Privacy Policy

Elysian Insights is the controller responsible for the personal information described in this policy.

This policy applies when you:

• Visit the Elysian Insights website;
• Send an enquiry through the website or by email;
• Join the Elysian Insights Community;
• Receive an email communication from us;
• Comment on content, where comments are available;
• Access or purchase an EI digital product through Gumroad;
• Request product support;
• Make a privacy-rights request or data-protection complaint; or
• Otherwise interact with EI online.

External organisations and websites are responsible for their own processing and privacy notices.

Information you give us

Depending on how you interact with EI, this may include:

• Your name and email address;
• Your selected enquiry topic;
• The contents of a message or enquiry;
• Your email-subscription choice and consent record;
• Comments or other information you choose to publish;
• Customer-support correspondence;
• The EI product you purchased;
• A transaction or order reference supplied through Gumroad; and
• Information you provide when exercising a legal right or making a complaint.

Information collected through website operation

When the website is accessed, EI and its hosting provider may process limited technical information such as:

• IP address;
• Date and time of access;
• Pages or resources requested;
• Browser and device information;
• Referring page;
• Error and diagnostic information; and
• Information needed to detect misuse, fraud or security incidents.

Information received from Gumroad

Where a digital product is supplied through Gumroad, EI may receive limited buyer information such as your name, email address, product purchased, purchase date, payment or order status, transaction reference and information needed to provide access or support.

EI does not normally receive or store your full payment-card details. Gumroad independently processes payment, tax, invoicing, fraud-prevention, risk-management and merchant-of-record information under its own privacy terms.

We use personal information to:

• Make the website available and maintain its security;
• Respond to enquiries and manage appropriate follow-up;
• Manage requested email communications;
• Deliver and support EI digital content and products;
• Administer access, refunds or disputes where EI’s involvement is required;
• Moderate comments where comments are enabled;
• Prevent spam, fraud and misuse;
• Keep necessary business, consent and transaction records;
• Respond to privacy rights and complaints;
• Establish, exercise or defend legal rights; and
• Meet applicable legal, accounting, tax and regulatory duties.

We do not use information collected for one purpose in a materially incompatible way without first identifying a valid legal basis and providing any required information or choice.

Consent

We rely on consent when you join the Elysian Insights Community, choose to receive EI marketing or community emails, enable a non-exempt cookie or similar technology, or make another voluntary choice for which consent is appropriate.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Contract and steps requested before a contract

We may process information where necessary to take steps you request concerning an EI digital product, provide or support a product licence, give you access to purchased content, or address a product-related support request.

Legitimate interests

We may rely on legitimate interests to operate and administer the website, respond to ordinary enquiries, maintain proportionate records, prevent spam or misuse, resolve technical faults, protect EI and its users, and establish or defend legal rights.

Before relying on legitimate interests, we consider the purpose, necessity and effect on your rights.

Legal obligation

We rely on legal obligation where processing is necessary to respond to a valid rights request, operate the required complaints process, maintain records required by law, meet applicable tax or accounting duties, or respond to a legally binding request from a competent authority.

When you contact EI, we use the information you provide to understand and respond to your message.

We may keep correspondence while the enquiry remains open, follow-up is reasonably expected, it is needed to evidence what was requested or agreed, a complaint or dispute remains possible or active, or retention is required by law.

When you voluntarily join the Elysian Insights Community, we use your email address and any other requested sign-up information to send the communications described at the point of sign-up.

These may include reflections and encouragement, blog updates, EI resources, community news, and information about relevant EI products or content.

EI uses Mailchimp to manage subscriptions and send authorised communications. Mailchimp processes subscriber information for EI under its contractual data-processing terms and may process information in the United States and other locations under its transfer arrangements.

Every marketing email provides a clear unsubscribe method. You can also withdraw consent by emailing hello@elysianinsights.com.

After an unsubscribe request, EI or Mailchimp may retain a limited suppression record so that the request continues to be honoured.

EI uses Gumroad to support the sale, payment, delivery and administration of digital products.

Gumroad acts as the merchant of record for transactions carried out through its service and independently determines how it processes information for payment processing, invoicing, tax collection and reporting, fraud and risk management, chargebacks, transaction disputes, platform security and its legal obligations.

Gumroad may also process certain buyer and product information on EI’s behalf where it hosts or delivers EI products or makes seller-controlled buyer information available to EI.

Where you contact EI about a Gumroad purchase, we may use the buyer information made available to us to verify the purchase and provide appropriate assistance. Gumroad’s own privacy notice applies to processing for which Gumroad acts independently.

Where comments are enabled, information you choose to publish may be visible to anyone.

We may process your comment, chosen display name, email address, IP address, browser or device information, and moderation or spam-detection information to publish and moderate comments, prevent abuse and maintain the website’s integrity.

Your email address will not ordinarily be displayed publicly. Where an avatar or spam-detection service is used, the relevant provider will be identified in this policy or the Cookie Notice.

EI’s use of cookies, web storage, scripts, tags and similar technologies is explained in the separate Cookie Notice.

The current reviewed EI configuration does not place identified non-essential cookies or similar storage technologies on ordinary website visitors.

Strictly necessary technologies may be used where essential to deliver a service you request, maintain security, prevent fraud or faults, authenticate an authorised user, or remember a privacy choice.

Other technologies will only be introduced where EI has obtained any required consent or confirmed that a specific legal exception applies and has provided the required information and objection mechanism.

EI does not use advertising or cross-site tracking technologies unless they are expressly identified in the Cookie Notice and the required controls are in place.

We disclose personal information only where reasonably necessary.

Hostinger

Hostinger provides website hosting and related infrastructure. It may process hosted website content, databases, technical information, backups and server information on EI’s behalf.

Mailchimp

Mailchimp processes email-audience, subscription, consent, delivery and unsubscribe information on EI’s behalf.

Gumroad

Gumroad processes product and buyer information in its roles as merchant of record, independent controller and, for certain functions, processor acting for EI.

Other necessary recipients

Where enabled and necessary, information may also be handled by technical providers supporting forms, backups, security, spam prevention, cookie controls or privacy-preserving analytics.

Information may also be disclosed to accountants, insurers, legal advisers, courts, regulators, law-enforcement bodies or other competent authorities where reasonably necessary or legally required.

Some providers may process personal information outside the United Kingdom.

Mailchimp may process subscriber data in the United States and other international locations under the transfer provisions in its Data Processing Addendum.

Gumroad independently determines the safeguards used for processing performed in its merchant-of-record and independent-controller capacity. Its privacy documentation applies to that processing.

Where EI initiates a restricted international transfer, we will confirm that an appropriate transfer route permitted by UK law applies. EI maintains or will maintain an internal record of relevant providers, locations, roles and safeguards.

EI keeps identifiable information only while it remains necessary for the relevant purpose.

• Contact enquiries: while the enquiry is active and for the shortest additional period reasonably needed for follow-up, accountability or a dispute.
• Email subscribers: while the subscription remains active.
• Unsubscribe records: while needed to ensure that an opt-out continues to be respected.
• Product and support information: while needed to provide the product, licence or support and for applicable legal, accounting, tax or dispute periods.
• Comments: while the comment remains published, with moderation records retained only while necessary.
• Security and diagnostic records: while required to investigate faults, protect the site or meet a legal obligation.
• Rights requests and complaints: until the matter is completed and for the documented period needed to demonstrate how it was handled.
• Consent records: while needed to demonstrate consent and any subsequent withdrawal.

Information may be retained for longer where a legal duty, active dispute, fraud concern, preservation requirement or legal claim makes this necessary. When information is no longer needed, it will be deleted, anonymised or securely disposed of where reasonably possible.

Depending on the circumstances, you may have the right to:

• Be informed about the use of your personal information;
• Request access to your personal information;
• Ask us to correct inaccurate or incomplete information;
• Ask us to erase information;
• Ask us to restrict particular processing;
• Object to processing based on legitimate interests;
• Object to direct marketing;
• Withdraw consent;
• Receive eligible information in a portable format; and
• Complain about how your information has been handled.

These rights are subject to the conditions and exemptions in data-protection law.

To exercise a right, email hello@elysianinsights.com. Please explain what you are requesting and provide enough information for us to locate the relevant records. We may request proportionate evidence of identity where necessary.

You can make a complaint about EI’s use of your personal information by emailing hello@elysianinsights.com.

Please use the subject line Data Protection Complaint.

We will:

• Provide a clear route for submitting your complaint;
• Acknowledge receipt within 30 days;
• Take appropriate steps to investigate without undue delay;
• Keep you appropriately informed; and
• Communicate the outcome without undue delay.

You may also complain to the UK Information Commissioner’s Office at ico.org.uk.

EI uses clear, accessible language and proportionate data collection because its content may be accessed by a broad audience, including young people.

We do not use personal information to profile children, serve behavioural advertising or encourage unnecessary disclosure.

Young people should not provide sensitive personal information through a general contact form. Where EI knows that a user is a child, we will take their age, understanding, rights and best interests into account.

Where parental authorisation is legally required for consent-based processing, we will obtain it or will not carry out that processing. A parent or guardian may contact hello@elysianinsights.com.

EI uses proportionate technical and organisational safeguards designed to protect personal information from loss, unauthorised access, misuse, alteration, disclosure and destruction.

These safeguards may include access controls, secure hosting, software maintenance, backups and security monitoring.

No online system can be guaranteed to be completely secure. We therefore do not promise absolute security.

EI maintains a process for identifying, assessing and recording personal data breaches.

Where a breach is likely to create a risk to people’s rights and freedoms, EI will notify the Information Commissioner’s Office where required. Where a high risk is identified, affected people will also be informed where required.

EI does not use personal information for solely automated decisions that produce legal or similarly significant effects.

EI may link to external websites and services. The organisation operating the external service is responsible for its own processing.

Please review the external organisation’s privacy information before providing personal information.

We will review this policy when EI’s processing changes, a provider or technology changes, a new product or service is introduced, or legal and regulatory requirements change.

Material changes will be brought to people’s attention where appropriate. The latest revision date will always be shown at the top of this page.

For privacy questions, rights requests or data-protection complaints: