Last updated: 2 July 2026

This policy explains what personal information I collect through this website, why I collect it, who I share it with, how long I keep it, how I protect it, and the rights you have over it. I have tried to write it clearly and without jargon, because a privacy policy you cannot understand is not much use to anyone.

Who I am
The ISA Millionaire is a trading name of David Neil Blake, a sole trader, and the data controller responsible for your personal information on this website. I am registered with the Information Commissioner’s Office (ICO), registration number [ICO registration number].

You can contact me about anything in this policy, or about your data, at hello@theisamillionaire.com, or by post at The ISA Millionaire, Unit 169374, PO Box 7169, Poole, BH15 9EL, United Kingdom.

The information I collect
I only collect what I actually need, and only when you give it to me or use the site.

  • When you use the contact form, I collect your first name, surname, email address, subject and message. I need these to read your message and reply to you.
  • When you sign up to the newsletter, I collect your first name, surname and email address. I need these to send you the emails you have asked for.
  • When you browse the site, with your consent, I use Google Analytics, which collects information about how the site is used, such as the pages you visit, roughly where in the world you are, and the type of device and browser you use. This helps me understand what is useful and improve the site. Analytics does not run unless you accept it through the cookie banner.
  • Automatically, like most websites, my hosting provider keeps technical logs that may include your IP address, for security and to keep the site running.

I do not collect special category (sensitive) personal data, and I do not knowingly collect personal data from children under 16.

Why I collect it, and my legal basis
Under UK data protection law I have to have a lawful basis for using your information. Here is mine:

  • Replying to your messages (contact form): my legitimate interest in answering people who get in touch.
  • Sending the newsletter: your consent, given when you sign up. You can withdraw it at any time, see “Your rights” below.
  • Analytics: your consent, given through the cookie banner.
  • Security and running the site (server logs): my legitimate interest in keeping the site safe and working.

Where I rely on legitimate interests, I have considered whether that is fair to you, and you can object at any time (see “Your rights”).

How long I keep it
I keep personal data only for as long as I need it:

  • Contact-form messages: until you ask me to delete them.
  • Newsletter data: until you unsubscribe, after which you are removed from the list.
  • Analytics data: retained for 14 months, then deleted or anonymised.

Who I share it with
I do not sell your data, and I never will. I share it only with the services I use to run the site, and only so they can do their job:

  • Mailchimp stores the newsletter list and sends the emails. It also records whether emails are opened and links clicked, so I can see what people find useful.
  • Google Analytics processes the site-usage information described above, where you have consented.
  • Hostinger (Hostinger International Ltd) hosts the site and stores its technical logs.

Each of these acts as a data processor on my behalf, under a data-processing agreement, and is only allowed to use your data to provide its service to me. I may also disclose data if the law requires it, for example in response to a valid legal request.

Sending data outside the UK
My hosting provider, Hostinger, is based in the European Union, so your site data stays within the UK and EU.

Some of the other services I use, Mailchimp and Google, are based in the United States, so some of your data may be processed outside the UK. Where that happens, the transfer relies on appropriate safeguards recognised under UK law, such as the UK extension to the EU–US Data Privacy Framework or standard contractual clauses, which are designed to give your data a similar level of protection to that it has in the UK.

Cookies
A cookie is a small file a website stores on your device. This site uses two kinds:

  • Strictly necessary cookies, which keep the site working. These do not need your consent.
  • Analytics cookies (Google Analytics), which only run if you accept them through the cookie banner when you first visit.

You can accept or reject the optional cookies on the banner, and you can change your choice at any time using the cookie settings or by clearing cookies in your browser. If you reject them, the site still works, I just will not see the analytics.

Keeping your data secure
I take the security of your data seriously and use reasonable technical and organisational measures to protect it, including running the site over a secure (HTTPS) connection, using reputable providers who maintain their own security, keeping access limited to me, and not holding more data than I need. No method of storing or sending data over the internet is ever completely secure, so I cannot promise absolute security, but I do take sensible steps to protect your information and to keep it from being lost, misused or accessed without authorisation.

Automated decisions and profiling
I do not use your personal data to make automated decisions about you, and I do not profile you in any way that produces legal or similarly significant effects.

Links to other websites
This site links to other websites, such as gov.uk and the retailers who sell my book. This policy does not cover those sites, and I am not responsible for how they handle your data. When you follow a link elsewhere, please read that site’s own privacy policy.

Your rights
Under UK data protection law you have the right to:

  • ask for a copy of the personal data I hold about you;
  • ask me to correct anything that is wrong;
  • ask me to delete your data;
  • ask me to restrict or stop using it;
  • object to how I am using it, including where I rely on legitimate interests;
  • ask for your data in a portable format;
  • withdraw your consent at any time (for the newsletter, just use the unsubscribe link in any email).

To exercise any of these, email me at hello@theisamillionaire.com. Exercising your rights is free. I may ask you to confirm your identity first, so I do not give your data to the wrong person, and I will respond within one month.

Complaints
If you are unhappy with how I have handled your data, please contact me first so I can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator, at ico.org.uk.

Changes to this policy
If I change this policy, I will update it here and change the “last updated” date at the top. If the change is significant, I will say so clearly.

How to contact me
For anything about this policy or your data, email hello@theisamillionaire.com or write to me at The ISA Millionaire, Unit 169374, PO Box 7169, Poole, BH15 9EL, United Kingdom.