Privacy

This notice explains what personal data 21DC collects, why, and what rights you have. 21DC collects very little.

Who is responsible

The data controller is the operator of 21dc.com ("21DC"). For any privacy question or request, email [email protected].

What we do not collect

• No accounts. You cannot sign up or log in, so we hold no profiles or passwords.
• No tracking cookies. 21DC does not use advertising, analytics or other tracking cookies, and does not run third-party advertising or social media tracking scripts.
• No selling or sharing of personal data for marketing.

Server logs

Like any website, our servers record technical information about each request: IP address, the page requested, the date and time, the browser's user-agent string and the referring page. We use these logs only to keep the site secure and working, for example to detect abuse, diagnose errors and defend against attacks. The legal basis is our legitimate interest in operating a secure website. Logs are kept for a short period and then deleted, unless they are needed to investigate a specific security incident.

Weekly digest email

If you subscribe to the weekly digest, we hold your email address and the date you subscribed. We use them only to send the digest and to handle unsubscribes. The legal basis is your consent. Emails are sent through Postmark, an email delivery service that processes your address on our behalf under a data processing agreement. Postmark records delivery events, such as whether a message was delivered or bounced, so that we can maintain the list.

Every digest includes an unsubscribe link. After you unsubscribe, we keep only what we need to make sure you are not emailed again.

Emails you send us

If you email us, for example with a correction, we keep your message and email address for as long as we need them to deal with it and keep a record of corrections.

Where data is processed

Some service providers, including our email provider, may process data outside the UK. Where they do, we rely on the safeguards required by UK data protection law, such as the UK International Data Transfer Agreement or adequacy regulations.

Your rights

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

• access the personal data we hold about you;
• have it corrected or deleted;
• restrict or object to its processing;
• receive it in a portable format;
• withdraw your consent at any time, for example by unsubscribing from the digest.

To exercise any of these rights, email [email protected]. We will respond within one month.

If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this notice changes, the date at the top of this page will be updated. Material changes affecting digest subscribers will be announced in the digest.