This policy explains what information this site collects when you sign up for updates from Nancy T. Calland, why, and what your rights are.
CockRobin Creative, acting on behalf of Nancy T. Calland, is the data controller for the information this site collects. Contact: [email protected].
When you use the email signup form, we collect: the email address you provide; the IP address your request came from and the exact wording shown next to the consent checkbox at the time (kept as evidence that you agreed, in case that's ever needed); which cookie categories you accepted or declined, tied to a random identifier stored in your browser rather than to your name or email; and, once you are subscribed, whether you open the emails we send and whether you follow links in them (see “Who else sees this data” below).
We use your email address to send you updates about Nancy T. Calland's writing — new content, launch updates, and (if you've opted in specifically) advance reader copy outreach. We never sell or share your email address with anyone outside the services listed below.
We rely on your consent for the mailing list. There are no non-essential cookies or trackers on this site to consent to. You give that consent in two steps: by submitting the signup form, with the wording explaining what you're agreeing to shown directly beneath it, and then by pressing the confirm button on the page the emailed link takes you to (a "double opt-in" — your address only becomes mailable after that second step). You can withdraw consent at any time (see "Your rights" below), and doing so doesn't affect anything sent before you withdrew it.
This site sets no cookies at all. It stores one small item in your browser's local storage to remember the choice you made on the banner, so you aren't asked again on every visit. That is the only thing kept on your device, and it never leaves it. No advertising or cross-site tracking technology is used anywhere on this site.
We count visits so we know whether anyone is finding the site, and we do it without identifying anybody. When you open a page, our own server records which page it was, roughly how long it stayed open, the country your request came from, whether you're on a phone or a computer, and which site linked you here if any.
Your IP address is never stored. Instead it is combined with your browser type and a secret that we generate fresh every night, and turned into a one-way code. That code cannot be turned back into your address, and because the secret is destroyed and replaced each night, the code stops matching you the following day. It lets us tell one visit from another within a single day, which is all we need to count visitors honestly, and nothing more.
Nothing is stored on your device to do this, no third party is involved, and none of it is sent anywhere else. Because the result cannot identify a person, it isn't personal data — which is also why it doesn't require your consent under PECR.
Confirmation and marketing emails are sent through Brevo (Sendinblue SAS), a French company, who process your email address on our behalf under their own data processing agreement. Brevo stores this data within the EU, so no international transfer safeguard is needed. Brevo also records whether you open our emails and whether you click the links in them, and that information is tied to your subscriber record — we use it to judge what's worth writing to you about, and nothing else. Unsubscribing stops it completely, and most email apps can be set to block the tracking image if you'd rather not be counted while staying subscribed. No other third party receives your information.
We keep your subscriber record for as long as you're subscribed, plus a reasonable period afterwards as evidence of consent (or of your unsubscribe request). Cookie-consent records are kept for the same reason. If you'd like your data deleted sooner, see "Your rights" below.
You can unsubscribe at any time using the link in any email we send you — this takes effect immediately and needs no login. You also have the right, under UK GDPR, to ask for a copy of the data we hold about you, to have it corrected, to have it deleted, or to object to how it's used. To exercise any of these, email [email protected]. If you're unhappy with how we've handled your data, you also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).
If what this site collects or how it's used changes materially, this page will be updated and, where appropriate, existing subscribers will be told.