This site collects personal data in precisely two places: the newsletter signup and the contact form. Nothing else on the site gathers anything about you. There is no analytics package, no advertising tag, no social embed, no fingerprinting, and the site sets no cookies of its own.
Who is responsible
Theme Park Dispatch is the data controller for the information described here. For anything in this notice — including a request to see or delete your data — write to graham@loadeddice.uk or use the contact form.
The newsletter
If you subscribe, we store your email address, the page you signed up from, the dates on which you signed up, confirmed and (if you do) unsubscribed, and a random token that makes your confirmation and unsubscribe links work.
The lawful basis is your consent. Consent is taken seriously here: your address sits unconfirmed and unused until you click the link in the confirmation email, and if you never click it, nothing is ever sent to you.
The address is used to send you the newsletter, and for nothing else. It is not sold, not shared with advertisers, and not used to build a profile of you.
You can withdraw consent whenever you like — every email carries a one-click unsubscribe, and it takes effect immediately. When you unsubscribe we keep the record with an "unsubscribed" marker rather than deleting the row outright. That is deliberate: a deleted address is one that a later import could silently add back, and keeping the marker is the only dependable way to make sure we never email you again. If you would rather it were erased completely, ask and it will be.
The contact form
When you send a message we store the name and email address you give, the topic you pick, the message itself and the time you sent it. The message is also emailed to the editor so it can be read and answered.
The lawful basis is legitimate interests — specifically, being able to read and reply to someone who has deliberately got in touch. Your address is used to reply to you and for nothing else; sending a message does not subscribe you to anything.
Messages are kept for up to 24 months so that corrections and news tips can be traced back to their source, then deleted.
Abuse prevention
Both forms are rate limited, which needs some way of telling one sender from another. Rather than storing your IP address, the site stores a salted one-way hash of it alongside a counter. The hash cannot be turned back into an address, it is not linked to your subscription or your message, and the record is deleted within about an hour.
Who else is involved
Two processors, both acting on our instructions:
- Cloudflare — hosts the site and stores the data described above. Cloudflare also keeps short-lived security and traffic logs of requests to the site, as any web host does.
- Resend — delivers the confirmation emails, the newsletter and the contact-form notifications.
Both operate internationally, so your data may be processed outside the UK and EEA under the safeguards in their standard data-processing terms. No one else receives your data, and it is never sold.
Advertising
The site reserves space for display advertising but is not currently running any, and no advertising or tracking scripts are loaded. When that changes this notice will be updated before the first ad appears, not afterwards.
Your rights
Under UK GDPR you can ask for a copy of the data held about you, ask for it to be corrected or erased, object to its use, or withdraw consent for the newsletter. Ask and it will be done — there is very little data here and no reason to be awkward about it.
If you are unhappy with how a request is handled, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
This notice was last updated on . Material changes will be noted here.