Privacy notice
What we collect, why we need it, and the choices you have.
Controller and contact
Weekthread is responsible for personal information used to operate this newsletter store. Contact contact@weekthread.com for privacy requests. Available business identity and contact information appear below.
Information we process
We store your delivery email, selected topics, purchase amount and currency, order/payment references, payment status, schedule and delivery outcomes. Support, withdrawal and privacy requests include the name, email, purchase identifier, statement and submission time you provide. New purchases include policy acceptance records. Essential sessions and short-lived hashed network-address counters support security. Hosting and email providers may process network addresses and operational logs. We do not receive full card numbers or card security codes.
Purposes and legal grounds
Purchase and delivery processing is necessary to perform your contract. Legally required withdrawal, tax and accounting records are processed to meet legal obligations. We rely on legitimate interests to secure the site, prevent abuse and handle disputes, balancing those interests against your rights. If optional marketing or tracking is introduced, we will explain it and obtain consent where required. Buying a pass does not sign you up for unrelated marketing.
Providers and recipients
Stripe processes payments and related fraud checks. Hosting/database providers store application records, and the SMTP provider processes email addresses and content for delivery. The intended hosted setup uses Hostinger; actual provider arrangements must be confirmed before launch. Anthropic supplies Claude article generation and web research. We do not include purchaser names, emails or support messages in generation prompts. Authorised staff can access records for support. Advisers or authorities may receive information where legally required.
International processing
Provider operations may involve countries outside the EEA. Where required, transfers must rely on adequacy decisions or other valid safeguards, such as standard contractual clauses. Actual hosting regions and provider arrangements determine the transfers involved. Contact us for the safeguards applicable to your records. We do not promise that all processing takes place in Europe.
Retention
Active purchase and delivery records are retained for fulfilment, support and disputes. Accounting and transaction records are kept for periods required by applicable tax/accounting law. Support and withdrawal records are kept for the time needed to handle requests and relevant legal claims, then reviewed for deletion. Rate-limit records expire after a short operational window and are cleared by scheduled housekeeping. Provider logs and backups have separate schedules. Contact us for the period applicable to your records; legal retention duties may prevent immediate erasure.
Your rights
Subject to applicable conditions, you can request access, correction, erasure, restriction or portability and object to processing based on legitimate interests. Consent can be withdrawn without affecting earlier lawful processing. Use Contact or email; we may ask for proportionate identity verification. GDPR requests normally receive a response within one month, with any lawful extension explained. You can complain to the supervisory authority in your country of residence, work or the place of the alleged infringement.
Automation and security
We automate payment checks, delivery scheduling and article generation. We do not use selected topics for advertising profiles or decisions with legal or similarly significant effects about you. Stripe may conduct its own risk assessments. Access controls, password hashing and encrypted provider connections help protect information, but no system can guarantee absolute security.
External links and updates
Source links lead to sites with their own privacy practices. We update this notice when practices change and communicate material changes as required.