Privacy
1. Who we are
This website and The Monday List are run by Vindivo Limited, registered in England and Wales, company number 17149797. Paul Keene and The Monday List are trading names of Vindivo Limited. We are the controller of the personal data described here. Contact: paul@paulkeene.com.
2. Visitors to this website
- Cookie-free visit counts. We count page views using a cookie-free tool that doesn't store anything on your device or identify you. This lets us see how many people visit even if they decline cookies. Our lawful basis is legitimate interests: understanding how our site is used.
- Google Analytics. Only if you click Accept on the cookie banner, Google Analytics sets cookies to tell us how visitors use the site. Our lawful basis is your consent, which you can withdraw by clearing your cookies.
- Booking a call. If you book a call, our booking tool (Calendly) collects your name, email and anything you choose to tell us, so we can hold the call.
3. Customers
When you sign up, we collect your name, email, company name, website and billing address. Payments are handled by Stripe; we never see or store your full card number. We use this information to provide the service, send invoices and receipts, and keep records. Our lawful basis is the contract with you, and our legal duty to keep accounting records.
When you give us access to your analytics, search, advertising or sales data, we use it only to provide the service. Where that data includes personal data about your own customers, we handle it as your processor, under the terms of our agreement with you.
4. Business contacts we email
We sometimes email people at businesses that we think could benefit from our service, for example a business advertising a marketing role. We use business contact details (name, job title, work email, company and public information about the company) from the company's own website, public job adverts and business data providers such as Apollo.io.
Our lawful basis is legitimate interests: telling businesses about a relevant service. We only use work email addresses, we keep emails relevant to your role, and every email lets you opt out. If you ask us to stop, we keep a note of your address only so we never contact you again.
5. Who we share data with
We use trusted suppliers to run the business, and they act on our instructions: Stripe (payments), Vercel (website hosting and visit counts), Supabase (our database), Resend (sending email), Google (analytics and email), Calendly (bookings) and Apollo.io (business contact data). We don't sell personal data.
Some of these suppliers are based in, or store data in, the United States. Where data leaves the UK, it is protected by the UK–US data bridge or the UK's approved data transfer contracts.
6. How long we keep it
- Customer and billing records: six years after you leave, as UK tax law requires.
- Your business data used for the service: deleted within 30 days of you leaving, unless you ask us to keep it.
- Business contacts we've emailed: up to two years after our last contact, or sooner if you ask. Opt-outs are kept so we don't contact you again.
- Google Analytics data: 14 months.
7. Your rights
You can ask to see the personal data we hold about you, have it corrected or deleted, object to how we use it, or ask us to stop emailing you. Email paul@paulkeene.com and we'll reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put it right first.
8. Changes
If we change this notice, we'll update the date at the top of this page.