Last updated: 16 August 2026.
Who I am
Charlie Rowat is the data controller for this website and newsletter. You can contact me at hello@charlierowat.com.
The newsletter
When you subscribe I store your email address, the time you subscribed and confirmed, the page you signed up from, your IP address and browser user-agent at the time (as evidence of consent), and the version of this notice you agreed to. I use this only to send you new posts by email. The lawful basis is your consent (UK GDPR Art. 6(1)(a) and PECR reg. 22). You can withdraw consent at any time using the unsubscribe link in every email — it takes effect immediately.
When you unsubscribe I keep a minimal record so that I don't email you again. If an email to you bounces or is reported as spam I record that too and stop sending.
Who processes the data
- Supabase (database, EU London region)
- Amazon Web Services — Simple Email Service (sending email, EU London region)
- Vercel (hosting)
- Cloudflare (images and audio files)
Some providers may access data from outside the UK; where they do, transfers rely on the UK Extension to the EU-US Data Privacy Framework or the ICO's International Data Transfer Addendum.
The website
The site itself sets no tracking cookies. Emails contain no open or click tracking. Server logs are kept briefly by the hosting provider for security.
Your rights
You can ask for a copy of your data, ask me to correct or delete it, or object to processing by emailing me. You also have the right to complain to the Information Commissioner's Office (ico.org.uk). If you'd like to complain to me first, email the address above and I'll acknowledge within 30 days.