAUNCH-EDIT.
Contact: [LAUNCH EMAIL] PRE-LAUNCH-EDIT — for any privacy question, data request, or complaint. That address is also the channel for exercising every right listed below.
What we collect today (pre-launch, static site)
- Nothing directly. The pages you are reading are static files. We set no cookies, run no tracking pixels, and collect no analytics.
- Hosting logs: the site is served through Cloudflare Pages. Like any web host, Cloudflare processes standard technical request data (e.g., IP address, timestamp) as our processor to deliver pages and protect against abuse. We do not use these logs to profile visitors and do not run Cloudflare analytics on this site.
- Newsletter — at launch, not yet: The Sunday Wraplist will run through MailerLite. Then we will store your email address and signup time, on the legal basis of your consent, until you unsubscribe. Every email carries a one-click unsubscribe. MailerLite acts as processor under its own GDPR terms. PRE-LAUNCH-EDIT: confirm MailerLite list settings + processor terms at launch
Affiliate links — what happens after you click
Product buttons on this site link to independent shops and affiliate networks. We set no cookies when you click. After the click, the destination site is responsible for its own cookies and privacy practices, on its own domain, under its own policy — concretely, the shop or its affiliate network (e.g. Sovrn, Awin) may set its own referral/tracking cookie on the destination site to attribute your purchase.
What comes back to us: aggregated commission reports from affiliate networks (e.g., "X orders, $Y total"). These reports contain no names, email addresses, or other personal data about buyers.
Legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Delivering and securing the site | Hosting request logs (Cloudflare, processor) | Legitimate interest — essential site operation and security |
| The Sunday Wraplist newsletter (at launch) | Email address, signup time | Consent — given at signup, withdrawable any time via unsubscribe |
| Affiliate accounting | Aggregated order counts/totals (no personal data) | Legitimate interest — running the business you are reading |
| Answering your emails | Whatever you choose to send us | Legitimate interest / consent to the correspondence |
Your rights (GDPR)
You have the right to: access your data, rectify it, erase it, port it to another provider, object to or restrict processing based on legitimate interest, and withdraw consent at any time (newsletter: use the unsubscribe link or just email us). To exercise any right, contact [LAUNCH EMAIL] PRE-LAUNCH-EDIT — we will respond within one month.
You also have the right to complain to your data protection supervisory authority (the authority for [EU COUNTRY] PRE-LAUNCH-EDIT).
Retention
- Newsletter subscribers: until unsubscribe, plus a suppression record to honor your opt-out [duration set in MailerLite at launch — PRE-LAUNCH-EDIT]
- Correspondence with us: [12 months default — PRE-LAUNCH-EDIT]
- Hosting logs: retained by Cloudflare per its standard terms; we make no independent copies
Processors and third parties
| Party | Role | What they get |
|---|---|---|
| Cloudflare (Pages, Registrar) | Processor — hosting, CDN, domain | Technical request data |
| MailerLite (at launch) | Processor — newsletter | Email address, signup time PRE-LAUNCH-EDIT |
| Affiliate networks (Sovrn, FlexOffers, Impact, Awin — as joined; PRE-LAUNCH-EDIT) | Independent controllers of their own reporting | Aggregated commission data; no buyer personal data to us |
Some processors are outside the EU (US-based). Where personal data could reach them (in practice: your email address via MailerLite or a network you join), transfers rely on recognized safeguards such as the EU Standard Contractual Clauses [confirm per processor at launch — PRE-LAUNCH-EDIT].
Children
The site is not directed at children, and we do not knowingly collect data from them.
Changes to this page
When the site changes (analytics added, newsletter launched, networks joined), this page changes with it — with an updated date at the bottom. If we ever add analytics cookies, a consent banner will appear before they run.