Privacy Policy

Last Updated: September 12, 2025

1. Introduction

Welcome to The Novice. This newsletter is owned and operated by Jason S. Canon ("I," "me," "my"). I am committed to protecting the privacy and security of your personal information.

This Privacy Policy describes how I collect, use, process, and disclose your information, including personal data, in conjunction with your access to and subscription to The Novice. This policy applies to all readers and subscribers ("you," "your," "user").

The Data Controller (the entity responsible for your data) is: Jason S. Canon

2. What Information We Collect

I collect different types of information to provide and improve the newsletter service to you.

a) Information You Provide Directly:

• Subscriber Information: When you subscribe to the newsletter, you provide your email address. You may optionally provide your name.
• Payment Information: If you sign up for a paid subscription, you provide payment information, such as your credit card details and billing address. This information is collected and processed directly by our payment processor, Stripe, and I do not have access to your full credit card number.
• Communications: If you contact me directly via email, I will have a record of our correspondence.

b) Information We Collect Automatically:

• Usage Data: When you read the newsletter or visit the website, I may automatically collect information about your device and your interaction with my content. This includes your IP address, browser type, operating system, referral URLs, pages viewed, and the dates/times of your visits.
• Email Engagement Data: My email delivery service, Mailgun, tracks how you interact with the emails I send. This includes information about email opens and link clicks. This helps me understand what content is most interesting to my readers.

3. How and Why We Use Your Information (Lawful Basis)

I only use your personal data when the law allows me to. Most commonly, I will use your data on the following legal bases:

• Consent: You have given clear, affirmative consent for me to process your personal data for a specific purpose (e.g., subscribing to the newsletter).
• Contract: The processing is necessary for a contract I have with you (e.g., to provide paid content you have subscribed to).
• Legitimate Interests: The processing is necessary for my legitimate interests, such as for security or to analyze and improve my service, provided these interests are not overridden by your rights.

The following table explains my purposes for processing your data and the lawful basis I rely on for each activity:

Sending newsletters (EEA/UK): I rely on your consent to send you marketing emails, as required by PECR/ePrivacy. You can withdraw consent at any time via the unsubscribe link. Sending newsletters (elsewhere): I rely on your consent and, where applicable, contract necessity to deliver the newsletter you requested.

4. Data Sharing and Third-Party Processors

I do not sell your personal data. I only share it with trusted third-party service providers (sub-processors) who help me operate my newsletter. These providers are contractually obligated to protect your data and are prohibited from using it for any other purpose.

Independent controllers (they determine some purposes of processing): Stripe (payments, fraud/AML, platform security); Google (when receiving GA4 data).

Processors (acting on my instructions): Ghost (Pro) (hosting and subscriber management); Mailgun (email delivery and engagement processing). 

5. Cookies and Tracking Technologies

The newsletter website, powered by Ghost, uses cookies. Cookies are small data files stored on your browser.

• Essential Cookies: Ghost uses essential cookies to manage your login session if you are a registered member and to remember your preferences (like light/dark mode). These are necessary for the website to function properly.
• Non-Essential Cookies: If I use analytics or other services, they may set their own cookies. Where required by law, I will ask for your consent before deploying non-essential cookies.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some parts of the website may not function.

6. International Data Transfers

My newsletter is a global service. Your data may be transferred to and processed in countries other than your own. These countries may have data protection laws that are different from the laws of your country.

When I transfer your data internationally, I rely on legally-provided mechanisms to lawfully transfer data across borders, such as Standard Contractual Clauses (SCCs) or Adequacy Decisions provided by my third-party processors like Ghost, Mailgun, and Stripe.

Where data is transferred outside your country, I rely on Standard Contractual Clauses and, where applicable, vendor participation in the EU–U.S. Data Privacy Framework (e.g., Stripe; Google). For details, see each vendor’s privacy page.

7. Data Retention

Subscriber data: kept while you subscribe. If you unsubscribe, I remove you from active lists and retain only minimal suppression information to honor your opt-out.

Technical logs: retained for security/troubleshooting for up to 90 days.

8. Your Data Protection Rights

Depending on your geographical location, you have certain rights regarding your personal data.

a) For residents of the EEA and the UK (under GDPR / UK GDPR):

• Right of Access: You can request a copy of the data I hold about you.
• Right to Rectification: You can ask me to correct any inaccurate data.
• Right to Erasure (Right to be Forgotten): You can request that I delete your data.
• Right to Restrict Processing: You can ask me to limit the use of your data.
• Right to Data Portability: You can request your data in a machine-readable format.
• Right to Object: You can object to me processing your data for legitimate interests.
• Right to Withdraw Consent: You can withdraw your consent at any time by clicking the "unsubscribe" link in any newsletter email or by contacting me directly.

b) For residents of Canada (under PIPEDA):

You have the right to access the personal information I hold about you and to challenge the accuracy and completeness of that information.

c) For residents of California (under CCPA / CPRA):

You have the right to know what personal information is being collected about you and the right to request the deletion of your personal information.

How to Exercise Your Rights:

To exercise any of these rights, please contact me at privacy@uncanonical.net. I will respond to your request in accordance with applicable data protection laws.

Right to complain: You can lodge a complaint with your local data protection authority. For the UK, see the Information Commissioner’s Office (ICO).

9. Data Security

I take the security of your data seriously. I use reputable third-party services and implement reasonable administrative and technical measures to protect your personal information from unauthorized access, use, or disclosure. However, no internet transmission is ever 100% secure.

10. Children's Privacy

This newsletter is not intended for individuals under the age of 16. I do not knowingly collect personal data from children. If I become aware that I have collected data from a child without parental consent, I will take steps to delete that information.

11. Changes to This Privacy Policy

I may update this Privacy Policy from time to time. I will notify you of any significant changes by posting the new policy on this page and, if the changes are substantial, by sending an email to my subscribers.

12. Contact Me

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact me.

Privacy Officer: Jason S. Canon

Email: privacy@uncanonical.net

Address: Jason S. Canon
1629 West Lifecare Circle
Ozark MO 65721