← Back to global tracker

Legal

Privacy Policy

Last updated: 28 July 2026

📝 This is a starting template — every [FILL IN] marker needs a real value, and the whole document should be reviewed by a solicitor before you rely on it. It is not legal advice.

1. Who this policy covers

This policy explains what happens to your personal data when you subscribe to the paid monthly compliance newsletter, submit feedback, or otherwise interact with this site, operated by [FILL IN: your business/entity name] ("we", "us"), based in [FILL IN: jurisdiction, e.g. the United Kingdom].

If you have questions about this policy or want to exercise any of the rights described below, contact us at [FILL IN: contact email].

2. What we collect

DataWhenWhy
First name, last nameSubscribing to the newsletterTo address you personally and identify your account with our email provider
Email addressSubscribing to the newsletter, sending feedbackTo deliver the newsletter, respond to feedback, and manage your subscription
Job title, company nameSubscribing to the newsletterTo understand our subscriber base — optional in principle, currently required at signup
Payment detailsCompleting checkoutCollected and processed entirely by our payment provider (see Section 4) — we never see or store your card details
Feedback contentSubmitting the feedback formTo improve the accuracy and coverage of the tracker

We use Cloudflare Web Analytics to understand aggregate traffic to this site — such as how many pages are viewed and which pages are popular. This site has no cookies, no persistent identifiers, and no cross-site tracking of individuals. Cloudflare Web Analytics doesn't use cookies and doesn't track you individually or across other websites; it reports on traffic in aggregate only. If our use of analytics changes in a way that affects this, we'll update this policy to reflect it beforehand.

3. Our legal basis for processing

Where UK/EU GDPR applies, we process your name, email, and payment-adjacent data on the basis that it is necessary to perform our contract with you — specifically, to deliver the newsletter subscription you've paid for and manage that ongoing relationship (billing, cancellation, support). Where we contact you about non-essential updates unrelated to a subscription you hold, we rely on your consent, which you can withdraw at any time.

4. Who we share data with

We use a small number of specialist providers to run the subscription and newsletter — we don't sell or share your data for advertising purposes.

  • Lemon Squeezy (our payment provider and merchant of record) — processes your payment, and is the legal seller of record for your subscription. They handle your card details directly; we never receive or store them. See Lemon Squeezy's privacy policy.
  • [FILL IN: your email service provider, e.g. Mailchimp / Kit / Beehiiv] — stores your name and email to send the monthly newsletter, and to remove you automatically if your subscription lapses or is cancelled.
  • Zapier — passes subscription status updates between Lemon Squeezy and our email provider automatically, so your access is kept in sync without manual handling of your data by us.
  • Cloudflare (hosting and Web Analytics) — hosts this site and provides aggregate, cookie-free traffic analytics. See Cloudflare's privacy policy.

Each of these providers is independently responsible for their own data protection compliance, and reputable providers of this kind typically offer a Data Processing Agreement covering exactly this kind of arrangement.

5. How long we keep your data

  • While your subscription is active (recurring or within the 12-month one-time period): your name and email remain on our active mailing list to receive the newsletter.
  • After cancellation or expiry: you are automatically removed from the active mailing list [FILL IN: immediately / within X days]. We retain a record of the fact you were once a subscriber for [FILL IN: retention period, e.g. up to 90 days, or per your accounting/tax record-keeping obligations] for accounting and dispute-resolution purposes, after which it is deleted.
  • Feedback submissions are retained for as long as reasonably needed to act on them, and are not used for any other purpose.

6. International transfers

Lemon Squeezy, Zapier, and most email service providers operate infrastructure in multiple countries, which may include locations outside the UK/EEA. Where this applies, these providers are relied upon to maintain appropriate safeguards (such as Standard Contractual Clauses) for any such transfer, consistent with their own published privacy and data protection terms.

7. Your rights

Depending on your location, you generally have the right to:

  • Ask what personal data we hold about you and get a copy of it
  • Ask us to correct inaccurate data
  • Ask us to delete your data ("right to erasure"), subject to legal retention obligations described above
  • Object to or restrict certain processing
  • Withdraw consent at any time where we rely on it
  • Unsubscribe from the newsletter at any time via the link in every email

To exercise any of these, contact [FILL IN: contact email]. If you're unsatisfied with our response, you can lodge a complaint with your local data protection authority — in the UK, this is the Information Commissioner's Office (ICO).

8. Children's privacy

This service is intended for business professionals and is not directed at, or knowingly used to collect data from, children.

9. Changes to this policy

If we make material changes to how we handle your data, we'll update the "last updated" date above and, where the change is significant, notify active subscribers by email.

10. Contact

[FILL IN: your business/entity name]
[FILL IN: contact email]
[FILL IN: registered address, if you have one — required in some jurisdictions for commercial email under CAN-SPAM/PECR-equivalent rules]