Privacy Policy

Last updated: 10 April 2026

Introduction

This Privacy Policy explains how Anna Wallace ("we", "us", or "our") collects, uses, and protects your personal information when you visit annawallace.org. We are committed to ensuring that your privacy is protected and that we comply with applicable data protection laws.

Information we collect

We may collect the following types of information:

Information you provide

  • Name and email address when you use our contact form
  • Email address when you subscribe to our newsletter
  • Account information (name, email, password) when you create an account to access premium content
  • Payment and billing information when you purchase subscriptions or premium content (processed securely by our payment provider)
  • Any other information you choose to share with us through communications

Information collected automatically

  • Anonymous usage data through Vercel Analytics (page views, referral sources)
  • Technical information such as browser type and device type
  • Cookie preferences and consent choices

How we use your information

We use the information we collect for the following purposes:

  • To respond to your enquiries and communications
  • To send you newsletters and updates you have subscribed to
  • To manage your account and provide access to premium content
  • To process payments and manage subscriptions
  • To send transactional emails (account confirmations, payment receipts, subscription updates)
  • To improve our website and user experience
  • To understand how visitors use our website
  • To comply with legal obligations

Legal basis for processing

We process your personal data based on:

  • Consent - when you submit a contact form, subscribe to our newsletter, or accept cookies
  • Contract - when you create an account or purchase a subscription, processing is necessary to fulfil our agreement with you
  • Legitimate interests - to improve our website and services
  • Legal obligation - when required by law (including financial record-keeping requirements)

Data sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

  • Service providers - such as our website hosting provider (Vercel) who help us operate our website
  • Payment processors - to securely process payments for subscriptions and premium content (we do not store your full payment card details)
  • Email service providers - to deliver newsletters and transactional emails
  • Legal authorities - when required by law or to protect our rights

Data retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

  • Contact form submissions - retained for a reasonable period to allow us to respond and maintain records of communications
  • Newsletter subscriptions - retained until you unsubscribe, after which your email is removed from our mailing list
  • Account information - retained for as long as your account is active, plus a reasonable period after account closure
  • Payment records - retained as required by financial and tax regulations (typically 6-7 years)

Newsletter subscriptions

When you subscribe to our newsletter, we collect your email address to send you updates, articles, and other content. You can unsubscribe at any time by clicking the unsubscribe link in any newsletter email or by contacting us directly. We will process your unsubscribe request promptly.

Premium content and subscriptions

When you create an account or purchase access to premium content:

  • We create a secure account using your email and password (passwords are encrypted and never stored in plain text)
  • Payment information is processed securely by our third-party payment provider - we do not have access to your full card details
  • We maintain records of your subscription status to provide access to content you have purchased
  • You can manage your subscription, update your details, or cancel at any time through your account settings

Your rights

Under data protection laws, you have the following rights:

  • Access - request a copy of your personal data
  • Rectification - request correction of inaccurate data
  • Erasure - request deletion of your personal data
  • Restriction - request limitation of processing
  • Portability - request transfer of your data
  • Objection - object to processing based on legitimate interests
  • Withdraw consent - withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us.

Cookies

Our website uses cookies to enhance your browsing experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

Third-party links

Our website may contain links to external websites (such as podcast platforms and social media). We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any external websites you visit.

Security

We take reasonable measures to protect your personal information from unauthorised access, use, or disclosure:

  • Our website uses HTTPS encryption to secure all data transmission
  • Passwords are securely hashed and never stored in plain text
  • Payment processing is handled by PCI-compliant payment providers
  • Access to personal data is restricted to authorised personnel only

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us.