Template, not legal advice. Replace every highlighted placeholder, check it against how you actually use data, and remove this box before publishing.

Privacy Policy

Last updated: [Date]

1. Who we are

The Compass Club website (thecompassclub.co.uk) is run by [Business legal name, e.g. sole trader name or Ltd company name and number] ("we", "us"), [Postal address]. We are the controller of your personal data. Contact us at [Contact email] about anything in this policy.

2. What we collect

Sign-up details: your first name, email address, and the interests you tick (Literary Gatherings, The Book Club, Literary Escapes).
Consent record: the fact that you agreed to receive emails, and when.
Email engagement: our email provider records whether emails are delivered, opened or clicked.
Bookings and messages: if you book a gathering or contact us, the details you give us. [Add booking/payment provider if used, e.g. Eventbrite, Stripe]

3. How and why we use it (lawful basis)

To send you invitations, book club news and updates about the things you've chosen. Basis: your consent (UK GDPR Art. 6(1)(a)). You can withdraw it at any time.
To manage bookings you make with us. Basis: contract (Art. 6(1)(b)).
To keep records we're legally required to keep (e.g. accounts). Basis: legal obligation (Art. 6(1)(c)).

4. Who we share it with

We never sell your data. We use trusted processors who act only on our instructions:

MailerLite (an EU-based email marketing provider) stores our mailing list and sends our emails. See MailerLite's privacy policy.
Website hosting: [Host, e.g. GoDaddy] hosts this website and may log technical data such as IP addresses for security.
[Any others, e.g. Eventbrite / Stripe / Instagram (Meta) if you message us there]

Some providers may process data outside the UK. Where they do, they use approved safeguards such as the UK International Data Transfer Addendum or adequacy regulations.

5. How long we keep it

We keep your sign-up details until you unsubscribe or ask us to delete them. If you haven't opened our emails for [e.g. 24 months] we may remove you. Booking records are kept for [e.g. 6 years] for accounting purposes.

6. Your rights

Under UK GDPR you can ask to access, correct, delete or move your data, to restrict or object to how we use it, and to withdraw consent at any time. To unsubscribe, use the link at the bottom of any email. For anything else, email [Contact email]. We'll reply within one month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.

7. Cookies

This website does not use advertising or analytics cookies. Fonts and images are served from our own site. Our email provider may use tracking pixels in emails to measure opens. [Update this section if you add analytics, a booking widget or embedded Instagram posts]

8. Changes

We may update this policy from time to time. The latest version will always be on this page.