Privacy Policy
This policy explains what FlexDesk collects when you read a page, subscribe to the brief or send a message, and what happens to that information afterwards. It applies to flexdesk.space and to email sent from that domain.
1. Who is responsible
The site is published by andy rodman, writing as FlexDesk. The contact address for anything in this policy is [email protected].
2. What this policy covers
Pages served from flexdesk.space, the monthly email brief, and direct correspondence. It does not cover third-party sites reached through a link, each of which has its own terms.
3. Information you give us
An email address when you ask for the brief, and whatever you write in a message. No account is created, so no password or profile is stored.
4. Information collected automatically
The web server records the requesting IP address, the browser user agent, the referring page and the timestamp for each request. These logs exist to keep the site running and to notice abuse. They are not used to build a profile of a reader.
5. Cookies
The public pages set no advertising cookies and no cross-site tracking cookies. Cloudflare, which fronts the site, may set a security cookie to distinguish a normal browser from automated traffic. A cookie notice is not shown because no consent-dependent cookie is placed by this site.
6. Analytics
Aggregate traffic figures come from server logs and from Cloudflare’s request statistics. Both report page counts, referrers and country totals. Neither is joined to an email address, and no individual reader is identified in any report.
7. The email brief
The brief is sent only to addresses submitted through the form on this site or by direct request. Each issue carries a one-click unsubscribe link, and a reply asking to leave is also honoured. The list is not sold, rented or shared for marketing.
8. How information is used
To answer messages, to send the brief to people who asked for it, to correct published errors, and to keep the server available. Nothing else.
9. Legal bases
Where the General Data Protection Regulation applies, correspondence is handled on the basis of legitimate interest in answering readers, the email brief on the basis of consent, and server logs on the basis of legitimate interest in operating a secure site.
10. Sharing
Two processors are involved: Cloudflare for delivery and security, and the mail provider that sends the brief. Both receive only what is needed to perform that function. Information is otherwise disclosed only where a law requires it.
11. International transfers
The server is located in the United States and Cloudflare operates a global network, so a request may be handled outside your country. Transfers rely on the standard contractual clauses published by the European Commission.
12. Retention
Server logs are kept for thirty days. Correspondence is kept for two years after the last message in a thread. Email addresses on the brief stay until the subscriber leaves, after which the address is removed from the active list.
13. Your rights
You can ask for a copy of what is held about you, ask for a correction, ask for deletion, or object to a particular use. Write to the address in section 1 and the request is answered within thirty days. A complaint can also go to the data protection authority in your country.
14. Children
The site is written for people managing work and is not directed at anyone under sixteen. No information is knowingly collected from a child.
15. Security
Traffic is encrypted with TLS. Access to the server is limited to the publisher and protected by key-based authentication. No system is perfect, so a suspected breach affecting readers would be reported on this page.
16. Links to other sites
Articles link to vendor documentation and to source material. Once you follow a link, the destination’s own policy applies.
17. Changes
When this policy changes, the revision date at the top of the page changes with it. Material changes are also mentioned in the next issue of the brief.
18. Contact
Questions about this policy: [email protected].