Effective Date: 1st August, 2025
Last Updated: 11th August, 2025

At The Pocket Dojo, your privacy is a top priority. We follow UK data protection laws and only collect the necessary information to run the newsletter and enhance your experience.

• What we collect: Your name, email, any comments you leave, and basic technical data (like IP address).

• What we do with it: Send you the newsletter, improve the site, and keep things secure.

• What we don’t do: We never sell your data, and we only share it with trusted service providers who help us run the newsletter.

• Your rights: You can ask us to see, fix, delete, or stop using your data at any time — just email us or unsubscribe.

For the full details (including legal obligations), please read on.

1. Who We Are

The Pocket Dojo (“we”, “us”, “our”) is a newsletter and content platform published via Substack and owned and operated by Paul Crick. We are the data controller for your personal information when you interact with our newsletter and related services.

Contact details:

• Data Controller: Paul Crick

• Email: hello@theelevatepartnership.com

• Postal Address: 20-22 Wenlock Road London N1 7GU United Kingdom

We comply with:

• The UK General Data Protection Regulation (“UK GDPR”)

• The Data Protection Act 2018 (“DPA 2018”)

• The Privacy and Electronic Communications Regulations 2003 (“PECR”)

2. How We Collect Personal Data

We collect data:

• Directly – when you subscribe, comment, or contact us.

• Automatically – through cookies and analytics tools when you visit our Substack page.

• From third parties – such as Substack, payment processors, or analytics services.

3. What Data We Collect

We may collect:

• Contact Information – Name, Email, and Subscription Preferences.

• Technical Data – IP address, browser type, device information, usage statistics.

• Transactional Data – payment details (processed securely via third parties).

• User Content – comments or messages posted to the platform.

We do not knowingly collect data from individuals under the age of 18.

4. Legal Bases for Processing

We process data under the UK GDPR only where we have a lawful basis:

• Consent (e.g., subscribing to the newsletter)

• Contract (providing the services you have requested)

• Legal Obligation (compliance with applicable laws)

• Legitimate Interests (operating and improving our services)

5. How We Use Your Data

We use your data to:

• Deliver and manage the newsletter

• Communicate with you about updates or offers

• Improve our content and site functionality

• Comply with legal obligations

• Protect against fraud and abuse

6. Sharing Your Data

We share data only with:

• Service providers – Substack, email services, payment processors, analytics providers

• Legal authorities – if required by law

• Business successors – in the event of a merger or transfer, with protections in place

We never sell your personal data.

7. International Transfers

Where your data is transferred outside the UK (for example, Substack’s servers), we ensure safeguards such as adequacy decisions or Standard Contractual Clauses are in place.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small files stored on your device when you visit a website. We also use similar technologies, such as pixels and local storage.

8.2 Types of Cookies We Use

• Strictly Necessary – essential for site functionality and security.

• Performance & Analytics – help us understand how people use the site.

• Functional – remember your settings and preferences.

• Targeting/Advertising – may be used by Substack or partners to show relevant ads.

8.3 How We Use Cookies

• Keep the site secure

• Enable subscriptions and payments

• Measure site performance

• Personalise your experience

• Deliver relevant content (if you consent)

8.4 Managing Your Cookie Preferences

• Use Substack’s cookie banner or your account settings (if available)

• Adjust your browser settings to block or delete cookies

• Opt out of targeted ads via Your Online Choices

Blocking some cookies may affect site functionality.

9. Data Retention

We keep your data only as long as necessary for the purposes described here or as required by law. When no longer needed, we securely delete or anonymise it.

10. Your Rights

Under UK GDPR, you have rights to:

• Access, correct, delete, or restrict your data

• Object to processing or withdraw consent

• Request data portability

To exercise these rights, email [insert contact email]. We will respond within one month.

11. Marketing Communications

We will only send you marketing emails if you have consented or if we have another lawful basis. You can opt out any time via “unsubscribe” links or by contacting us.

12. Security

We use appropriate technical and organisational measures to protect your data. However, no internet transmission is completely secure.

13. Third-Party Links

Our content may include links to other websites. We are not responsible for their privacy practices.

14. Complaints

You can contact us with concerns or complain to the Information Commissioner’s Office (ICO):

• Website:

https://ico.org.uk

• Phone: 0303 123 1113

15. Changes to This Policy

We reserve the right to update this policy from time to time. The latest version will always be posted here with the effective date shown above.

16. Governing Law

This policy and any disputes are governed by the laws of England and Wales.