Privacy Policy
Controller: Placeholder content (“we”), Placeholder content Text Text. Contact: placeholder@example.com.
What we collect
When you subscribe to Placeholder Brand, we store your email address, optional first name, consent timestamp and source, confirmation / unsubscribe state, and list membership. Subscribers do not have passwords.
Why we process it
We process this data to send the newsletter you requested (legitimate interest / consent under GDPR, as applicable), to prove double opt-in, and to honor unsubscribes and suppressions.
Double opt-in
We email a confirmation link that expires in 48 hours. You are only added to the send audience after you confirm. Unconfirmed records are purged on a schedule.
Processors & transfers
Content and subscriber records are stored in our EU Postgres database (Payload CMS). Email delivery uses Resend. Resend may store related data in the United States; transfers rely on appropriate safeguards (e.g. SCCs / Data Privacy Framework) as described in Resend’s documentation. Replace this paragraph with your counsel-approved wording before go-live.
Retention
Unconfirmed subscriptions: purged after the confirmation window (48 hours) plus job cadence. Active subscribers: retained while subscribed. Unsubscribed addresses may be kept as suppressed records so we do not email them again.
Your rights
You may request access, correction, export, or erasure by contacting placeholder@example.com. You can unsubscribe anytime via the link in every marketing email.