Privacy Policy

The Care Letter ("The Care Letter," "we," "our") is published by Global Pioneers LLC, doing business as The Care Letter. This policy explains what personal information we collect when you visit thecareletter.com or subscribe to the newsletter, what we do with it, and the rights you have over it.

If you only read one paragraph: we collect your email address when you subscribe, plus the minimum analytics needed to know what content is read. We do not sell your data. We do not share it for advertising. You can ask us to delete everything we have on you at any time by emailing jordan@thecareletter.com.

What we collect

Email address. Required when you subscribe. We store it with our newsletter provider (currently beehiiv) and use it solely to deliver the newsletter and (rarely) reply to questions you send us.

Submission content. When you fill out our contact, sponsor inquiry, or directory application forms, we receive the information you typed in those fields. Sponsor and directory submissions also receive your IP address and user-agent string for abuse review only — neither is displayed publicly.

Tracking signals. When you visit thecareletter.com, our hosting provider (Vercel) logs basic request data: IP address, page URL, referrer, user-agent, and timestamp. This is standard server-log information and is retained briefly for security and performance monitoring.

Analytics. We use Vercel Analytics and Vercel Speed Insights to count page views and measure page-load performance. These are first-party, cookie-less, and do not build cross-site profiles of you.

Email engagement. Our newsletter provider records standard email-engagement signals (whether you opened an email, which links you clicked, whether the message bounced, whether you unsubscribed). We use this only to measure aggregate newsletter health and to remove invalid addresses.

Cookies. We do not set behavioral or advertising cookies. Vercel Analytics is cookie-less. Our newsletter provider may set its own cookies on its own domain (separate from thecareletter.com); see beehiiv's privacy policy for those.

What we don't collect

• We don't ask for your name, age, address, phone number, or anything else beyond email at signup. (Some form pages let you optionally include your first name and city when submitting a question — these are optional and used only to make our reply more useful.)
• We don't run third-party advertising trackers, retargeting pixels, social-media share-back beacons, or behavioral profiling.
• We don't sell, rent, or trade your data.

Why we collect it

• Email address: to deliver the newsletter you asked for.
• Form submissions: to respond to your questions, evaluate sponsor and directory inquiries, and improve future issues.
• Server logs + analytics: to keep the site working, identify abuse, and understand which content readers find useful.
• Email engagement: to maintain newsletter health and remove invalid addresses.

Who we share it with

We use a small set of service providers ("subprocessors") that process your data on our behalf. We share the minimum information necessary, and we choose providers whose own privacy practices match ours:

• Beehiiv — newsletter delivery, subscriber management, email-engagement analytics
• Vercel — site hosting, server-log retention, performance monitoring, page-view analytics
• GitHub — code hosting and deployment pipeline (does not receive subscriber data)

We do not share your data with anyone else except when required by law (subpoena, court order, regulatory request) or to investigate fraud, abuse, or threats to safety. If we are ever asked to disclose your data in a way you might not expect, we'll resist over-broad requests and notify you when legally permitted.

How long we keep it

• Email address: until you unsubscribe, then we retain a hashed record solely to honor your unsubscribe choice (CAN-SPAM compliance) — we don't keep the raw address.
• Form submissions: kept while the inquiry is active and for a reasonable period after (typically 12 months) for follow-up and dispute resolution; permanently deleted on request.
• Server logs + analytics: Vercel's default retention is short (days to weeks for logs; aggregate analytics retained longer).
• Email engagement data: retained as long as you are a subscriber.

Your rights

Regardless of where you live, you can ask us to:

• See what personal information we have about you
• Correct anything that's wrong
• Delete all your personal information
• Export a copy in a portable format
• Opt out of any specific use of your data

Just email jordan@thecareletter.com with the subject "Privacy request." We respond within 30 days, typically faster.

If you live in California (CCPA/CPRA), Colorado (CPA), Virginia (VCDPA), Connecticut (CTDPA), Utah (UCPA), or any state with a comprehensive privacy law: the rights above are the same rights those laws give you. You can also designate an authorized agent to make a request on your behalf, and you can appeal a denied request by replying to our response.

If you live in the European Union, the UK, or another jurisdiction with GDPR-equivalent protections: the rights above are the same rights GDPR Articles 15-22 give you. Our legal basis for processing your email address is your consent (you subscribed) and our legitimate interest in delivering the publication you requested. You can withdraw consent at any time via the unsubscribe link in any newsletter or by emailing us.

Children under 13. The Care Letter is not directed at children. We don't knowingly collect data from anyone under 13. If you believe a child has subscribed, email us and we will delete the record.

Security

We use service providers that maintain industry-standard security: TLS encryption in transit, encryption at rest, access controls, and regular security audits. No system is perfectly secure; if we ever learn of a breach affecting your personal data, we will notify affected subscribers within 72 hours of discovery and report it to the appropriate authorities as required by law.

Changes to this policy

If we materially change this policy, we'll update the "Last updated" date at the top, post the change on this page, and notify subscribers via the newsletter. Continued use of the site or newsletter after a change constitutes acceptance.

Contact

Privacy questions, data-access requests, or anything else covered by this policy:

• Email: jordan@thecareletter.com (subject line: "Privacy request")
• Mailing address: the address listed in the footer of each newsletter issue (CAN-SPAM compliant; updates when our address changes)

Jordan Sauchuk reads every email personally.

The Care Letter is published by Global Pioneers LLC. This policy was last updated 2026-06-10.