LorikeetSmart ("we", "our", or "us") is committed to protecting your privacy. This policy explains what personal data we collect, why, the legal basis for it, how long we keep it, who processes it on our behalf, and the rights you have under the EU/UK General Data Protection Regulation (GDPR).
Who is responsible for your data
The data controller for this website is Lorikeet, operator of lorikeetsmart.com. For any privacy question or to exercise a right below, contact info@lorikeetsmart.com.
What we collect, why, and the legal basis
- Newsletter signup: your email address, an optional name, and, as proof of consent, the date/time and IP address of your signup and confirmation. Legal basis: consent (GDPR Art. 6(1)(a)), which you give by confirming via the double opt-in link and can withdraw at any time.
- Purchases: transactions are processed by Gumroad. We receive your email address and order details. We do not store payment card data. Legal basis: performance of a contract (Art. 6(1)(b)).
- Support emails: the contents of any message you send us. Legal basis: legitimate interest (Art. 6(1)(f)) in answering you.
- Server logs: standard web-server logs (IP, browser type, pages visited) for security and to keep the site running. Legal basis: legitimate interest (Art. 6(1)(f)).
The newsletter, in detail
We use confirmed (double) opt-in: after you sign up we email you a confirmation link, and you are added only when you click it. We keep a record of your consent (version of this notice, timestamp, and IP) so we can demonstrate it, as GDPR requires.
Every newsletter email includes a one-click unsubscribe link and a List-Unsubscribe header, so you can withdraw consent as easily as you gave it. When you unsubscribe we remove you from the active list and add your address to a do-not-contact suppression list so we never email or re-add you by mistake; that suppression entry is the only data we retain about you, and only for that purpose.
How long we keep it
- Unconfirmed signups (pending double opt-in): deleted automatically after 7 days.
- Newsletter subscribers: kept while you remain subscribed. On unsubscribe, profile data is removed and only a suppression record (your email address) is retained to honour your opt-out.
- Consent and unsubscribe audit log: retained as evidence of lawful consent and opt-out handling.
- Purchase records: retained as required for tax and accounting.
Who processes your data (sub-processors)
We share data only with the providers needed to run the service, each acting on our behalf: our web/email host (site hosting and email delivery), Gumroad (payments and product delivery), and Google AdSense (advertising, see below). We do not sell or rent your personal data. Some of these providers may process data outside the EEA; where they do, they rely on their own safeguards such as Standard Contractual Clauses.
Advertising and cookies
This site may display ads served by Google AdSense, which may use cookies to serve ads based on your browsing. You can opt out via Google's Ad Settings. We use minimal first-party cookies for site functionality; third parties (Google, Gumroad) may set their own. You can control cookies in your browser.
Affiliate disclosure
Some links on this site are affiliate links. If you buy through one, we may earn a commission at no extra cost to you. We only recommend things we would use ourselves.
Your rights under GDPR
You have the right to: access a copy of your data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict or object to processing; data portability; and to withdraw consent at any time (withdrawal does not affect processing already carried out). To exercise any of these, email info@lorikeetsmart.com and we will respond without undue delay and within the time limits required by law. You also have the right to lodge a complaint with your local data protection supervisory authority.
Security
We hold your data on access-controlled systems, restrict our subscriber and consent files from public web access, and keep credentials out of the website's public files. No system is perfectly secure, but we take reasonable technical measures to protect your data.
Contact
Questions about this policy or your data: info@lorikeetsmart.com.