Legal
Privacy Policy
Effective date: May 14, 2026
Due Dilly ("we," "our," or "us") operates the website at https://explore.duedilly.com (the "Platform"). This Privacy Policy explains what information we collect, how we use it, and what rights you have with respect to that information. We've written this in plain language because making the invisible legible is kind of our thing.
By using the Platform, you agree to the practices described in this policy. If you do not agree, please do not use the Platform.
1. Information We Collect
Information you give us directly
- Email address — when you subscribe to our newsletter, create a membership account, or contact us directly.
- Name — if you choose to provide it when subscribing or creating an account.
- Messages and correspondence — if you contact us by email or through any contact form.
Information collected automatically
- Usage data — pages visited, time spent, links clicked, search queries entered on the Platform.
- Device and browser information — browser type, operating system, screen resolution, referring URL.
- IP address — collected by our hosting provider (Vercel) as part of standard server logging. We do not store or process IP addresses independently.
Information we do not collect
- We do not collect payment information directly. Any future payment processing will be handled by a PCI-compliant third-party provider.
- We do not collect government ID, social security numbers, or financial account information.
- We do not knowingly collect information from children under 13.
2. How We Use Your Information
We use the information we collect to:
- Deliver the newsletter and any membership content you have subscribed to
- Respond to your questions and requests
- Improve the Platform — understanding which content and features are most useful
- Send you updates about Due Dilly, new episodes, reports, or features (you can opt out at any time)
- Enforce our Terms of Service and comply with legal obligations
We do not sell your personal information. We do not use your information to build advertising profiles or sell access to third-party marketers.
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area, we process your personal data under the following legal bases:
- Consent — when you subscribe to our newsletter or create an account, you give us consent to contact you. You may withdraw consent at any time.
- Legitimate interests — we have a legitimate interest in understanding how our Platform is used and in improving it.
- Contract — where processing is necessary to provide a service you have requested.
- Legal obligation — where we are required to process data to comply with applicable law.
4. Cookies and Tracking
The Platform uses cookies and similar technologies to maintain your preferences (such as light or dark mode) and to understand how the Platform is being used.
Types of cookies we use:
- Essential cookies — required for the Platform to function.
- Preference cookies — store your settings, such as display theme.
- Analytics cookies — help us understand aggregate usage patterns. We do not use cookies to track you across other websites.
You can disable cookies in your browser settings. Doing so may affect some Platform functionality.
5. Third-Party Services
We use the following third-party services that may process your data:
| Service | Purpose | Data processed |
|---|---|---|
| Vercel | Hosting and infrastructure | IP address, request logs |
| Ghost | Newsletter and membership management | Email address, name, subscription status |
| Google Fonts | Typography rendering | IP address (standard font delivery request) |
| Logo.dev | Company logo images | Domain names only (no personal data) |
| YouTube | Embedded video playback | Subject to Google's Privacy Policy when played |
| GitHub | Content storage and deployment | No user personal data stored in repository |
Each of these providers has their own privacy policy governing how they handle data. We are not responsible for the privacy practices of third-party services.
6. Data Retention
We retain your personal information for as long as necessary to provide the services you have requested or as required by law:
- Newsletter subscriber data is retained until you unsubscribe or request deletion.
- Membership account data is retained until you close your account.
- Server logs are retained for up to 90 days.
- Correspondence is retained for up to 3 years unless a longer period is required by law.
7. Your Rights
Depending on where you are located, you may have the following rights:
- Access — request a copy of the personal data we hold about you.
- Correction — request that we correct inaccurate or incomplete data.
- Deletion — request that we delete your personal data ("right to be forgotten").
- Restriction — request that we restrict the processing of your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to our processing of your data based on legitimate interests.
- Withdraw consent — unsubscribe from communications at any time using the link in any email we send, or by contacting us directly.
California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information.
To exercise any of these rights, contact us at jonathan@jonathandjackson.com. We will respond within 30 days.
8. Data Security
We take reasonable technical and organizational measures to protect your personal information, including HTTPS encryption for all data in transit, access controls, and use of established third-party services for data storage. No method of transmission over the internet is 100% secure.
9. Children's Privacy
The Platform is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at jonathan@jonathandjackson.com and we will delete it promptly.
10. International Data Transfers
Due Dilly is based in the United States. If you are accessing the Platform from outside the United States, your information may be transferred to and processed in the United States. Where required, we rely on Standard Contractual Clauses for transfers from the EEA.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. If we make material changes, we will notify subscribers by email.
12. Contact
Due Dilly Attention: Privacy Email: jonathan@jonathandjackson.com Website: https://explore.duedilly.com