Last updated: 12 September 2026
Leave Blank respects your privacy. This policy explains what personal data we collect through leaveblank.space, why we use it, who may receive it, how long we keep it, and the choices and rights available to you.
Who controls your data
Leave Blank is the controller of personal data collected through this website. Privacy questions and requests can be sent to [email protected]. We will add our full legal operator details before opening the shop for purchases.
Information we collect
- Account information: your email address, username, encrypted password, profile details and account preferences. If you choose Google sign-in, Google provides your name, profile picture and email address; Leave Blank does not receive your Google password.
- Saved content: the journal articles you choose to save to your account.
- Email preferences: whether you opted in to weekly Leave Blank emails, when that choice was made or changed, and the source of the choice.
- Messages: your name, email address and anything you include when contacting us.
- Comments or submissions: information you provide if these features are available, together with information used to prevent spam and abuse.
- Technical information: IP address, browser and device information, timestamps, requested pages, error and security logs, and cookie or similar identifiers.
- Analytics information: information about visits, acquisition source, approximate location and interactions when analytics is permitted. We do not intend to use analytics to identify you directly.
- Order information: billing, delivery, transaction and fulfilment information will be collected when online purchasing becomes available. Payment-card information will be handled by the relevant payment provider rather than stored by Leave Blank.
Why we use your information
We process personal data only when there is a lawful reason to do so. Depending on the activity, we use it to provide and secure your account, remember saved articles, answer enquiries, operate and improve the website, understand readership, prevent fraud and abuse, comply with legal obligations, and later process and fulfil purchases.
- Contract: where processing is necessary to provide an account, requested service or future purchase.
- Consent: for optional analytics cookies and optional weekly email. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
- Legitimate interests: to secure, maintain and improve the website, prevent misuse, and understand performance in a proportionate way.
- Legal obligation: where records must be retained or disclosed under applicable law.
Google sign-in
If you choose “Continue with Google”, Google authenticates you and shares your name, profile picture and email address so we can create or access your Leave Blank account. This sign-in is optional; you can use the email registration method instead. Google processes the authentication under its own privacy terms, and you can review or revoke the connection from your Google Account.
Email updates
Weekly emails are optional and are not required to create or use an account. The registration checkbox is left unticked by default. If you opt in, we record your choice and may send tea notes, brewing ideas, journal updates and product-drop news when email delivery begins. You can turn this off at any time from My Account → Email Preferences, and future campaign emails will include an unsubscribe method. We may retain a minimal record of the choice and its withdrawal where necessary to demonstrate compliance.
Cookies and similar technologies
Strictly necessary cookies may be used for security, login sessions, account functions, saved preferences and the future shopping basket. These are required for features you request. Optional analytics technologies may be used to understand how people find and use the site. Where consent is legally required, optional technologies should be used only after you have made a choice through the site’s consent controls. You may also restrict cookies through your browser, although some account or commerce features may then stop working correctly.
Analytics
We use Google Site Kit to connect the website with Google Search Console and may use Google Analytics to measure visits and site performance. Search Console reports how pages appear in Google Search and does not require an analytics cookie on your device. Google Analytics may process online identifiers, device information, approximate location, acquisition source and interaction data. Analytics use will be subject to the consent choices presented on the website where required. Google acts as a service provider under its own privacy and data-protection terms.
Advertising measurement
We use Google Tag Manager to manage selected website tags. If you choose to allow advertising cookies, the Meta Pixel may load to help us understand visits resulting from Meta advertising and measure campaign performance. The Pixel is blocked until advertising consent is granted through our consent banner. You can reject optional cookies or change your choice at any time using the consent-preferences control. Meta may process device, browser, page and interaction information under its own privacy terms.
Who receives information
We share personal data only as necessary with service providers that help operate the website, including our hosting and content-delivery provider, WordPress and WooCommerce service components, email and form-delivery services, security and spam-prevention services, and Google services when enabled. When sales open, relevant information may also be shared with payment, shipping and fulfilment providers. We may disclose information when legally required, to protect rights and safety, or as part of a legitimate business reorganisation. We do not sell personal data.
International transfers
Leave Blank serves an international audience and uses service providers that may process data in countries other than your own. Where required, we rely on appropriate safeguards for international transfers, such as contractual protections, adequacy decisions or another lawful transfer mechanism.
How long we keep information
- Account and saved-article information is generally kept while the account remains active and is removed or anonymised after a valid deletion request, subject to limited backup and legal-retention periods.
- Contact messages are ordinarily kept for up to 12 months after the enquiry is resolved unless a longer period is necessary for an ongoing matter.
- Security and server logs are kept for a limited period appropriate to troubleshooting, fraud prevention and platform security.
- Analytics information is retained according to the settings of the connected analytics property and the provider’s applicable retention rules.
- Email preference information is kept while your account remains active. After withdrawal, we may retain a minimal suppression or consent record where necessary to honour your choice and demonstrate compliance.
- Future transaction records may be retained for the period required by tax, accounting, consumer-protection and other applicable laws.
Your choices and rights
Depending on where you live, you may have rights to be informed, access your personal data, correct it, request deletion, restrict or object to processing, receive portable data, and withdraw consent. You may object to direct marketing at any time. You may also have the right to complain to your local data-protection authority. To make a request, email [email protected]. We may need to verify your identity. We aim to respond without undue delay and, where the GDPR applies, ordinarily within one month.
Account controls
You can review and update certain account information from My Account, including turning weekly emails on or off under Email Preferences. You may contact us to request an export or deletion of personal data. Some information may be retained where necessary to comply with law, resolve disputes, prevent fraud or protect legitimate rights.
Children
This website is intended for a general audience and is not designed to collect personal data from children under 16. If you believe a child has provided personal data without appropriate permission, please contact us so we can review and remove it.
Security
We use reasonable administrative and technical measures to protect personal data. No online service can guarantee absolute security, and you are responsible for keeping your account credentials confidential.
Third-party links and embedded content
The website may link to or embed content from third parties. Their handling of personal data is governed by their own privacy notices, not this policy.
Changes to this policy
We may update this policy when the site, our services or legal requirements change. The current version and its last-updated date will remain available on this page.
Contact
For privacy questions or requests, email [email protected].