Privacy Policy

Who I am

This website, ruthelliottauthor.com, is run by me, Ruth Elliott, an author of Regency romance based in the United Kingdom. I am the "data controller" for any personal information collected through the site, which means I decide how and why it is used.

This policy explains what I collect, why, who sees it, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018). It applies only to this website and my mailing list. It does not cover Amazon, BookBub, Goodreads or other sites I link to, which have their own policies.

If you have any questions, email me at ruthelliottauthor@gmail.com

What I collect, why, and my lawful basis

I collect only what I need. I do not sell your information, and I do not use it for automated decision-making or profiling.

  • Mailing list: your email address (and name, if you give it). I use it to send my newsletter, book news and any free story you asked for. I do this with your consent.
  • Free story downloads: your email address, passed to BookFunnel so it can deliver the file. This is based on your consent.
  • Emails to me: your name, email address and message, so I can reply. This is my legitimate interest in answering enquiries.
  • Visiting the website: basic technical data such as your IP address and browser type, to keep the site working and secure.

I do not collect sensitive information such as health or religion, so please don't send me any.

Giving me your information is always optional. If you choose not to, you simply won't receive the mailing list or free story.

Who I share your information with

I share your information only with the services that help me run the website and mailing list. They act on my instructions and have their own data protection obligations.

  • Email service provider: which stores subscriber details and sends my emails.
  • BookFunnel: delivers free stories and bonus content. BookFunnel's own privacy policy applies to the information you give it when you download.
  • Website host and domain provider: which stores the site and its technical logs.
  • Authorities: only if I am legally required to disclose information.

I never sell, rent or trade your details to anyone.

International transfers. Some of these providers are based outside the UK, including in the United States. Where that happens, your information is transferred under a UK-approved safeguard such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum to standard contractual clauses. 

How long I keep it, and how I protect it

I keep mailing list details for as long as you stay subscribed. If you unsubscribe, I remove your details from the active list, keeping only a minimal record of your email address on a suppression list so that I do not email you again by mistake. Enquiry emails are kept for up to two years, then deleted. Website logs are kept for as long as the host's standard retention period allows.

I keep your information secure by using reputable providers, strong passwords, two-factor authentication where offered, and limiting access to myself. No online system is completely secure, so I cannot guarantee absolute security, but I take reasonable steps to protect your data and will tell you and the ICO if a breach is likely to put you at risk.

Your rights

Under UK data protection law you have the right to:

  • be told what information I hold about you and receive a copy (access);
  • have inaccurate information corrected;
  • have your information erased;
  • restrict or object to how I use it;
  • receive your information in a portable format;
  • withdraw your consent at any time, without affecting what I did before you withdrew.

Unsubscribing. Every email I send has an unsubscribe link at the bottom. You can also email me and I will remove you promptly.

To use any other right, email me at ruthelliottauthor@gmail.com. I will normally reply within one month. There is no charge, and I may need to confirm who you are first.

Complaints. I would like the chance to put things right, but you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Cookies, other sites, children and changes

Cookies. This website uses only essential cookies needed for it to work, and I do not use advertising or tracking cookies. 

Links to other sites. My site links to retailers and platforms such as Amazon, BookBub and Goodreads. I am not responsible for their privacy practices, so please read their policies.

Children. My books and website are for adults, and I do not knowingly collect information from anyone under 13. If you believe a child has given me their details, email me and I will delete them.

Changes. I may update this policy from time to time. The date at the top shows when it was last changed, and I will tell mailing list subscribers about any significant change.

Contact. Ruth Elliott, by email only; ruthelliottauthor@gmail.com