Privacy notice

This notice explains what happens to personal data when you use thetoolboxtalkai.com or subscribe to The Toolbox Talk AI.

Last updated 14 October 2026.

Who we are

The controller is Shaun, a sole trader in Sheffield, United Kingdom, writing as The Toolbox Talk AI. Contact: shaun@theeleventh.co.uk.

A postal address is not published on this page. Email the address above and ask if you need one to exercise your rights. There is no data protection officer. For a newsletter of this size, UK GDPR does not require one.

What we collect

• Email address, if you type it in and press "Get it free every week". That request is how you opt in.
• Signup context we send to Beehiiv with that email: that you came from this website (a source label such as "website"). We do not ask for your trade, your name, or your phone number.
• Emails you send us, if you write to shaun@theeleventh.co.uk about the newsletter, a correction, or a sponsorship.
• Hosting logs kept by Vercel to run and protect the site, which can include your IP address, browser, and the time of the request.
• Analytics: Vercel Web Analytics records that a page was viewed, plus general information such as browser, device type, referrer, and country. It is not tied to your email address.

We do not ask for special-category data (health, union membership, and similar). Please do not put that sort of information in an email to us.

Why, and the lawful basis

• Sending the newsletter. Lawful basis: consent (UK GDPR Article 6(1)(a)). Entering your email and pressing the button is how you give it. You can withdraw it any time. Unsubscribing is in every email.
• Replying to you. If you email us, we use what you sent to answer. Lawful basis: legitimate interests. If you are asking about a paid sponsorship, we also use it to take steps toward a contract.
• Running and securing the site. Lawful basis: legitimate interests. The interest is keeping the site available and dealing with abuse. This covers hosting logs.
• Understanding which pages are used. Lawful basis: legitimate interests, using cookieless analytics that do not identify you.
• Tax and accounting, if you pay for a placement. Lawful basis: legal obligation.

We do not use your data for solely automated decisions that have a legal or similarly significant effect on you.

Beehiiv

Beehiiv sends the email. They are our processor for the mailing list. When this site's Beehiiv API key is set, the form on this site passes your email address to Beehiiv to add you. When the key is not set, the form sends you to Beehiiv's own signup page and you give your email to Beehiiv there.

We do not keep a separate copy of the list on this website. Beehiiv may record whether an email was opened or a link was clicked, so we can see which notes were useful. Their privacy notice is at beehiiv.com/privacy (opens in a new tab). You can unsubscribe from the link in any email, or by writing to us.

Cookies and analytics

This site does not set advertising or analytics cookies. The signup form does not use a cookie. Vercel Web Analytics is cookieless. Details are in Vercel's analytics privacy notice (opens in a new tab). If you open Beehiiv's website, their own cookie notice applies there.

How long we keep it

• Your email stays on the Beehiiv list until you unsubscribe or you ask us to delete it.
• We may keep a short note that a deletion or objection was handled, so we do not add you again by mistake.
• Emails you send us are kept long enough to deal with the enquiry, and a short while after in case of a follow-up.
• If you pay for a placement, invoices and the related emails are kept for as long as UK tax rules require.
• Hosting logs are kept on Vercel's usual schedule for security and operations, not as a marketing list.

Who we share it with

We share personal data with Beehiiv (email delivery) and Vercel (hosting and cookieless analytics). We do not sell your data and we do not pass the list to sponsors. A sponsor sees a labelled mention in the email. They do not receive your address. We may disclose information if the law requires it.

Transfers outside the UK

Beehiiv and Vercel are based in the United States, so your email address and technical data may be processed outside the UK. Where that happens, those companies describe the safeguards they use (such as the UK International Data Transfer Agreement or Standard Contractual Clauses, where they apply) in their own notices:

• Beehiiv privacy notice
• Vercel privacy policy

Your rights

Under UK GDPR you can ask to access your data, correct it, delete it, restrict it, or receive a copy in a portable form. You can object to processing based on legitimate interests. You can withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing before you withdrew it. The unsubscribe link in each email is the quickest way to stop the newsletter.

Write to shaun@theeleventh.co.uk. We aim to reply within one month. If a request is complex we may extend that by up to two further months, and we will tell you if we do. We do not charge a fee unless a request is manifestly unfounded or excessive.

You can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint. You may also seek a remedy through the courts.

Children

The newsletter is written for adults who run a trade or a small business. We do not knowingly collect data from children. If you believe we have a child's email address, write to us and we will delete it.

Changes

If this notice changes, the new version will be posted on this page with a new date. If a change affects how we use your email, we will also say so in the newsletter where that is reasonable.