Legal

Privacy Policy

How we handle your personal data. The short version: we collect the least we can, we do not sell it, we send only what you asked for, and you can leave at any time.

Who we are

This website, alvoreach.com, is operated by Alvoreach Press (“Alvoreach”, “we”, “us”), the data controller responsible for your personal data.

Registered/trading address: [to confirm]. If you have any question about this policy or your data, use our contact page and choose the “Privacy & data” topic.

What we collect

We collect only what we need to teach, and to run this site.

Your email address and first name, when you give them to us through a signup form — to send the free chapter, resources, and the newsletter you asked for.
The segment you choose at signup (for example, where you are with AI, or the kind of business you run) — so we send you relevant things rather than everything. You provide this yourself; it is optional.
Message content, if you email us or use the contact form — your name, email, and what you wrote, so we can reply.
Aggregate, privacy-respecting usage statistics about how pages are used (see Cookies & analytics). This does not identify you and sets no tracking cookies.

We do not collect payment details — books are bought on Amazon, under Amazon’s own terms and privacy policy, not here.

Why we use it, and our legal basis

Under UK GDPR we must have a lawful basis for using your data. Ours are:

What	Why	Legal basis
Email & name (newsletter, free resources)	To send the emails you signed up for	Consent — given when you subscribe, withdrawable any time
Your chosen segment	To send relevant content, not everything	Consent
Contact-form / email messages	To answer you	Legitimate interests — responding to enquiries
Aggregate usage statistics	To understand and improve the site	Legitimate interests — no identification, no tracking

We use double opt-in for the mailing list: after you sign up, we email you to confirm it was really you before adding you. We never add anyone from a contact-form message to any mailing list.

Who we share it with

We do not sell your data, and we do not share it for advertising. We use a small number of service providers (“data processors”) to run the list and the site, each acting only on our instructions:

Provider	What they do	Where
Self-hosted mailing-list software (Listmonk)	Stores subscribers and sends campaigns — on our own server, under our control	Our hosting (below)
Amazon Web Services (Amazon SES)	Delivers our emails to your inbox	UK/EU region [to confirm]
Our hosting provider (VPS via Plesk)	Hosts the website and mailing-list data	[to confirm — provider & region]

Where a provider processes data outside the UK, we rely on the appropriate safeguards (such as UK/EU adequacy or Standard Contractual Clauses). We may also disclose data if required by law.

How long we keep it

Mailing-list data — for as long as you are subscribed. Unsubscribe and we remove you from active sending; we may keep a minimal suppression record so we do not email you again by mistake.
Messages you send us — for as long as needed to handle your enquiry and a reasonable period after, then deleted.
Usage statistics — kept only in aggregate; they do not identify you.

Cookies & analytics

This site is deliberately light. We do not use advertising cookies, cross-site trackers, or social-media pixels.

For usage statistics we use (or intend to use) a privacy-first, cookieless analytics tool (such as Plausible or Fathom) that measures page views in aggregate without cookies and without identifying individual visitors. Because no personal data is stored on your device for tracking, no cookie-consent banner is required. Any strictly necessary cookies used to make the site function are exempt from consent under the rules.

[Confirm the analytics tool actually deployed, and link its privacy page.]

Your rights

Under UK data protection law you have the right to:

be told how your data is used (this policy);
ask for a copy of the data we hold about you (access);
have inaccurate data corrected;
ask us to delete your data (erasure);
restrict or object to how we use it;
withdraw consent at any time — every email has a one-click unsubscribe;
ask for your data in a portable format.

To exercise any of these, use our contact page (topic: “Privacy & data”). We will respond within one month, free of charge in normal cases.

Security & storage

Your data is stored on our own hosting, under our control, rather than handed wholesale to a third-party marketing platform. We protect it with access controls, encryption in transit (HTTPS/TLS), and regular backups. No system is perfectly secure, but we keep the amount of data we hold small on purpose, which is itself a protection.

Contact & complaints

Questions, requests, or concerns: our contact page, topic “Privacy & data”.

If you are unhappy with how we have handled your data, you can complain to the UK’s Information Commissioner’s Office (ICO) at ico.org.uk — though we would appreciate the chance to put things right first.

[If we appoint a Data Protection Officer or register with the ICO, add those details here.]