Last updated: 26 October 2026
This policy explains what personal data karlpilot.com collects, why I collect it, who it is shared with, and what your rights are under the EU General Data Protection Regulation (GDPR).
Who I am
KarlPilot is run by Karl Kane, an individual based in Ireland, who is the data controller for this website. You can contact me about anything in this policy at hello@karlpilot.com. I am not required to appoint a Data Protection Officer.
What I collect, why, and on what legal basis
| What | Data | Why | Legal basis |
|---|---|---|---|
| Newsletter and free downloads | Email address, sign-up and confirmation dates | To send you new posts and the free resources you asked for | Your consent (Article 6(1)(a)), which you can withdraw at any time |
| Contact form and emails | Name, email address, your message | To read and reply to you | My legitimate interest in answering enquiries (Article 6(1)(f)) |
| Comments | Name, email address, comment, IP address | To show and moderate comments and filter spam | My legitimate interest in running a comment section free of spam (Article 6(1)(f)) |
| Site statistics | Pages viewed, referring site, device and browser type, approximate location | To see which content is useful, in aggregate | My legitimate interest in improving the site (Article 6(1)(f)) |
You don’t have to give me any personal data to read this site. If you don’t give an email address, I can’t send you the newsletter or reply to you. I don’t use your data for automated decision-making or profiling, I never sell it, and I never add anyone to the newsletter without their consent.
Who processes your data for me
- WordPress.com (Automattic) hosts this site, stores newsletter subscribers, form messages and comments, sends newsletter emails, filters comment spam (Akismet) and provides site statistics. See the Automattic privacy policy.
- Namecheap provides the email service for hello@karlpilot.com. See the Namecheap privacy policy.
- Gravatar (Automattic) may show a profile picture next to comments, based on a coded version of your email address.
If I move the newsletter to another service in future, I’ll update this page and tell subscribers before I do.
Transfers outside the EU
Automattic and Namecheap are based in the United States, so your data may be processed there. These transfers are protected by the EU-US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses, as set out in each provider’s privacy policy.
Cookies
WordPress.com uses cookies to run the site, remember your choices, and collect statistics. Where consent is needed, it asks for it through its cookie banner. You can also block or delete cookies in your browser settings. See Automattic’s cookie policy for details.
How long I keep it
- Newsletter details: until you unsubscribe. Unconfirmed sign-ups are removed automatically.
- Contact messages and emails: as long as needed to deal with your enquiry, and no longer than two years.
- Comments: for as long as the comment is shown, or until you ask me to remove it.
Your rights
Under the GDPR you have the right to:
- access the personal data I hold about you
- have it corrected if it’s wrong
- have it deleted
- restrict or object to how I use it, including where I rely on legitimate interests
- receive it in a portable format
- withdraw your consent at any time, without affecting anything done before you withdrew it. The easiest way is the unsubscribe link at the bottom of every email.
To use any of these rights, email hello@karlpilot.com. I’ll reply within one month. If you’re unhappy with how your data is handled, you can complain to the Data Protection Commission, Ireland’s data protection authority, or to the authority in the EU country where you live.
Changes to this policy
If I change this policy, I’ll update the date at the top. If a change affects how I use subscribers’ data, I’ll tell subscribers by email first.
