Privacy policy
What we collect, why, who helps us process it, and the rights you have.
Last updated: October 24, 2026
General information, not legal advice. This page is a general-purpose draft. It has not been reviewed by a lawyer, and highlighted placeholders mark business details still to be confirmed. This notice disappears once the business details in site.config.ts are filled in.
Who we are
This site is operated by [TODO_OWNER: legal entity name] (“Golden Dojo”, “we”, “us”), [TODO_OWNER: postal address], [TODO_OWNER: country]. For privacy requests, contact [TODO_OWNER: privacy contact email] or use the contact form and choose “Privacy request”.
What we collect
| Source | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Browsing the site | Page views, referrer, country-level location, device and browser type, performance metrics. Collected in aggregate by Vercel Web Analytics and Speed Insights without cookies and without building a profile of you. | Understand usage and keep the site fast | Legitimate interests |
| Contact form | Name, email address, topic, your message, and your consent tick. | Reply to your message | Consent / legitimate interests |
| Newsletter sign-up | Email address. | Send The Sunday Shortlist | Consent |
| Server logs | IP address, request time and URL, kept briefly by our hosting provider. | Security and reliability | Legitimate interests |
We do not run advertising trackers, social-media pixels or cross-site tracking on this site.
Cookies
We do not set analytics or advertising cookies. See the cookie policy.
Who processes your data
- Vercel Inc. hosts the site and provides cookieless analytics and performance monitoring.
- Resend delivers contact-form emails and stores newsletter subscribers, when configured.
Some processors are located in the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses. We do not sell your personal information.
Retention
Contact messages are kept only as long as needed to handle your request, and generally no longer than 24 months. Newsletter addresses are kept until you unsubscribe. Aggregated analytics contain no personal profile.
Your rights
Depending on where you live (for example the EU/UK under GDPR, or California under CCPA/CPRA) you may have the right to:
- access the personal data we hold about you;
- correct or delete it;
- object to or restrict processing, and withdraw consent at any time;
- receive a portable copy of data you provided;
- know whether personal information is sold or shared (we do not sell or share it), and not be discriminated against for exercising your rights;
- complain to your local data-protection authority.
To exercise a right, contact us as described above. We may need to verify your identity, and we aim to respond within 30 days.
Unsubscribing
You can leave the newsletter at any time using the unsubscribe page.
Children
This site is not directed to children under 16, and we do not knowingly collect their personal data.
Changes
We may update this policy and will change the “last updated” date when we do.