This notice explains what personal data SignalMEA collects, why, who processes it, and the rights you have over it. It is written to be read in plain language and to reflect exactly how the service works today.
Who we are
SignalMEA is a regulatory intelligence newsletter operated by Stratify Consulting Ltd, a company incorporated in Ontario, Canada (Ontario Corporation Number 1000614730), with its registered office at 2220 Lake Shore Blvd West, Unit 909, Toronto, Ontario M8V 0C1, Canada. For any question about this notice or your data, contact us at [email protected]. Stratify Consulting Ltd is the data controller responsible for your personal data.
What we collect
We collect only what we need to deliver the brief and, for paying subscribers, to take payment:
- When you subscribe: your first name, email address, country of residence, and preferred language. You may optionally add your company and sector focus.
- A record of your sign-up: the page or campaign you subscribed from, and a timestamp, kept so we can manage subscriptions reliably.
- If you take a paid subscription: your payment is processed by Stripe. We do not see or store your card details. We receive confirmation of your subscription status only.
- If you complete our survey: the answers you give, which are used to shape the product and, on completion, to issue a discount code.
We do not collect sensitive personal data, we do not buy or sell personal data, and we do not build advertising profiles.
Why we use it, and our lawful basis
- To send you the brief: on the basis of your consent, given when you subscribe. You can withdraw it at any time by unsubscribing.
- To send you marketing beyond the brief, such as occasional offers or product news: only if you opt in to it separately when you subscribe, and you can withdraw that consent at any time.
- To provide a paid subscription: on the basis of performing our contract with you.
- To understand and improve the product: on the basis of our legitimate interest in running and improving the service, and your consent where you choose to take the survey.
Who processes your data
We use a small set of established service providers to run SignalMEA. They act as our service providers.
- Buttondown: holds subscriber details (email address, subscription status and survey tag), sends the signup confirmation and welcome emails, sends the newsletter, and manages subscriptions.
- Tally: holds survey responses, including the email address you give. Responses are kept until we delete them by hand.
- n8n: runs the workflows that handle subscription and survey data. Execution logs are kept for seven days.
- Google: sends the survey reward email from our info mailbox. A copy of each email is kept in that mailbox’s Sent folder until we delete it.
- Stripe: currently holds founding promotion codes only; will process payments when paid plans open.
- Supabase: holds our regulatory database. It holds no subscriber details.
- Netlify: hosts the website and its functions. Netlify keeps access logs and function logs for about 24 hours.
- Cloudflare: provides our network proxy and cookieless website analytics. Cloudflare receives each visitor’s request, including their IP address.
Some of these providers operate servers outside your country of residence, including in the United States and the European Union. Where data is transferred across borders, we rely on the safeguards and contractual terms offered by these providers.
Cookies
The site uses one essential security cookie from Cloudflare. It confirms that a visitor has passed a security check. It is not used for analytics or tracking.
Your rights
Wherever you live, you can ask us to:
- Confirm what data we hold about you and receive a copy of it.
- Correct anything that is inaccurate or out of date.
- Delete your data.
- Stop using your data for marketing, which you can do instantly by unsubscribing.
- Withdraw consent at any time, without affecting anything done before you withdrew it.
These rights reflect the protections under Canada's PIPEDA, the EU and UK GDPR, the UAE Personal Data Protection Law, and the Saudi Personal Data Protection Law, among others. To exercise any of them, email [email protected] and we will respond within the time the applicable law requires.
How long we keep it
We keep your subscription data for as long as you are subscribed. When you unsubscribe:
- We retain a minimal suppression record, essentially your email address, so that we never email you again by mistake. This is kept for as long as necessary to honour your choice.
- The rest of your profile is deleted or anonymised within twelve months, unless a law requires us to keep it longer.
We do not send marketing emails to people who have unsubscribed.
Survey responses are kept in Tally until we delete them by hand. Copies of survey reward emails are kept in the Sent folder of our info mailbox until we delete them. Workflow execution logs are kept for seven days.
Children
SignalMEA is a professional service intended for adults. It is not directed at children, and we do not knowingly collect data from them.
Changes to this notice
We may update this notice as the service evolves or the law changes. The date at the top shows when it was last revised. Material changes will be communicated to subscribers.
Contact
For any privacy question or request, write to [email protected].