1. WHAT DATA WE COLLECT

Newsletter sign-ups (Field Notes)

When you subscribe to our newsletter via the sign-up form on this site, we collect your email address. This data is processed by Beehiiv, our email platform. You can review Beehiiv's privacy policy at beehiiv.com/privacy.

Contact form submissions

When you submit the contact form on the Drop a Line page, we collect your name, email address, and the content of your message. This data is initially processed by Webflow, our site host, and then received by us directly.

Website analytics

We may collect anonymised data about how visitors use this site (pages visited, time on page, referral source) using analytics tools such as Google Analytics. This data is aggregated and does not identify individual visitors. You can opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.

Cookies

This site uses cookies. See our Cookie Policy for full details.

2. WHY WE COLLECT IT — LEGAL BASIS

We process your data on the following legal bases under UK GDPR Article 6:

• Email address for newsletter: Consent (Article 6(1)(a)). You explicitly opted in. You can withdraw consent at any time by clicking "Unsubscribe" in any newsletter email.
• Contact form data: Legitimate interests (Article 6(1)(f)). We have a legitimate interest in responding to messages sent to us. We do not use contact form data for marketing.
• Analytics data: Legitimate interests (Article 6(1)(f)). Anonymised data helps us understand how the site is used and improve it. No personally identifiable information is retained.

3. HOW LONG WE KEEP YOUR DATA

• Newsletter subscribers: Your email address is retained for as long as you remain subscribed. Upon unsubscribing, your data is deleted from our systems within 30 days.
• Contact form submissions: Retained for up to 12 months from the date of submission, then deleted.
• Analytics data: Aggregated and anonymised — retained indefinitely for trend analysis. Individual session data is not retained.

4. WHO WE SHARE YOUR DATA WITH

We do not sell your personal data. We share it only with the following processors, solely to deliver services:

• Beehiiv (newsletter platform) — processes email addresses on our behalf. Beehiiv is GDPR-compliant and operates under a Data Processing Agreement with us.
• Webflow (website hosting and forms) — processes contact form data. Webflow is GDPR-compliant.
• Google (analytics) — receives anonymised usage data if analytics is enabled. Google operates under Standard Contractual Clauses for UK/EU data transfers.
• YouTube (embedded video content) — if you interact with embedded YouTube videos, Google's privacy policy applies to that interaction.

We do not transfer your data outside the UK/EEA except where Standard Contractual Clauses or equivalent safeguards are in place with our processors.

5. YOUR RIGHTS

Under UK GDPR, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate data.
• Right to erasure — you can ask us to delete your personal data ("the right to be forgotten").
• Right to restriction — you can ask us to restrict how we use your data.
• Right to data portability — you can request your data in a machine-readable format.
• Right to object — you can object to processing based on legitimate interests.

To exercise any of these rights, contact us at Info@boymeetseast.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

6. CHANGES TO THIS POLICY

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated policy.

7. CONTACT

For any privacy-related questions, contact: Info@boymeetseast.com

‍