Letterhead / Privacy
Privacy notice
Last updated: 6 August 2026
1. What we collect
- Your name and postal address — so an envelope can reach you.
- Your email address — for receipts, delivery notices and, if you asked for it, the weekly letter.
- Your genre choices and lead preferences — so we know which story to send. See section 2; this is the sensitive part.
- Payment records — amount, date and the last four digits of your card. Your full card number goes to our payment processor, never to us.
- Basic technical data — IP address and the time you signed up, which together are our record that you consented.
2. Your genre choices are sensitive, and we treat them that way
What you choose to read about says something about your sex life. Under the GDPR that makes it special category data (Article 9). Under California and several other US state laws it is sensitive personal information. We only hold it because you ticked a box saying we may, and you can untick it at any time.
We use your genre choices for exactly one thing: deciding which story goes in your envelope. We do not profile you, we do not build audiences from it, we do not sell it, we do not share it with advertisers, and we do not give it to the writers — they are commissioned to write a genre, not to write for a person.
If you withdraw consent we delete your choices and either revert you to Dealer's Choice or, if you prefer, end the subscription and refund the unposted balance.
3. Why we are allowed to hold it
- To perform our contract with you — name, address, email, payment records.
- Your explicit consent — genre choices and lead preferences, and the weekly letter.
- Our legitimate interests — keeping the site working, keeping fraud and bots out.
- Legal obligation — tax and accounting records.
4. Who else sees it
We do not sell your personal information. We share the minimum necessary with:
- CCBill, LLC (Tempe, Arizona, USA) — to take payment. Payment is made on a page hosted by them, so your card details go to CCBill and never pass through this site at all. They receive your name, email and billing address. They never receive your genre choices.
- [PRINT AND FULFILMENT PARTNERS] — to print and post your envelope. We use more than one, and which one handles your order depends on where you are. They receive your name and delivery address, and the code for which story to enclose. They do not receive your email or your payment details.
- [ANALYTICS PROVIDER, e.g. Plausible Analytics] — privacy-friendly, cookie-free website statistics. No cross-site tracking.
- Hostinger International Ltd. — who stores the site and the newsletter list.
- Advertising partners, only if you allow it — see section 5.
We will also disclose information if the law requires it, and to professional advisers under a duty of confidence.
5. Advertising pixels, and how to switch them off
We use advertising pixels from [Meta / TikTok — delete whichever does not apply] on our public pages, so we can measure our advertising. These are off until you turn them on. Nothing is sent to an advertiser unless you accept them in the banner.
They never run on the subscription or gift pages. Your genre choices are never transmitted to an advertiser under any circumstances.
Under California law, letting an advertising partner receive information for cross-context behavioural advertising counts as sharing. You can refuse it, or change your mind at any time, using Your privacy choices in the footer of every page.
6. How long we keep things
- Genre choices and lead preferences — deleted within 30 days of your last envelope.
- Name and delivery address — kept while you subscribe, then for 12 months in case of a delivery dispute.
- Newsletter email — until you unsubscribe. We keep a record that you unsubscribed so we do not add you back by mistake.
- Payment and tax records — seven years, as the law requires.
7. Your rights
Wherever you live, you may ask us to show you what we hold, correct it, delete it, send you a copy, or stop using it. If you are in the EU or the UK you also have the right to object to processing, to restrict it, and to complain to your national data protection authority.
Email info@letterhead.wtf. We reply within 30 days and we do not charge. We will never treat you worse for asking.
8. If you live in California
You have the right to know, delete and correct your personal information, to opt out of sale or sharing, and to limit our use of sensitive personal information. We do not sell personal information. We share information for advertising only with your consent, as described in section 5.
We use sensitive personal information — your genre choices — solely to provide the service you asked for, which is a permitted purpose that does not require a separate limitation right. You can still withdraw consent and have it deleted at any time. Use Your privacy choices or email us.
9. Where your information goes
We are a US company and we ship to Europe, the United States and Canada, so information about EU and UK customers is transferred to the United States. Those transfers rely on the European Commission's Standard Contractual Clauses, and the UK Addendum where relevant, with our processors.
Our EU representative under Article 27 GDPR is [EU REPRESENTATIVE NAME AND ADDRESS, or delete if not required].
10. Children
This service is for adults. We do not knowingly collect information from anyone under 18. If you believe we have, write to us and we will delete it immediately.
11. Changes
If we change this notice materially we will email subscribers before it takes effect. The date at the top tells you when it last changed.