Privacy Policy

Instituted 10 April 2024.

To The Trains provides online articles and an email newsletter service. The data controller is To The Trains. (A data controller determines the purposes and means of processing personal data).

The newsletter is managed and sent via DigitalOcean (a server infrastructure provider), Ghost (a blogging platform), and Mailgun (a transactional and bulk email platform). DigitalOcean and Mailgun are the data processors.

What data we collect from you

The personal data we collect from you will include:

  • email address

The legal basis for processing this data is Consent. You consent to receiving the newsletter via email.

Why we need your data

We collect personal data to:

  • add you to the To The Trains mailing list
  • send you the To The Trains newsletter

We will not:

  • sell or rent your data to third parties
  • share your data with third parties for marketing purposes

We will share your data if we are required to do so by law — for example, by court order, to prevent fraud or other crime.

How long we keep your data

We will only keep your personal data for as long as you subscribe to the To The Trains newsletter. If you withdraw your consent at any time, we will remove you from the mailing list, and delete your personal data. You may exercise your right to withdraw your consent at any time by unsubscribing at the bottom of bulk emails or via the website.

Who we share your data with

As part of delivering the To The Trains website and newsletter, we share your personal data with Mailgun (a transactional and bulk email platform) which acts as a data processor.

Where your data is processed and secured

Your personal data is stored on IT infrastructure rented from DigitalOcean that is located in the United Kingdom. As your personal data is shared with our data processors, it may be transferred and stored securely outside the United Kingdom. Where that is the case it will be subject to equivalent legal protection through the use of International Data Transfer Agreements or Adequacy Decisions.

Children's privacy protection

We do not design or promote services for children who are 13 years of age or younger. We do not intentionally collect or keep data about anyone under the age of 13.

Your rights

You have the right to:

  • withdraw consent to the processing of your personal data at any time
  • request a copy of your personal data

Contact us to request a copy of your personal data. The copy we provide will be in a structured, commonly used, and machine-readable format.

You can find out more about your rights on the Information Commissioner's Office (ICO) website.

Questions and complaints

Contact us if you:

  • have any questions about anything in this privacy notice
  • think that your personal data has been misused or mishandled
  • want to make a subject access request (SAR)

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or 0303 123 1113, or [email protected].

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Changes to this notice

We may change this privacy notice. When we make changes to this notice, we will add a change note in this section. Any changes to this privacy notice will apply to you and your data immediately. If these changes affect how your personal data is processed, To The Trains will take reasonable steps to inform you.

Change notes

No changes have been made to this notice to date.