Privacy Policy
Instituted 10 April 2024. Updated 1 June 2024.
To The Trains provides online articles and an email newsletter service. The data controller is To The Trains. (A data controller determines the purposes and means of processing personal data).
The newsletter is managed and sent via Hetzner Online (a server infrastructure provider), Ghost (a blogging platform), and Mailgun (a transactional and bulk email platform). Hetzner Online and Mailgun are the data processors.
What data we collect from you
The personal data we collect from you will include:
- email address
Our legal basis for processing your data
The legal basis for processing this data is Consent. You consent to receiving the newsletter via email.
Why we need your data
We collect personal data to:
- add you to the To The Trains mailing list
- send you the To The Trains newsletter
We will not:
- sell or rent your data to third parties
- share your data with third parties for marketing purposes
We will share your data if we are required to do so by law — for example, by court order, to prevent fraud or other crime.
How long we keep your data
We will only keep your personal data for as long as you subscribe to the To The Trains newsletter. If you withdraw your consent at any time, we will remove you from the mailing list, and delete your personal data. You may exercise your right to withdraw your consent at any time by unsubscribing at the bottom of bulk emails or via the website.
Who we share your data with
As part of delivering the To The Trains website and newsletter, we share your personal data with Mailgun (a transactional and bulk email platform) which acts as a data processor.
Where your data is processed and secured
Your personal data is stored on IT infrastructure rented from Hetzner Online GmbH that is located in Germany. As your personal data is shared with our data processors, it may be transferred and stored securely outside the United Kingdom and European Union. Where that is the case it will be subject to equivalent legal protection through the use of International Data Transfer Agreements or Adequacy Decisions.
Children's privacy protection
We do not design or promote services for children who are 13 years of age or younger. We do not intentionally collect or keep data about anyone under the age of 13.
Your rights
You have the right to:
- withdraw consent to the processing of your personal data at any time
- request a copy of your personal data
Contact us to request a copy of your personal data. The copy we provide will be in a structured, commonly used, and machine-readable format.
You can find out more about your rights on the Information Commissioner's Office (ICO) website.
Questions and complaints
Contact us if you:
- have any questions about anything in this privacy notice
- think that your personal data has been misused or mishandled
- want to make a subject access request (SAR)
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or 0303 123 1113, or [email protected].
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
Changes to this notice
We may change this privacy notice. When we make changes to this notice, we will add a change note in this section. Any changes to this privacy notice will apply to you and your data immediately. If these changes affect how your personal data is processed, To The Trains will take reasonable steps to inform you.
Change notes
- 1 June 2024: Privacy policy updated to reflect the change in online infrastructure provider from DigitalOcean to Hetzner Online. Users' personal data is now stored in the European Union (Germany) instead of the United Kingdom but is still subject to data protection regulations.