Privacy

Who looks after your data

Alex O'Neill, a sole trader in the UK, is the controller of the personal data described here. Contact: hello@ship.pivot20x.com.

What is stored

Ship It keeps two small records in a Supabase database.

• The waiting list: your first name, email address, whether you agreed to launch emails, a private unsubscribe code, when I last emailed you, and your IP address when you signed up (to stop spam and to show consent).
• Purchases: the payment provider, the order number, your email address and name, the amount and currency, whether the order is paid or refunded, whether you accepted the analytics box, and the dates.

Why, and on what basis

• To send you launch emails: your consent. You can withdraw it at any time.
• To sell you Ship It, give you access and handle refunds: it is needed for the contract with you.
• To keep tax records: a legal obligation.
• To stop spam and keep the site safe: my legitimate interest.

Payments

You buy Ship It through Onelink, the merchant of record service Stripe runs (Stripe Managed Payments). Onelink is the seller on your receipt, and Stripe is the payment processor. They collect your card and billing details themselves, and I never see your card number. Through Stripe I can see your name, email address, billing address, order number and amount; Ship It itself stores only what is listed above. Onelink and Stripe have their own privacy policies, at onelink.com/privacy and stripe.com/privacy, and are responsible for what they do with your data.

Email

I send your access link, your free checklist and any launch emails through Postmark. Postmark handles your name and email address to deliver them. Emails you send to hello@ship.pivot20x.com are received through Postmark and forwarded to my inbox. Every launch email has an unsubscribe link, and the unsubscribe page asks you to confirm with a Stop emails button. After that I do not email you about Ship It again.

Hosting and analytics

The site is hosted on Vercel. Like any web host it sees technical information such as your IP address when a page is requested.

Vercel Analytics, which shows me which pages get read, only runs if you accept the box. If you say no, it never loads.

Meta pixel and Conversions API

Only if you accept the cookie box, the Meta pixel measures visits to the page and my adverts. If you then join the waiting list or buy, Meta may also be told through its Conversions API that a sign-up or purchase happened. That message carries your email address in hashed form (scrambled so it cannot be read back), and for a sign-up also your IP address and browser details. It is used to measure and improve my ads. Meta then handles that data under its own privacy policy.

I have switched off Meta's advanced matching, so the pixel does not read what you type into forms.

The pixel and the analytics never load on your private Ship It pages, such as your buyer area.

To change your mind at any time, press Cookie settings in the footer. If you withdraw, the trackers stop.

How long I keep it

• Waiting list: unsubscribing stops all emails at once, and the row is deleted at the next review. I review the list at least once a year and delete rows that have unsubscribed or have had no email for 12 months.
• Purchases: 6 years, because tax and accounting records must be kept that long.

Where it goes

Some of the services above (Onelink, Stripe, Postmark, Supabase, Vercel and Meta) may handle data outside the UK. Providers outside the UK may rely on safeguards such as the UK addendum or standard contractual clauses; see each provider's privacy policy.

I do not sell your data.

Your rights

Under UK data protection law you can:

• ask for a copy of the data I hold about you
• ask me to correct it
• ask me to delete it (I will, unless I must keep it, such as purchase records for tax)
• ask me to limit or stop using it
• object to my use of it
• ask for it in a form you can move elsewhere
• withdraw your consent whenever you like, for example with the unsubscribe link or Cookie settings

Contact and complaints

Email hello@ship.pivot20x.com for any of the above. If you are not happy with my answer you can complain to the Information Commissioner's Office at ico.org.uk.