Privacy policy

This policy explains how Psyche Vibes Ltd ("we", "us") uses personal data when you visit psycheinsights.com or subscribe to the Psyche Insights newsletter. We have written it in plain English and we keep it short, because we collect very little.

Who we are

The data controller is Psyche Vibes Ltd, a company registered in England and Wales (company number 17229667). Our registered office is 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

For any privacy question or request, email [email protected] or write to the address above. We have not appointed a data protection officer because we are not required to.

What we collect and why

• Newsletter sign-up. When you subscribe we collect your email address (and your name, if you choose to give it). We use it only to send you the Psyche Insights newsletter and related service emails, such as a welcome email or a notice about changes to the newsletter. Lawful basis: your consent (UK GDPR Article 6(1)(a); for email marketing, also regulation 22 of the Privacy and Electronic Communications Regulations). You can withdraw consent at any time by unsubscribing.
• Newsletter engagement. Our email provider records technical information about how the newsletter is delivered and read. This includes whether an email was delivered, opened or clicked, plus your IP address, approximate location and device or email-client type. We use this to check that emails arrive, to see which stories are useful, and to remove inactive addresses. Lawful basis: your consent, given when you subscribe. Many email apps let you block remote images if you prefer not to be tracked this way.
• Where you signed up from. Our "Subscribe" links include campaign tags (UTM parameters such as utm_source=psycheinsights.com and utm_campaign=issue-1-gate). These tell us which page or issue led you to subscribe. They do not identify you. They are stored with your subscription record so we can see which parts of the site work. Lawful basis: legitimate interests in understanding, in aggregate, how people find the newsletter.
• Website visits. psycheinsights.com is hosted on Cloudflare. As with any website, Cloudflare processes your IP address, browser user-agent, the page requested and the time of the request to deliver the page and protect the site from abuse and attacks. We do not use this data to identify you or to build profiles. Lawful basis: legitimate interests in running a secure, working website.
• Page-view statistics. We use Cloudflare Web Analytics to count which pages are read. See "Cookies and analytics" below. Lawful basis: legitimate interests in understanding which pages are read, so we can improve the site.
• Emails you send us. If you reply to the newsletter or email us, we keep the message and your contact details so we can respond and keep a record of corrections. Lawful basis: legitimate interests in answering you. Please don't send us details about your health. We don't need them to answer you.

We do not sell your data, use it for targeted advertising, or ask for any health information. The newsletter is not directed at anyone under 18.

Cookies and analytics

psycheinsights.com sets no cookies of its own and runs no advertising or cross-site tracking scripts. It stores nothing on your device except two small settings that remember your choices about the stats notice (see below).

Cloudflare Web Analytics

We use Cloudflare Web Analytics, a privacy-first analytics service, to understand which pages people read. Each page loads a small Cloudflare script (from static.cloudflareinsights.com) that reports that a page was viewed, along with page-load timing.

• What it does not do. The Cloudflare script sets no cookies, uses no local storage or other client-side state, and does not use fingerprinting. Cloudflare does not use your IP address or browser details to track you over time, and does not track individuals across websites.
• What is collected. Page-view data such as the page visited, the referring site, browser, operating system and device type, and your country. These details come from the request itself. Cloudflare does not record query strings. We only see aggregate reports, never data about an individual visitor.
• Who processes it. Cloudflare, Inc. processes this data as our processor, under the data processing addendum described below. See Cloudflare's privacy policy.
• Lawful basis: legitimate interests in understanding which pages are read, so we can improve the site.
• Opting out. Select Opt out on the notice at the bottom of any page, or use the switch in this section. Your choice is saved as one setting in your browser's local storage (pi_stats_optout). It holds no identifier, never leaves your device, and is strictly necessary to remember your choice. While it is set, our pages do not load the Cloudflare script at all. To undo it, use the switch here or clear your browser's site data. You can also block the script with a content blocker or by turning off JavaScript; the site works fully without it. Or object by emailing [email protected].
• Privacy signals. If your browser sends a Global Privacy Control or Do Not Track signal, our pages do not load the Cloudflare script, and you will not see the notice.

We show a short notice about these stats at the bottom of each page. Selecting OK hides it for the rest of your visit in that browser tab. To remember that, we save one setting (pi_stats_notice_ok) in your browser's session storage. It holds no identifier, never leaves your device, and is deleted automatically when you close the tab.

Apart from these two settings, which are saved only when you select OK or Opt out, nothing is stored on your device, so we do not show a cookie banner.

If we ever add advertising, embedded third-party content or any other non-essential cookie or tracking technology, we will update this section first and ask for your consent with a cookie banner before anything non-essential is set. You will be able to refuse as easily as you accept, and change your mind at any time.

Two things worth knowing:

• Fonts. Our typefaces (Inter and Newsreader) are hosted on psycheinsights.com itself, so loading a page does not connect your browser to Google Fonts or any other third-party font service.
• Security. Cloudflare may set a strictly necessary security cookie (such as __cf_bm or cf_clearance) if it needs to check that a visitor is not a bot. These cookies are exempt from consent under PECR because they are essential to keeping the site secure.
• Email-address protection. Cloudflare's email-address obfuscation hides email addresses on our pages from spam bots. A small Cloudflare script in your browser decodes the address so you can read and click it. It sets no cookies.

The sign-up page is hosted by beehiiv on a beehiiv domain. Any cookies on that page are controlled by beehiiv and described in beehiiv's privacy policy.

Who we share it with

We use two service providers. Each acts as our processor: it may use your data only on our instructions and under a written data processing agreement.

• beehiiv Inc. (New York, USA) stores the subscriber list and sends the newsletter. See its data protection addendum and privacy policy.
• Cloudflare, Inc. (San Francisco, USA) provides website hosting, content delivery, security and privacy-first page-view statistics (Web Analytics). See its data processing addendum and privacy policy.

We may also disclose data if the law requires it, or to protect our legal rights.

International transfers

beehiiv and Cloudflare are based in the United States, so your data may be processed outside the UK.

• beehiiv. Transfers are covered by the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum issued by the ICO. Both are built into beehiiv's data protection addendum.
• Cloudflare. Cloudflare is certified under the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge"). Its data processing addendum also includes the Standard Contractual Clauses with the UK Addendum as a fallback.

You can ask us for more information about these safeguards.

How long we keep it

• Subscriber data: for as long as you stay subscribed. If you unsubscribe, we stop emailing you straight away. We keep only a minimal suppression record (your email address and the date you unsubscribed) so that we never email you again by mistake. We delete the rest of your subscriber record within 12 months.
• Engagement data: kept with your subscriber record and deleted with it.
• Emails you send us: up to 2 years after our last exchange, unless a longer period is needed for a legal claim.
• Website request data: we do not keep our own website logs. Cloudflare keeps limited logs for security and operational purposes for short periods, in line with its own policies.

Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you
• correct it if it is wrong
• erase it
• restrict or object to how we use it (including any use based on legitimate interests)
• receive your data in a portable format
• withdraw consent at any time, without affecting anything we did before you withdrew

To use any of these rights, email [email protected]. We will reply within one month. There is no charge.

How to unsubscribe

Every email we send has an unsubscribe link at the bottom. One click removes you. You can also reply "unsubscribe" or email [email protected], and we will remove you by hand.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the UK regulator, the Information Commissioner's Office (ICO):

• online at ico.org.uk/make-a-complaint
• by phone on 0303 123 1113
• by post at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

If you live in the EU, you can also complain to the data protection authority in your country.

Changes to this policy

If we change how we use your data, we will update this page and change the date below. If a change is significant, we will tell subscribers by email before it takes effect.

Last updated: 23 October 2026.