Highlighted items must be confirmed by the operator and legal reviewer before this notice is published or subscriptions are enabled.
Privacy Notice
This draft covers worldskim.com, the World Skim newsletter, and inquiries sent to its team. It distinguishes the supplied, non-collecting review build from the newsletter service proposed for launch.
Who is responsible
Confirm the legal operator/data controller, registered business address, and approved privacy contact. The publication name alone does not identify the legal operator. The proposed contact is hello@worldskim.com; its monitoring and request-handling process must be confirmed.
Information and purposes
- Review build: the signup fields are disabled. This build does not submit email addresses or install first-party cookies, browser storage, analytics, advertising pixels, or remote fonts.
- Website requests: a hosting provider can receive IP addresses, browser/device information, requested pages, and request times to deliver and secure the site. GitHub Pages is the proposed host. Its processing is described in GitHub's privacy statement.
- Contact inquiries: emailing the team sends your address and message to its email service for responding and handling requests.
- Proposed newsletter: subscribing would provide your email address to World Skim and its email provider for sending the requested publication, subscription administration, abuse prevention, and honoring opt-outs.
- Before launch, confirm all additional fields, signup IP/timestamps, source/referral records, consent records, and whether email-open or click tracking is enabled. List the actual categories and purposes here.
Service providers, recipients, and transfers
EmailOctopus is the planned newsletter provider. Confirm its use and configuration, plus the actual hosting, mailbox, referral, advertising, and analytics vendors and the data disclosed to each. Information may be processed outside the reader's country. Identify relevant processing locations and any legally required transfer safeguards.
Advertising, partner sharing, and sale
Confirm whether subscriber information is sold, rented, shared with advertisers, used in co-registration or lead sharing, or disclosed for targeted advertising. Describe actual practices, recipients, purposes, and applicable opt-out/consent mechanisms. No “we never sell/share your data” promise is made in this draft. A newsletter subscription must not silently enroll a reader in another publication or authorize partner marketing.
Cookies and tracking
The supplied review HTML contains no nonessential trackers. Hosting and any future embedded form must be assessed separately. Re-audit the deployed site and email-provider embed before launch. Document actual cookies/pixels, purposes, providers and lifetimes. Where required, block nonessential technologies until valid consent and provide an equally accessible reject/withdraw choice.
Retention and security
Set the retention period or meaningful criteria for subscriber records, contact messages, consent evidence, engagement logs, backups, and suppression records. Unsubscribing should stop newsletter delivery; a limited suppression record may need to remain to prevent future unwanted messages. Deletion exceptions and retention must be explained. Confirm access controls and reasonable security measures. No system can guarantee absolute security.
Your choices and rights
At launch, each newsletter must provide a working unsubscribe mechanism. Privacy inquiries may be directed to the approved contact above. Depending on location and applicable law, rights may include access, correction, deletion, portability, withdrawing consent, objecting to processing, and opting out of sale, sharing, or targeted advertising.
Confirm the jurisdictions served, applicable legal bases for each processing purpose, request channels, verification and appeal procedures, response deadlines, complaint rights and regulator contacts. Where applicable, implement California notice-at-collection and sale/sharing opt-out controls, including recognized preference signals; EU/UK legal bases, complaint and transfer information; and other required regional notices. Do not claim an unimplemented right or control is operational.
Children
Confirm the intended audience, age restrictions, and a process for suspected child-data collection. Complete a children's privacy assessment if the service is directed to children or knowingly collects their information.
Changes and contact
Material changes should be communicated as required by applicable law, with an updated effective date. Contact: hello@worldskim.com, subject to confirmation above.