Privacy Policy

Information we collect

We collect only the information we need to run the Site and the services you ask for:

• Email address — when you join our newsletter or the Seed to Spice ebook waitlist, or contact us by email.
• Account information — if you sign in (for example, site administrators), we process the email address used for passwordless “magic link” sign-in.
• Usage and device data — collected automatically through analytics and our hosting provider, such as pages visited, referring site, approximate location (from IP address), browser, and device type.

We do not collect special-category data, and we do not ask for payment details on the Site (the ebook is currently a waitlist; any future checkout will be handled by a third-party provider with its own privacy policy).

Cookies and consent

We use cookies and similar technologies to run the Site and to understand how it is used. Essential cookies, which the Site needs to work, are set automatically. Non-essential cookies — such as analytics — are only set with your consent.

We manage cookie consent using CookieYes. When you first visit, you can accept or reject non-essential cookies, and you can change your choice at any time through the cookie settings. You can also control cookies through your browser settings; blocking some cookies may affect how parts of the Site work.

Analytics is provided through Google Analytics (via Google Tag Manager), which sets cookies only where you have consented. We also use Vercel Analytics, which is designed to be privacy-friendly.

How we use your information

We use your personal data to:

• Send you our newsletter or waitlist updates, where you have asked us to.
• Operate, secure, and improve the Site and its content.
• Respond to your enquiries and provide support.
• Meet our legal and regulatory obligations.

Legal bases for processing

Under the UK GDPR, we rely on the following legal bases:

• Consent — for sending you marketing emails (newsletter and waitlist) and for setting non-essential cookies such as analytics. You can withdraw consent at any time.
• Legitimate interests — for keeping the Site secure and working well, balanced against your rights.
• Legal obligation — where we must process data to comply with the law.

Sharing your information

We do not sell your personal data. We share it only with the service providers that help us run the Site, who process it on our instructions:

• MailerLite — email newsletter and waitlist management.
• Google (Analytics / Tag Manager) — website analytics.
• Vercel — website hosting and analytics.
• Supabase — database and authentication.

We may also disclose information if required by law, or to protect our rights, users, or the Site.

Affiliate links

Some pages contain affiliate links to third-party retailers (for example, seed suppliers and equipment). If you follow these links, the third-party site is responsible for its own data collection and privacy practices, which are governed by its own privacy policy. We earn a commission from qualifying purchases, at no extra cost to you.

International transfers

Some of our service providers are based outside the UK (for example, in the United States). Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or equivalent approved mechanisms.

Data retention

We keep your personal data only for as long as we need it for the purposes set out in this policy. We keep newsletter and waitlist data until you unsubscribe or ask us to delete it. Analytics data is retained in line with our providers’ standard retention periods.

Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data, or restrict or object to its processing.
• Withdraw consent at any time (for example, by using the unsubscribe link in any email).
• Request a copy of your data in a portable format.

To exercise any of these rights, contact us at hello@thechilliindex.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Children

The Site is not directed at children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “last updated” date at the top of this page. Significant changes may be highlighted on the Site.

Contact us

If you have any questions about this policy or how we handle your data, contact us at hello@thechilliindex.com.