Privacy notice
This notice explains what I hold about people I contact at organisations, where it comes from, what I do with it, and how you can have it changed, removed or stopped.
Who is responsible
The controller of your personal data is Yashvardhan Singh, trading as goodplotworks. You can reach me at contact@goodplotworks.com or by post at:
(being added to this page; until then, email me and I will send it to you)
What I hold about you
- Your name, your work email address and your role, as your organisation publishes them.
- Facts about your organisation, such as its name, country, the work it does, and its published income and funding.
- The emails we exchange, and whether you have asked me not to contact you again.
I only use addresses your organisation publishes for its staff. I do not look for or keep personal email addresses, home addresses or anything about your private life.
Where it comes from
From your organisation’s own website, its annual report, or its entry in a public charity or NGO register. I record the source for each contact, and you can ask me which one I used for you.
Why I use it, and the lawful basis
I use it to offer my services (software, reporting, design, research and planning work) to your organisation. The lawful basis is legitimate interests, under Article 6(1)(f) of the UK GDPR: contacting the people an organisation names as responsible for this kind of work is a reasonable way to offer it, and you can object at any time.
What I track
Whether a link in my email to you was clicked, and whether you replied. My emails contain no open-tracking pixel, so I do not record whether or when you opened them.
Who processes it for me
- Google Workspace, for sending and receiving email. My emails come from yashvardhan.singh@goodplotworks.com.
- Supabase, for the database that holds contact records.
- Cloudflare, for hosting.
I use Google Gemini, an AI service, to help draft emails. It receives no personal data: drafts are written from facts about your organisation only, and your name is added afterwards. Free tiers of AI services may use what they are sent to improve their services.
The AI only drafts: I review every draft it writes before it is used. Follow-up emails in a sequence are sent automatically on a schedule; every message pattern is reviewed by me before it is used.
Transfers outside the UK
Google (for Workspace email) and Cloudflare (for hosting) may process data in the United States and other countries outside the UK. Both rely on the UK International Data Transfer Addendum to the EU standard contractual clauses, as set out in their data processing terms (Google’s Cloud Data Processing Addendum and Cloudflare’s Data Processing Addendum). Cloudflare also treats transfers to the US under the UK Extension to the EU–US Data Privacy Framework as not needing those clauses.
Supabase stores the contact database in this region: not chosen yet, because the contact database is not in use yet. I will name the region here before I send any outreach email.
You can ask me for more detail about these safeguards at any time.
How long I keep it
If you don’t reply, I delete your name and email 12 months after my last email to you. If you ask me to stop, I keep only what’s needed to make sure I never contact you again.
In practice, that means I keep only your email address on a suppression list, which is checked before every email I send, so that you are never contacted again.
Your rights
You have the right to:
- ask for a copy of what I hold about you (access);
- have anything wrong corrected (rectification);
- have it deleted (erasure);
- ask me to limit what I do with it (restriction);
- object to my use of it based on legitimate interests.
You can always object to direct marketing, and I will stop: reply “stop” to any email, or use the unsubscribe link at the bottom of it. To use any other right, email contact@goodplotworks.com.
Complaints
If you are unhappy with how I have handled your data, please tell me first at contact@goodplotworks.com. I will acknowledge your complaint within 30 days. You can also complain to the Information Commissioner’s Office at ico.org.uk.
This website
This site sets no cookies, runs no analytics and loads nothing from other websites.