Privacy Policy

The controller for the processing described here is the operator of YourGoldHub, contactable at info@yourgoldhub.com. Written requests about your data are answered from that address.

Newsletter signups. Your email address, the cadence you chose (weekly or monthly), the signup source, the timestamp of your consent and the exact consent wording shown to you. Each record also carries a private opt-out code used only to build your unsubscribe link.

Nothing else identifiable. The site has no user accounts, no login, no advertising pixels, no cross-site trackers and no profiling. Tool inputs on the calculator and converter are processed in your browser and never sent to us.

Technical logs. Our hosting provider processes standard request data (IP address, user agent, timestamp, requested URL) to deliver pages and defend against abuse. We do not join these logs to newsletter records.

Newsletter delivery relies on your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time. Serving and securing the site relies on our legitimate interest in operating it (Art. 6(1)(f) GDPR).

Newsletter records are kept until you unsubscribe. When you unsubscribe we mark the record as opted out immediately and delete it within 30 days, retaining nothing but an anonymous count. Hosting logs are retained per our provider's standard short-term retention.

Site hosting and the database that stores newsletter signups are operated by our infrastructure providers under data processing agreements. Market data is fetched server-side from third-party feeds (gold price, exchange rate and financial data providers) and news headlines from public RSS feeds — those requests come from our server, not your browser, so those providers do not see your IP address. Web fonts are loaded from Google Fonts, which receives your IP address to serve the font files.

No newsletter email has been sent yet; when we introduce an email delivery provider we will name it here before the first send.

We set no advertising or analytics cookies and show no cookie banner because none is required for the storage we use. The site stores nothing in your browser beyond what is strictly necessary to render pages.

You may request access, rectification, erasure, restriction, portability, and object to processing; you may also withdraw newsletter consent at any time using the link in any email or the unsubscribe page. Write to the contact address above and we will respond within one month. You may also complain to your local data protection authority.

Our hosting, database and email infrastructure may process data outside your country, including in the United States. Where personal data leaves the UK or EEA we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision, as applicable to the processor concerned. You may ask us which mechanism applies to a given processor by writing to the contact address above.

The site is served over TLS. Subscriber records are stored in a managed Postgres database with row-level access rules that prevent public reads of the subscriber table. Where we log an IP address for abuse prevention we store a salted SHA-256 hash rather than the address itself, so the record cannot be reversed to identify a visitor. No transmission over the internet is entirely secure, and we make no absolute guarantee; if a breach affects your rights we will notify you and the relevant authority as required by law.

The site is intended for adults making decisions about their own finances. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted an address, write to us and we will delete the record.

We do not profile subscribers, do not build behavioural advertising audiences, and take no automated decisions that produce legal effects for you. Because there is no cross-site tracking to disable, browser Do Not Track and Global Privacy Control signals require no separate opt-out on this site; content and prices are identical for every visitor.

Signup is single opt-in with the consent wording stored alongside your record, so we can show exactly what you agreed to and when. To stop the form being used to sign up addresses that are not yours, we rate-limit submissions per network origin. That check stores a salted SHA-256 hash of the requesting IP address and a timestamp — never the address itself — and the hash cannot be reversed back to a visitor. Rate-limit rows are pruned on a rolling short-term basis and are never joined to subscriber records for any purpose other than blocking a burst of submissions.

Every issue carries a one-click unsubscribe link built from the private opt-out code on your record. You can also opt out without any link by entering your address on the unsubscribe page. That flow is deliberately idempotent and does not confirm whether an address was on the list, so it cannot be used to test whether somebody is a subscriber.

We think it is as useful to state the absences as the practices. There are no user accounts and no passwords to leak. There is no advertising network, no retargeting pixel, no session-replay or heatmap tool, and no third-party analytics script on any page. We do not enrich subscriber addresses against data brokers, do not append names, employers or locations, and do not sell, rent, licence or barter personal data under any label, including “partner offers” or “data sharing for business purposes”.

Where a page links out to a dealer, that link may carry a referral parameter identifying YourGoldHub as the source. It carries no identifier for you, and we receive aggregate referral reporting from the dealer, not a record of your visit tied to your email address.

Write to info@yourgoldhub.com from the address the request concerns, or tell us which address it concerns, and state what you want: a copy of your data, a correction, deletion, or a machine-readable export. We do not require identity documents for a newsletter record; being able to receive mail at the address is the proportionate check. We answer within one month and will tell you promptly if a request is complex enough to need the extension the GDPR allows. There is no charge unless a request is manifestly excessive or repetitive, in which case we will say so before doing any work.

If you are unhappy with our response you can complain to your national supervisory authority — in the UK the Information Commissioner's Office, in the EU the authority for your member state — and you do not need to contact us first to do so.

Material changes are published on this page with a new “last updated” date, and we will state in the section concerned what changed rather than silently reworking the text. If a change would widen the purposes we use your email address for, we will ask for fresh consent instead of relying on this notice. This version supersedes any earlier statement.