Marketing & Communication Consent
1. Scope and Channels Covered
This Consent governs marketing communications we send or make available via:
2. What We Send (Content Categories)
If you opt in, you may receive:
3. Data We Collect for Marketing
When you subscribe or otherwise opt in, we may collect:
4. Lawful Bases for Processing
Depending on your location, we rely on:
- Consent (opt-in) for sending electronic marketing communications (GDPR/UK GDPR, ePrivacy rules)
- Legitimate interests ("soft opt-in") to contact existing users or customers about similar services, where permitted by law
- CAN-SPAM (USA): we include required sender details and an unsubscribe mechanism in every marketing email
- CPRA/State laws (USA): you may opt out of targeted advertising where applicable
5. How We Obtain and Record Consent
We obtain consent through unambiguous actions, such as:
- Checking a blank, unticked checkbox on a sign-up form and submitting the form
- Confirming your email address via double opt-in where enabled
- Selecting explicit categories of communications (e.g., newsletters, events)
We log the time, source page/form, and your consent status to demonstrate compliance. If you later unsubscribe, we store your address on a suppression list to honor future opt-out requests.
6. Preference Management and Frequency
You can manage your choices by:
- Clicking "Unsubscribe" or "Manage preferences" links in any marketing email
- Emailing [email protected] with your request
- Replying STOP to SMS where applicable (if supported in your region)
7. Use of Service Providers
We use reputable email delivery, analytics, and customer engagement providers to send and measure communications. These providers act under written agreements and process your data only on our instructions.
They may place tracking pixels in emails to measure open/click rates; where required, we will ask for your consent to such tracking or provide non-tracked alternatives.
8. International Transfers
If personal data is transferred across borders (e.g., from the EEA/UK to a country without an adequacy decision), we use appropriate safeguards such as Standard Contractual Clauses (SCCs) and the UK IDTA/Addendum, along with technical and organizational measures (encryption in transit, access controls).
See our Privacy Policy for details.
9. No Sale or "Sharing" of Personal Information
If our practices change, we will update this Consent and provide the legally required opt-out mechanisms.
10. Cookies and Similar Technologies for Marketing
Marketing communications may rely on cookies or similar technologies to remember your preferences, limit frequency, and measure performance.
- Strictly necessary cookies: operate without consent to deliver core functionality
- Analytics/marketing cookies: operate only with your consent where required
You can manage preferences in your browser and (if present) via our on-site Cookie Settings tool. Blocking cookies may impact personalization and performance measurement.
11. Your Choices and Rights
You may at any time:
- Withdraw consent or unsubscribe from all or certain categories of marketing
- Access the personal data we process for marketing and request a copy
- Correct inaccurate data
- Delete your marketing profile (subject to legal requirements to maintain a suppression list)
- Object to processing based on legitimate interests
- Restrict processing in certain cases
12. Special Notes by Region
EEA/UK:
Electronic marketing is generally based on consent under ePrivacy rules. Existing customers may receive marketing about similar services under legitimate interests ("soft opt-in"), with a clear opt-out. You may lodge a complaint with your local data protection authority.
USA (CAN-SPAM):
Every marketing email includes our contact details and an unsubscribe link; we honor opt-out requests promptly.
California (CPRA):
You have rights to access, correct, and delete personal information and to opt out of sale/"sharing". We do not sell/"share" personal information.
13. Data Retention and Suppression Lists
We retain marketing data only as long as needed to provide requested communications or as required by law:
- Active subscribers: retained while subscribed; activity logs (opens/clicks) typically up to 24 months
- Inactive subscribers: removed or re-permissioned after 24 months of inactivity
- Suppression lists: maintained indefinitely (or as required by law) to ensure we do not contact you after you opt out
Where feasible, we anonymize or aggregate engagement data for analytics.
14. Security Measures
We implement administrative, technical, and organizational measures appropriate to the risk, including TLS encryption in transit, access controls, and least-privilege principles.
15. Children's Communications
16. Third-Party Campaigns and Co-Branding
If we run joint or co-branded campaigns:
- We will clearly identify the third party in the sign-up flow
- We will disclose whether your data will be shared and obtain your consent where required
- The third party's privacy terms will apply to their use of your data
17. Changes to This Consent
We may update this Consent to reflect changes in law, best practices, or our processes. The "Last updated" date indicates the latest revision. If changes materially affect your rights, we will provide additional notice where required (e.g., via the Website or email).