Privacy Policy

Last updated: June 25, 2026

This Privacy Policy explains how Tinystack (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit our website or contact us.

Tinystack provides custom web design and website development services for authors, publishers, and publishing professionals. We also share occasional free resources and educational content through our website.

We only collect the information necessary to respond to enquiries and operate our website.

If you have any questions about this policy, you can contact us at: [email protected].

1. Information we collect

We only collect personal information that you voluntarily provide to us, such as:

Name
Email address
Any information you include in your message when contacting us

We collect this information when you:

Fill out our contact form
Email us directly
Subscribe to receive a free resource or updates

We do not intentionally collect sensitive personal data.

We also collect limited technical and usage data automatically when you visit our website (see “Analytics and cookies”).

2. How we use your information

We use your information to:

Respond to enquiries and communicate with you
Understand your project needs if you contact us about services
Maintain records of communication
Deliver free resources you request
Send email updates if you opt in
Request feedback, testimonials, or reviews relating to services we have provided
Improve our website and user experience
Ensure website security and functionality

We do not sell or rent your personal data.

We will only publish testimonials, reviews, or endorsements with your permission.

3. Analytics and cookies

We use Google Analytics to understand how visitors use our website, such as pages viewed, time spent on pages, and general usage patterns.

Google Analytics may use cookies or similar technologies to collect this information. We use this information to understand overall website usage and improve the performance and user experience of our website.

Where required by law, we will request consent before placing non-essential cookies on your device.

For more detailed information about the cookies and similar technologies used on this website, please see our Cookie Policy.

You can manage or disable cookies through your browser settings at any time.

4. Legal basis for processing (UK GDPR)

If you are located in the UK or EU, we process your personal data under the following lawful bases:

Legitimate interests – to respond to enquiries, operate our website, maintain records, and improve our services.
Consent – where you choose to receive emails, download resources, or opt in to communications.

5. Email subscriptions and free resources

If you choose to download a free resource or subscribe to updates, we collect your name and email address through Kit (formerly ConvertKit).

We use this information to:

Deliver the resource you requested
Send relevant updates, resources, and occasional requests for feedback relating to our services
Manage and improve communication

You can unsubscribe at any time using the link in any email.

6. International users

If you are accessing this website from outside the UK, including the United States or other regions, your personal data may be subject to local data protection laws.

Where applicable, we will handle your personal data in accordance with those laws and your applicable rights.

7. International data transfers

Some third-party services we use (such as email and analytics providers) may process data outside the United Kingdom.

Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws.

8. Data storage and security

We take reasonable technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure, or alteration.

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Data retention

We retain personal data only for as long as necessary to:

Respond to enquiries
Deliver requested resources or services
Maintain business records
Comply with legal, accounting, or administrative obligations

We generally retain enquiry and marketing-related personal data for up to 12 months from our last meaningful interaction with you.

You may request deletion of your personal data at any time. However, we may retain certain information where necessary to comply with legal, accounting, or regulatory obligations.

10. Sharing your information

We do not sell your personal data.

We may share limited information with trusted third-party providers who help us operate our website and services, including:

Showit (website hosting)
Google Analytics (website analytics)
Kit (email marketing and delivery of free resources)

These providers only process data on our behalf and in accordance with their own privacy policies.

11. Your data rights

Depending on your location, you may have rights under data protection laws, including the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict processing
Withdraw consent where applicable
Request a copy of your personal data and, where applicable, receive it in a portable format

To exercise these rights, contact: [email protected]

If you are in the UK and are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

12. Third-party links

Our website may include links to third-party websites or platforms.

We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies separately.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised “Last updated” date.

14. Contact

If you have any questions about this Privacy Policy, you can contact us at:

[email protected]