Who we are
This website is run by Toby Andrew (author). If you have questions about this policy or your data, contact: hello@tobyandrew.com
What information we collect
We may collect:
- Newsletter information: your email address and, if you choose to provide it, your first name.
- Website usage information: information about how you use this site (for example pages viewed, approximate location, device/browser information).
- Messages you send us: if you email us or use a contact form, we receive the information you choose to share.
How we use your information
We use your information to:
- Send The Citadel Writers Guild newsletter and updates about Citadel: Forgotten Prophecy and related projects.
- Manage subscriptions (including confirmation of sign-up, unsubscribing, and handling bounce/abuse complaints).
- Improve the website and understand what content is useful to readers.
Lawful basis for processing
Under the UK GDPR, we rely on the following lawful bases:
- Consent for sending marketing emails/newsletters. You can withdraw consent at any time by unsubscribing.
- Legitimate interests for basic website analytics and improving our website (where applicable).
Email marketing and PECR
We only send marketing emails to individuals who have signed up to receive them (unless a lawful exception applies). Every email includes an unsubscribe link so you can opt out at any time.
Who we share your data with
Suggested text: If you request a password reset, your IP address will be included in the reset email.
Our email provider (MailerLite)
We use MailerLite to manage newsletter subscriptions and send emails. When you subscribe, your information is stored and processed by MailerLite on our behalf.
Double opt-in
We use a double opt-in system. This means that you will receive an email asking you to confirm your subscription. This helps prevent sign-ups without permission and improves list quality.
How long we keep your information
- Newsletter subscriber information is kept until you unsubscribe or we delete inactive subscribers as part of routine list hygiene.
- If you contact us, we keep messages as long as needed to respond and keep basic records.
Who we share your information with
We do not sell your personal information. We share it only with service providers we use to run this website and newsletter (for example, MailerLite), and where required by law.
International transfers
Some service providers may process data outside the UK. Where this happens, we take steps intended to ensure appropriate safeguards are in place (for example, standard contractual clauses or equivalent measures).
Your rights
You have rights under UK GDPR law including:
- The right to be informed about how your data is used
- The right of access to your data
- The right to correct inaccurate data
- The right to erase your data
- The right to restrict or object to processing in certain situations
- The right to data portability (in some cases)
You can unsubscribe from emails at any time using the link in any email.
Complaints
If you have concerns, you can contact us first at hello@tobyandrew.com . You also have the right to complain to the Information Commissioner’s Office (ICO).
Cookies
We may use essential cookies or similar technologies for basic site functionality and analytics.