Privacy Policy

Effective 27 June 2026

This Privacy Policy explains how Luca Bonura Onlinehandel (operating the publication The Small Business Digest) processes personal data in connection with our website, newsletter, and reader accounts. It is written to meet the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) for the UK edition, and the EU GDPR (DSGVO) for the German/DACH edition.

1) Who we are (Controller)

Controller: Luca Bonura Onlinehandel (sole proprietorship)

Address: Große Bleiche 5, 65719 Hofheim am Taunus, Germany

Email: info@sb-digest.com

Telephone: +49 176 81255742

We publish The Small Business Digest, an independent news and information service for small-business owners. For all data described here we act as the controller.

2) Personal data we process

Depending on how you use the Digest, we may process:

• Newsletter data: your email address, the language/edition you choose, and engagement metadata (e.g. opens/clicks) to improve our newsletters.
• Account data (where you create a free account): name (optional), email, authentication identifiers, your chosen topics and industry ("For you" preferences), and your saved/reading-list items.
• Resource & perk requests: the email you provide to receive a download or a perk code, and which item you requested.
• Contact & enquiry data: email address, message content, and related metadata.
• Usage & device data: IP address, device/browser type, pages viewed, referral URLs, and timestamps (log data).
• Cookies / online identifiers: see Section 7 and our Cookie Policy.

We do not intentionally collect special-category data, and our service is not directed at children (see Section 11).

3) Purposes and legal bases (UK GDPR Art. 6 / DSGVO Art. 6)

• Providing the website and accounts (Art. 6(1)(b) / legitimate interests 6(1)(f)): serving content, authenticating accounts, saving your reading list and preferences.
• Newsletter and direct communications (Art. 6(1)(a) consent, or the PECR "soft opt-in" where permitted): sending the email you signed up for. Every email has an unsubscribe link.
• Resource/perk delivery (Art. 6(1)(b)): sending the file or code you requested.
• Personalisation ("For you") (Art. 6(1)(a) consent): tailoring content to the topics and industry you choose.
• Analytics (Art. 6(1)(a) consent): understanding usage to improve the publication.
• Affiliate / measurement (Art. 6(1)(a) consent): when you click a partner ("Perks") link, the affiliate network may set or read identifiers to attribute the referral (see Section 7).
• Security & operations (Art. 6(1)(f)): keeping the service secure, available, and free from abuse.
• Legal compliance (Art. 6(1)(c)): meeting accounting/tax and other legal obligations.

We respond to data-subject requests within one month (extendable for complex requests) and may verify your identity first.

4) Service providers (processors)

We share data only as necessary, under agreements with appropriate safeguards:

• Website hosting & delivery: Vercel (hosting/CDN).
• Database, authentication & file storage: Supabase.
• Email delivery (newsletter, account links, resource delivery): Resend.
• Analytics: Google Analytics 4 (with IP anonymisation), loaded only with your consent.
• Affiliate networks (Perks): affiliate-marketing networks such as Awin, Impact, and PartnerStack - these set tracking on click-through to attribute referrals. The specific networks may change as we add partners.

A current list of providers is available on request.

5) International data transfers

We are established in Germany (EEA). Some providers (e.g. US-based services) may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as Standard Contractual Clauses, the UK International Data Transfer Agreement / Addendum, and - where applicable - the EU-US / UK-US Data Privacy Framework.

6) Retention

• Newsletter & marketing data: until you unsubscribe, or after a period of inactivity (e.g. 24 months).
• Account data: for the life of your account; deleted on account closure (subject to legal holds).
• Resource/perk request data: as needed to deliver the item and any follow-up you consented to.
• Logs / security telemetry: typically around 12 months.
• Records required by law (e.g. tax): as required by applicable law.

7) Cookies, tracking & consent

We use strictly necessary cookies (for the site and your account) without consent, and analytics/advertising/affiliate technologies only with your consent, gathered via our cookie banner ("Accept all", "Reject all", granular choices). You can change your choices anytime via Cookie Settings. Where supported, we honour browser signals such as Global Privacy Control (GPC). Full details, names, and lifetimes are in our Cookie Policy.

8) Your rights

Subject to legal conditions, you have the right to access, rectify, erase, restrict, and port your data, to object to processing based on legitimate interests and to direct marketing, and to withdraw consent at any time. To exercise these, contact info@sb-digest.com.

9) Complaints

Please contact us first. You also have the right to complain to a supervisory authority - in the UK, the Information Commissioner's Office (ICO), www.ico.org.uk; in Germany, the competent state data-protection authority.

10) Security

We use appropriate technical and organisational measures (encryption in transit, access controls, least-privilege, monitoring). No internet transmission is fully secure, and we work continuously to improve safeguards. We maintain breach procedures and will notify the relevant authority, and affected individuals where required, without undue delay.

11) Children

The Digest is intended for adults running businesses and is not directed at children. We do not knowingly collect data from children under 13 (UK) / 16 (where applicable in the EU). If you believe a child has provided data, contact us so we can delete it.

12) Changes & contact

We may update this Policy; the effective date appears at the top. Questions: info@sb-digest.com · Postal: Luca Bonura Onlinehandel, Große Bleiche 5, 65719 Hofheim am Taunus, Germany.

Transparency: The Digest is reader-funded and earns a commission on some perks - always labelled “Ad”. Editorial is never for sale and is written independently of any partner.