This policy explains what personal data SortedAbroad collects, why, and what rights you have over it.
Who we are
SortedAbroad (Liam Grennan) of Rahan, Tullamore, Co. Offaly is the data controller for the personal data described here. You can reach us at info@sortedabroad.com.
1. What we collect
When you subscribe to the newsletter or download the free toolkit:
- Email address
- Date and source of signup
- Whether you consented to marketing
When you create an account:
- Email address
- Password (stored hashed — we never see it)
- Articles you favourite and progress you track
When you buy the Relocation Roadmap:
- Email address
- Purchase amount, currency, date
- A Stripe transaction reference
We do not receive or store your card details. Payment card data goes directly to Stripe.
Automatically, when you visit:
- IP address, browser type, device type
- Pages visited, time on page, referring source
- Cookie and analytics identifiers
When you contact us or submit a story:
- Whatever you choose to include in your message
2. Why we use it, and our lawful basis
| Purpose | Lawful basis (UK/EU GDPR) |
|---|---|
| Deliver a product you purchased | Performance of a contract |
| Provide and maintain your account | Performance of a contract |
| Send the weekly newsletter | Consent |
| Respond to your enquiries | Legitimate interests |
| Understand site usage and improve content | Consent (analytics cookies) |
| Measure advertising performance | Consent (advertising cookies) |
| Keep records required by tax and accounting law | Legal obligation |
| Prevent fraud and secure the site | Legitimate interests |
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing carried out before you withdrew it.
3. Who we share it with
We do not sell your personal data. We share it only with service providers who process it on our behalf:
| Provider | Purpose | Where |
|---|---|---|
| Base44 | Website hosting, accounts, database | EU |
| Stripe | Payment processing | US / EU |
| Resend | Transactional and marketing email delivery | US / EU |
| Google (Analytics, Ads) | Site analytics and advertising measurement | US / EU |
| Namecheap Private Email | Business email correspondence | US |
Each is bound by contract to process data only on our instructions.
We may also disclose data where legally required, or in connection with a sale or restructuring of the business.
4. International transfers
Some of our providers are based in the United States. Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards — typically the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or the provider's certification under the EU–US Data Privacy Framework.
You can request details of the safeguards applying to any specific transfer.
5. How long we keep it
- Newsletter subscribers: until you unsubscribe, then up to 30 days to process the removal, plus a suppression record so we don't re-add you
- Accounts: while your account is active, then 12 months after your last login
- Purchase records: 7 years, to meet tax and accounting requirements
- Enquiries: 2 years from last correspondence
- Analytics data: per the retention period set in Google Analytics (currently 14 months)
6. Your rights
Under UK and EU GDPR you have the right to:
- Access the personal data we hold about you
- Rectify data that is inaccurate or incomplete
- Erase your data ("right to be forgotten"), subject to legal retention requirements
- Restrict how we process it
- Object to processing based on legitimate interests, and to direct marketing at any time
- Portability — receive your data in a machine-readable format
- Withdraw consent at any time
- Not be subject to solely automated decision-making with legal effects (we don't do this)
To exercise any of these, email info@sortedabroad.com. We will respond within one month.
If you are unhappy with our response, you can complain to your supervisory authority. In Ireland this is the Data Protection Commission ( dataprotection.ie); in the UK, the Information Commissioner's Office ( ico.org.uk).
California residents: you have rights under the CCPA/CPRA to know what personal information we collect, to request deletion, to correct inaccuracies, and to opt out of "sale" or "sharing" of personal information. We do not sell personal information. Advertising cookies may constitute "sharing" — you can opt out via our cookie settings. We will not discriminate against you for exercising these rights.
7. Cookies
We use cookies and similar technologies:
- Strictly necessary — required for the site, your login session and checkout to work. These cannot be disabled.
- Analytics — Google Analytics (GA4), to understand how the site is used.
- Advertising — Google Ads, to measure the performance of our advertising.
Analytics and advertising cookies are only set with your consent. You can change your preferences at any time via https://sortedabroad.base44.app/cookie-policy, or by clearing cookies in your browser.
8. Marketing emails
We only send the newsletter to people who have actively opted in. Every marketing email includes a one-click unsubscribe link. Transactional emails — purchase receipts, product delivery, password resets, account notices — are sent as part of providing the service and are not marketing.
9. Security
We use HTTPS across the site, store passwords hashed, and rely on established providers (Stripe, Base44, Resend) with their own security programmes. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children
This site is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with data, contact us and we will delete it.
11. Changes
We may update this policy. Material changes will be notified by email or a notice on the site. The "last updated" date above always reflects the current version.
Questions? info@sortedabroad.com