Privacy Policy

Short version: if you subscribe we hold your email address and language preference. Otherwise we hold aggregate page counts that are not linked to you. We sell nothing, share nothing and track you nowhere else.

Last updated: July 2026.

Who we are

Beyond The Geo is the data controller for information collected through this site. Contact details are on our contact page and any privacy request can be sent there.

What we collect and why

If you subscribe to the newsletter: your email address, your language preference, the date you subscribed and the IP address used at signup. The IP address is kept solely as proof of consent. Legal basis: consent.

If you send us a message: your name, email address and the content of your message, so that we can reply. Legal basis: legitimate interest in responding to correspondence.

If you create an account: your name, email address and password. Passwords are stored hashed and are not readable by us. Legal basis: performance of a contract.

If you just read the site: nothing. We do not run analytics of any kind, so there is no page-view record tied to you or to anyone else. Our host keeps standard server logs (IP address, page requested, timestamp) for 30 days for security purposes, and we do not analyse them for anything else.

What we do not do

We do not sell or rent personal data. We do not share it with advertisers. We do not run third-party advertising or social media tracking pixels. We do not build profiles of readers or use cross-site tracking.

How long we keep it

  • Newsletter data — until you unsubscribe. Every issue carries a one-click unsubscribe link, and the record is deleted within 30 days of you using it.
  • Contact messages — 24 months, then deleted.
  • Account data — until you delete the account. You can do that yourself from your account page; the record is removed immediately and backups age out within 30 days.
  • Server logs — 30 days.

Processors

We use a small number of service providers who process data on our behalf under contract: a hosting provider and an email delivery provider for the newsletter. We do not use a payment processor because nothing on this site is paid for. Each is bound to process data only on our instructions. We will name the current providers on request.

Your rights

Under the GDPR and equivalent laws you may request access to your data, correction of it, deletion of it, restriction of processing, a portable copy, or object to processing. Where processing is based on consent you may withdraw it at any time.

Send any of these requests through our contact page. We respond within 30 days and we do not require you to give a reason. If you are unhappy with our response you may complain to your national data protection authority.

International transfers

Our hosting and email providers may process data outside your country. Where that involves a transfer outside the EEA or UK, it is covered by standard contractual clauses or an adequacy decision.

Children

This site is not directed at children under 16 and we do not knowingly collect their data. If you believe we have, contact us and we will delete it.

Changes

If we change this policy materially we will say so in the newsletter and update the date at the top. We will not reduce your rights without telling you.