Privacy Policy

Last updated: 2 August 2026

This site is run by Jack Marriott ("I", "me"). This page explains what personal data the site collects, why, and what you can do about it. It is written to meet UK GDPR and the Privacy and Electronic Communications Regulations.

Who is responsible for your data

I am the data controller for this website. You can reach me at jack@jackmarriottmedia.com.

What is collected

If you sign up to the newsletter

The signup form asks for your email address and nothing else. It is submitted to and stored by Kit (formerly ConvertKit), the service I use to send the newsletter. Kit also records standard engagement data such as whether an email was opened and which links were clicked.

Lawful basis: consent. You gave it by submitting the form, and you can withdraw it at any time using the unsubscribe link at the bottom of every email, which removes you immediately and permanently.

If you just read the site

No account, no login, and no contact details are collected. The following happens automatically:

Lawful basis: legitimate interests, in running and improving the site.

Embedded content

Some pages embed YouTube videos and Google Maps. These load content directly from Google, which can set its own cookies and track you as if you had visited the page on YouTube or Maps itself. That is outside my control, and Google's own privacy policy governs it.

Affiliate links and cookies

Some outbound links on this site are affiliate links. If you click one and go on to buy something, the merchant may pay me a commission at no extra cost to you. Clicking one typically sets a cookie on the merchant's own site so the sale can be credited back here. That cookie is set by them, not by me, and lasts anywhere from one session to a year depending on the partner.

Affiliate links are disclosed at the top of any guide that contains them, and marked up as paid links in the page source.

What is never done

How long data is kept

Newsletter subscribers stay in Kit until they unsubscribe or ask to be deleted. Server logs and analytics are kept on the providers' own retention schedules, generally measured in months rather than years.

Where data goes

Kit, Vercel and Travelpayouts all process data outside the UK, including in the United States. Those transfers rely on the safeguards in each provider's terms, such as standard contractual clauses and the UK extension to the EU–US Data Privacy Framework.

Your rights

Under UK GDPR you have the right to:

Email jack@jackmarriottmedia.com to exercise any of these. There is no charge and I will respond within one month.

If you are not happy with how I have handled it, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes materially, the date at the top will change with it. Please check back occasionally.