Privacy policy
Privacy policy
Last updated: 20 October 2026
This policy explains how PostmarkClub ("we", "us") collects and uses personal data when you visit postmarkclub.com or join the PostmarkClub email list. We keep it short and plain.
1. Who we are
The data controller is Token Story Labs Ltd, company number 805919, trading as PostmarkClub, of Block D, Tyrellstown Plaza, Dublin 15, D15 K4PY, Ireland. Contact: hello@postmarkclub.com. We have not appointed a Data Protection Officer because the law doesn't require one for our activities.
2. Children
Our books are for children aged 3–8, but this website and our email list are for parents and guardians aged 18+ only. We do not knowingly collect personal data from children. Please don't submit a child's name, email address or other details. If you believe a child has given us personal data, email us and we will delete it promptly.
3. What we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Your email address and a record of the consent you gave (checkboxes ticked, date/time, confirmation click) | Sending you the free printables, bonus missions and news about new PostmarkClub books; proving consent | Your consent (Art. 6(1)(a)); ePrivacy Regulations 2011, Reg. 13 |
| Email delivery data (e.g. delivered, bounced) recorded by our email provider. We do not track opens or clicks | Keeping the list healthy | Legitimate interests (Art. 6(1)(f)). You can object at any time |
| Messages you send us | Replying to you | Legitimate interests (Art. 6(1)(f)) |
| Basic technical data (IP address, browser, pages requested) in server logs | Running and securing the website | Legitimate interests (Art. 6(1)(f)) |
We do not sell your data, and we do not use it for automated decision-making or profiling with legal effects. We do not use analytics or advertising trackers.
4. Who we share it with (processors)
- Resend (USA): our email provider. It stores the email list and sends our emails on our behalf, under a data processing agreement. Our emails are currently sent from the address hello@mail.postmarkclub.com.
- Vercel Inc. (USA): hosts this website and processes server logs.
- Cloudflare, Inc. (USA): provides DNS and network security for our domain.
Amazon sells our books. If you buy from Amazon, Amazon is the controller of your purchase data under its own privacy notice. We never receive your name or address from Amazon.
5. International transfers
Resend, Vercel and Cloudflare are based in the United States, so your data may be transferred outside the European Economic Area. Where a provider is certified under the EU–US Data Privacy Framework we rely on that adequacy decision; otherwise we rely on the European Commission's Standard Contractual Clauses with additional safeguards. You can ask us for a copy of the relevant safeguards.
6. How long we keep it
We keep your email address until you unsubscribe or ask us to delete it. After you unsubscribe we keep a minimal suppression record (your email and the unsubscribe date) so we don't email you again, plus the consent record for as long as needed to show we acted lawfully. We periodically remove addresses that bounce. Server logs are kept by our hosting provider for a short period under its own retention policy.
7. Your rights
You have the right to access, correct or delete your data; to restrict or object to processing; to data portability; and to withdraw consent at any time (use the unsubscribe link in any email, or email us). Withdrawing consent doesn't affect processing that happened before. We'll respond within one month.
You also have the right to complain to the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland, www.dataprotection.ie, or to the supervisory authority where you live. We'd appreciate the chance to sort it out first, so please get in touch.
8. Cookies
This website doesn't use advertising or analytics cookies. The sign-up form does not set cookies. If we ever add non-essential cookies, we will ask for your consent first.
9. Security
We use reputable providers, HTTPS throughout, two-factor authentication on our accounts and limited access to the list.
10. Changes
If we change this policy we'll update the date above, and we'll tell subscribers by email about any significant change.