Privacy policy
What we collect, why, and your rights.
Last updated 26 October 2026
Summary
- We only collect your email address, and only if you sign up for the newsletter.
- We use it to send you the newsletter. Nothing else.
- We count page views with Cloudflare Web Analytics, which is cookie-free and does not identify you.
- We never sell your data.
- You can unsubscribe at any time, and we will then delete your address.
Who is responsible for your data
The data controller is The Midpoint. For any privacy question or request, email [email protected].
What we collect and why
Newsletter sign-ups. If you sign up for The Midpoint Weekly, we collect your email address so we can send it to you. Our newsletter runs on beehiiv. beehiiv stores your address and sends the emails for us, and acts as our data processor under a written agreement. beehiiv may record whether emails are delivered, opened and clicked so we can keep the list healthy.
When you sign up on our website, your address goes from our sign-up form to beehiiv through our own server code hosted by Cloudflare. It is not stored there. beehiiv then emails you a link, and you are only subscribed once you click it. We record that you signed up through our website. To stop automated abuse, the sign-up form briefly keeps a scrambled (hashed) form of your IP address to limit repeated attempts. It is deleted automatically within 10 minutes and is never linked to your email address. The sign-up form sets no cookies.
Our lawful basis for the newsletter is your consent. You give it when you sign up, and you can withdraw it at any time by clicking “unsubscribe” in any email or by emailing us. Withdrawing consent does not affect anything we did before you withdrew it.
Emails you send us. If you email us, we use your email address and message to reply. Our lawful basis is our legitimate interest in answering readers.
Reading the site. You do not need to give us any personal data to read The Midpoint. We do not use advertising trackers or social media pixels.
Page-view counts. We use Cloudflare Web Analytics to count how many times each page is read. When a page loads, a small script from Cloudflare (served from static.cloudflareinsights.com) sends Cloudflare the address of the page, the page that linked to it, your browser type, your approximate country and how quickly the page loaded. It sets no cookies, stores nothing on your device and does not use fingerprinting or any other way of recognising you, so it cannot follow you from visit to visit or across other websites. Cloudflare does not use your IP address to identify you. We only ever see aggregated counts, such as the number of page views for each article. We use them to rank our most-read stories (for example “Top stories this week”) and to see which subjects readers find useful. Our lawful basis is our legitimate interest in understanding, in aggregate, what our readers read. If you would rather not be counted, you can block static.cloudflareinsights.com with a content blocker and the site will work exactly the same. See our cookie policy.
Search. Site search runs in your browser using files served from this site. Your search terms are not sent to us or to anyone else.
Hosting and security
The site is hosted by Cloudflare. Like any web host, Cloudflare processes your IP address and basic technical information about your request (such as your browser type and the page requested) to deliver the site and to protect it from attacks and abuse. Our lawful basis is our legitimate interest in keeping the site secure and available. We do not use this information to identify you.
Sharing your data
We never sell your data and we do not share it for marketing. We only share it with the service providers who help us run the site, page-view counts and newsletter (beehiiv and Cloudflare), or where the law requires us to.
International transfers
beehiiv and Cloudflare may process data outside the UK, including in the United States. Where they do, it is under appropriate safeguards, such as standard contractual clauses or the UK International Data Transfer Addendum.
How long we keep it
We keep your email address until you unsubscribe, and then delete it within 30 days. If you email us, we keep your message only for as long as we need it to deal with your request.
Your rights
Under UK GDPR you have the right to:
- be told how we use your data (this page)
- get a copy of the data we hold about you
- have inaccurate data corrected
- have your data deleted
- restrict how we use your data
- object to how we use your data
- get your data in a portable format
- withdraw your consent at any time
To use any of these rights, email [email protected]. We will reply within one month. There is normally no charge.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, or call 0303 123 1113.
Changes
We will update this page if the way we use data changes, and change the date at the top.