Legal

Privacy Policy

Effective date: 22 October 2025  ·  Updated: 29 October 2026  ·  Danbury & Lovejoy, [email protected]

Who we are & data controller

Danbury & Lovejoy is a UK-based slow-living content site. The data controller for personal data collected through this website is:

Danbury & Lovejoy
Email: [email protected]

As data controller, we determine the purposes and means of processing your personal data in accordance with UK GDPR and the Data Protection Act 2018.

What data we collect

  • Newsletter: email address, optional full name.
  • Newsletter sign-ups through a Facebook or Instagram ad: the name and email address you enter in the ad’s form, which is hosted by Meta rather than on this Site. See the Meta (Facebook) lead ads section below.
  • Site analytics: pseudonymous usage data (pages visited, device type, referrer).
  • Shop orders and downloads: name, email, billing and fulfilment information.

Why we collect it (lawful bases)

  • Consent: sending newsletters and partner communications you opted into; analytics cookies.
  • Legitimate interests: improving the site and preventing abuse.
  • Contract: providing paid or free downloads you requested.

Who receives your data

  • Meta (Facebook & Instagram) — where you fill in the form in one of our ads, Meta collects your name and email address on its own platform and passes them to us. Simply seeing an ad sends us nothing about you. We also give Meta a hashed copy of our newsletter list, so that our newsletter ads aren’t shown to people who already subscribe. See the detailed section below.
  • MailerLite — our email newsletter provider. Your email address and name (if given) are stored on MailerLite’s servers for the purpose of delivering the Danbury Dispatch newsletter. MailerLite’s privacy policy: mailerlite.com/legal/privacy-policy.
  • Google Analytics 4 — website analytics, set only with your consent.
  • Cloudflare — content delivery and security.
  • WooPayments (WooCommerce, processed by Stripe) — takes card payments for shop orders, used for that purpose only. We do not see or store your full card details.

How long we keep it

  • Newsletter data: until you unsubscribe or we remove inactive contacts. This includes sign-ups that reach us through a Facebook or Instagram ad form; Meta keeps its own copy of those under its own policy.
  • Order records: 6 years for accounting purposes.
  • Analytics: 14 months in our Google Analytics property, then aggregated.

International transfers

MailerLite, Google, Cloudflare and Meta may store or process data outside the UK/EEA, including in the United States. Where this occurs, appropriate safeguards are in place (e.g., UK IDTA, the UK Extension to the EU–US Data Privacy Framework, or EU Standard Contractual Clauses).

Your rights

Under UK GDPR, you have the right to access, correct, erase, restrict, port, or object to the use of your personal data. To exercise any of these rights, email us at [email protected].

You can unsubscribe from any email at any time using the unsubscribe link in the footer of each message.

Withdrawing consent: you can change or withdraw your analytics consent at any time — it is as easy to withdraw as it was to give. Use the button below, or the “Privacy settings” link in the footer of any page.

Manage your privacy settings

Cookies

We use strictly necessary and functional cookies, and — with your consent — analytics cookies. We do not set advertising cookies. See our Cookie Policy for the full list and consent controls.

Affiliate links

Some links on this Site are affiliate links, including through the Amazon Associates Programme, the Awin network, Rakuten Advertising, Tradedoubler and CJ Affiliate. Links to VeSync’s own products on Amazon (Levoit and Cosori) are tracked by VeSync through Amazon Attribution, and the commission comes from VeSync rather than Amazon Associates. If you click one and buy something, the retailer may set a cookie so the sale can be attributed to us, and we may earn a commission at no extra cost to you. These cookies are set by the retailer, not by us, and are governed by the retailer’s own privacy policy. This never affects what we recommend.

Complaints

You may complain to the UK Information Commissioner’s Office at ico.org.uk. We would always appreciate the chance to resolve any concern directly first — please get in touch at [email protected].

Data breach procedure

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will report it to the ICO without undue delay and, where feasible, within 72 hours of becoming aware of it. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

ICO registration: Danbury & Lovejoy is run by a sole trader and processes personal data only for the purposes of advertising, marketing and promoting our own services (newsletter) and for related analytics. We believe this falls within the small-organisation exemption from the requirement to pay the ICO’s data protection fee. If you believe an exemption should not apply, please get in touch.

Updates

We may update this policy from time to time. When we do, we’ll update the effective date at the top of this page.

Third-party data processors

We use the following third-party services that may receive or process personal data when you visit this Site. Where required by law, we only allow these services to process your data after you have given your consent through the privacy consent notice shown on your first visit. You can reopen that notice at any time using the “Privacy settings” link in the footer.

Google Analytics (GA4)

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Measurement ID: G-FF34HMKTNY
Purpose: We use Google Analytics 4 to understand how visitors use this Site — including which pages are visited, how long visitors stay, and how they arrive. This involves the collection of anonymised usage data and the setting of analytics cookies.
Legal basis: Consent (Article 6(1)(a) UK GDPR)
Data retention: Google Analytics data is retained for 14 months in our GA4 property.
Opt-out: You can opt out of Google Analytics tracking using the Google Analytics opt-out browser add-on, or by declining analytics in the privacy consent notice.
Google’s privacy policy: policies.google.com/privacy

MailerLite

Provider: MailerLite Limited, Ground Floor, 71 Lower Baggot Street, Dublin 2, D02 P593, Ireland
Purpose: We use MailerLite to manage our newsletter mailing list and send the Danbury Dispatch email newsletter. When you sign up via any form on this Site, your email address (and name, if provided) is transmitted to and stored by MailerLite.
Legal basis: Consent (Article 6(1)(a) UK GDPR)
Data processing agreement: We have a Data Processing Agreement in place with MailerLite in accordance with Article 28 UK GDPR.
MailerLite’s privacy policy: mailerlite.com/legal/privacy-policy

Cloudflare

Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA
Purpose: This Site uses Cloudflare as a content delivery network (CDN) and security provider. Cloudflare processes network traffic (including IP addresses) to deliver the Site quickly and protect it from malicious traffic. Cloudflare does not use this data for advertising purposes.
Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR) — ensuring the security and performance of this Site.
Cloudflare’s privacy policy: cloudflare.com/privacypolicy

Meta (Facebook) lead ads

Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland
Purpose: We advertise the Danbury Dispatch newsletter on Facebook and Instagram. Some of those ads use a Meta “instant form”, which is hosted by Meta and not on this Site. If you choose to complete one, you give us your name and email address so we can send you the newsletter and the free guide the ad offers. We retrieve those details from Meta and add them to our newsletter list at MailerLite. Filling the form in is entirely optional, and simply seeing the ad sends us nothing about you.
Legal basis: Consent (Article 6(1)(a) UK GDPR), given when you submit the form. You can withdraw it at any time by unsubscribing, using the link in the footer of any email we send you.
Roles: we are the controller of the details you submit to us. Meta processes the same data for its own purposes as a separate controller, under its own policy.
Meta’s privacy policy: facebook.com/privacy/policy

Our newsletter list (a Meta “Custom Audience”): so that we don’t pay to show newsletter ads to people who already receive the Dispatch, we have given Meta our subscribers’ email addresses as a “Custom Audience”. Meta turns each address into a one-way code (a “hash”) to match it against its accounts, and we use the result only to leave those people out of our ads. We don’t use it to show you ads.
Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR) — not spending money advertising the newsletter to people who already get it. You can object at any time by emailing [email protected], and we will take you out of the list we give Meta.

Services we no longer use

Meta (Facebook) Pixel — the Meta Pixel was removed from this Site on 31 July 2026 and no longer runs, so this Site no longer tracks you for Meta or sends Meta anything about your visit. We do still advertise on Facebook and Instagram, and if you fill in the form in one of those ads you give us your details there — see Meta (Facebook) lead ads above. To manage advertising preferences on data Meta collected previously, see your Facebook Ad Settings.

Journey by Mediavine (advertising) — this Site carried third-party display advertising managed by Journey by Mediavine from August 2026. We removed it on 10 October 2026, so Mediavine and its advertising partners no longer serve ads or set cookies here. Advertising cookies set on an earlier visit stay in your browser until they expire or you clear them. Mediavine’s privacy policy: mediavine.com/privacy-policy.

Cookies

For full details of the cookies we set and how to manage your cookie preferences, please see our Cookie Policy.