Privacy policy

Last updated: 2026

Here in Huntsville is operated by Here in Huntsville. This policy explains what personal information we collect, why we collect it, how we use it, and the rights you have over it under the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

What we collect

• Email address — required to deliver the newsletter.
• Name — optional, used only for greetings.
• Town and brand — which Here in Huntsville list you subscribed to.
• Email engagement — opens and clicks logged by our email platform (Listmonk) for deliverability diagnostics. We do not sell or share this data.
• Server logs — IP address and request metadata are written to short-lived application logs to keep the service running and to diagnose abuse.

We do not embed third-party tracking pixels or advertising identifiers in the newsletter body itself.

Why we collect it

To send you the newsletter you signed up for, to keep delivery healthy, and to comply with applicable laws. Under GDPR our lawful basis is your consent (you confirmed your subscription via double-opt-in) and our legitimate interest in operating the service. You can withdraw consent at any time by using the unsubscribe link in any email.

Who we share it with

We share data only with processors that help us run the service:

• Listmonk — manages subscriber lists and sends the email.
• Amazon SES — the SMTP provider that delivers messages.
• Cloudflare — DNS, TLS, and edge caching for our domains.

We do not sell your personal information and we do not share it for cross-context behavioural advertising. If this ever changes we will update this policy and notify subscribers in advance.

How long we keep it

We keep your subscriber record for as long as you remain subscribed. If you unsubscribe, your address is suppressed but retained for up to 24 months to honour the unsubscribe and prevent re-imports. Server logs are retained for up to 30 days.

Your rights

You can exercise the following rights at any time:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate data.
• Deletion — ask us to erase your record.
• Portability — receive your data in a machine-readable format.
• Objection / restriction — object to processing or restrict its scope (GDPR).
• Opt out of sale or sharing — for California residents (CCPA/CPRA). We do not sell or share, but you can confirm this in writing.
• Withdraw consent — use the unsubscribe link in any email.
• Non-discrimination — exercising these rights will never affect the service you receive.

To make a request. We will respond within 30 days. EU/UK residents have the right to lodge a complaint with their local supervisory authority. California residents may designate an authorised agent to act on their behalf.

Cookies

The public site uses only the essential cookies required to operate forms and (when you've subscribed) to remember your subscriber session. We do not run advertising cookies. If we add web analytics, it is privacy-respecting and IP-anonymised, and disclosed here.

Children

The service is not directed at children under 16, and we do not knowingly collect their data.

Changes

We may update this policy from time to time. Material changes will be flagged at the top of this page and, where required, in the next newsletter.

Contact

Data controller: Here in Huntsville