PRIVACY NOTICE

Last updated: 23 April 2026

1. WHO WE ARE

This newsletter (Dispatches, published at dispatches.kilowatts.io) is operated by Kilowatts.io Limited (Company No. 10378895), a company registered in England and Wales. In this notice, “we”, “us” and “our” mean Kilowatts.io Limited.

For privacy enquiries, contact ben@kilowatts.io.

2. PERSONAL DATA WE COLLECT

We collect the following data when you interact with Dispatches:

- Email address — required to deliver the newsletter.

- Name (if provided) — optional, used only for personalisation.

- Payment details — if you take out a paid or group subscription, these are handled by Stripe on behalf of Substack; we never see or store your card details.

- Engagement data — opens, clicks, reading time and subscription status, generated by the Substack platform and made available to us as the publisher.

- Comments and replies — if you post one, the content and your display name are visible to other readers.

We do not knowingly collect data from anyone under 16.

3. HOW WE USE YOUR DATA

Purpose: Delivering the newsletter you subscribed to.

Lawful basis: Performance of contract / your consent.

Purpose: Processing paid subscriptions and invoicing.

Lawful basis: Performance of contract.

Purpose: Understanding what readers find useful (aggregate engagement).

Lawful basis: Legitimate interests.

Purpose: Responding to emails from you.

Lawful basis: Legitimate interests.

We do not sell your data. We do not share it for third-party advertising.

4. WHO PROCESSES DATA FOR US

- Substack, Inc. — newsletter platform and primary data processor. See https://substack.com/privacy.

- Stripe — payment processing (sub-processor via Substack).

- Optional analytics providers — if we enable site analytics on our custom domain, we will disclose them here and seek consent where required.

Some of these providers are based in the United States. International transfers rely on the UK addendum to the EU Standard Contractual Clauses or equivalent safeguards.

5. RETENTION

- Subscriber email addresses: held while you remain subscribed, and for a short period after you unsubscribe to honour the request.

- Payment and invoicing records: 6 years from the end of the relevant tax year, as required by UK tax law.

- Comments and replies: held indefinitely unless you request deletion.

6. YOUR RIGHTS UNDER UK GDPR

You have the right to:

- Access the personal data we hold about you.

- Correct inaccurate data.

- Request deletion.

- Object to processing based on legitimate interests.

- Port your data to another service.

- Withdraw consent at any time, without affecting past lawful processing.

To exercise any of these, email ben@kilowatts.io. We aim to respond within 30 days.

You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

7. COOKIES

Our custom domain runs on Substack and uses cookies set by Substack for essential functions (authentication and subscription state). See Substack’s cookie notice at https://substack.com/privacy. If we enable optional analytics on this domain, we will display a consent banner before any non-essential cookies are set.

8. CHANGES TO THIS NOTICE

We will update this page if our practices change. The “Last updated” date at the top will reflect any material changes.

---

(c) 2026 Kilowatts.io Limited. All rights reserved.