Newsletter privacy

Newsletter privacy notice (newsletter-privacy-2026-10-v1)

Controller: stakeholdermap.com, Suite A, 82 James Carter Road, Mildenhall, IP28 7DE. Contact: [email protected].

We use your email address to send up to two emails a month containing new and updated project-management templates, practical tips and occasional Stakeholdermap.com offers. The legal basis is your consent (GDPR Article 6(1)(a)). Signup is optional. Downloading does not require an email address or consent. We require a separate email confirmation before marketing begins.

We retain the signup source, dates, exact consent wording and notice version to demonstrate consent and meet accountability duties (legal obligation, Article 6(1)(c)). We handle data-rights requests on the same legal basis. We use short-lived keyed identifiers derived from email/IP addresses to limit abuse, relying on our legitimate interests in preventing misuse and securing the service (Article 6(1)(f)); we do not store raw IP addresses in this application. Hosting and email services may keep their own security/delivery logs.

Service providers and transfers: We use hosting.com to host our website and mailing-list database and to deliver emails. Personal data may be processed internationally, including in the United States. Hosting.com states that it participates in the EU-US Data Privacy Framework and its UK Extension for transfers covered by its certification. For further information about processing locations and applicable transfer safeguards, contact [email protected]. We do not sell the list or share it for other organisations' marketing. This application uses no marketing cookies, open pixels or click tracking. A necessary session cookie protects forms and signed-in access. This notice covers the mailing tool; other pages on the main site have their own privacy and cookie information.

Unconfirmed signup records are removed after 7 days. Active subscriptions expire 730 days after confirmation. Inactive subscriber records and consent evidence are removed after 730 days, unless you request earlier erasure. Delivery history is kept for 90 days. Encrypted confirmation/access links expire after 48 hours/30 minutes. Abuse-limit records expire within two windows and are removed by daily maintenance. Minimal keyed suppression records are retained while the mailing service operates, reviewed annually, to respect objections and prevent accidental re-mailing (legal compliance, Article 6(1)(c)); they remain personal data and are not used for marketing. Backups expire under our documented backup policy; removed records must not be reactivated on restoration.

Withdraw consent at any time using Unsubscribe in any newsletter, without login or charge. Withdrawal does not affect earlier lawful processing. You can access/export or erase your data through Manage my subscription. Contact us for correction, restriction, objection or other data rights. To change email address, unsubscribe the old address and confirm a new signup, or contact us. We normally respond to rights requests within one month. You can complain to the ICO (ico.org.uk) or your local EU supervisory authority. We use no automated decision-making or profiling.