Privacy policy

Short version: I collect as little as possible, I never sell your personal data, and nothing that tracks you runs until you choose to accept it. This page sets out the detail, including the newsletter and buying a product.

This site is run by Chris Daniels (UX by Example), based in the United Kingdom. For anything in this policy, you can reach me through the contact form. I am the data controller for the personal data described below.

What I collect, and why

When you use the contact form

If you send a message, I receive the name, email address and message you type in. I use these solely to read and reply to you. The message is delivered to my inbox by Resend (my email provider), and the form is protected from spam by Cloudflare Turnstile. The legal basis is my legitimate interest in answering enquiries. I keep correspondence only as long as needed to deal with it, then delete it.

When you subscribe to the newsletter (or request the cheat sheet)

If you sign up for the weekly newsletter - or enter your email to get the free cheat sheet - I collect your email address and confirm it by a double opt-in (you click a link in a confirmation email before anything is sent). Your address is stored with Resend, my email provider, which sends the confirmation, the cheat sheet, and the weekly issues. I use it only to send you those emails. The legal basis is your consent, and every email has a one-click unsubscribe; unsubscribe and your address is removed from the list.

When you buy a product

Payment is handled entirely by Stripe on its own hosted checkout - your card details never touch this site. To deliver your download, I receive your email address and the details of what you bought, and I email you the download links via Resend. I keep a record of the sale (email, product, amount and Stripe reference) so I can support the purchase and meet accounting obligations. The legal basis is performing our contract (and, for the record of sale, my legal obligations). Stripe is the payment processor and has its own privacy policy.

Analytics (only after you accept)

I'd like to know which entries people read and where they struggle, so I know what to build next. None of it loads until you accept on the cookie banner. The full detail - Google Analytics, Microsoft Clarity, the cookies involved and how to change your mind - is on the cookies & analytics page. The legal basis is your consent, which you can withdraw at any time.

Hosting and security

The site is served by Cloudflare. Like any web host, Cloudflare processes basic technical data (such as your IP address and request information) to deliver pages and protect the site from abuse. This is necessary for the site to work and to keep it secure.

Affiliate links

Some "further reading" recommendations link to books on Amazon using an affiliate tag. If you buy through one, I may earn a small commission at no extra cost to you. Amazon sets its own cookies and has its own privacy policy once you follow such a link; I don't receive any personal data about your purchase.

Who your data is shared with

Only the providers that make the site function: Resend (email delivery and the newsletter list), Stripe (payment processing), Cloudflare (hosting and security), and - only with your consent - Google and Microsoft for analytics. Some of these process data outside the UK, including in the United States, under appropriate safeguards. I never sell your data or share it for advertising.

Your rights

Under UK GDPR you can ask what data I hold about you, request a copy, ask me to correct or delete it, or object to a particular use. Much of what this site handles is either anonymous analytics or a contact message you sent me directly, but whatever your question, send a note via the contact form and I'll help. You also have the right to complain to the UK's Information Commissioner's Office (ICO).

Changes

If this policy changes, I'll update this page. For significant changes I may also mention them in the newsletter, but the current version always lives here.