Privacy Policy
Last updated: May 2026
1. Who We Are
Buy Less Crap ("the Site") is a personal investing blog and community run by Steve Rowley. I'm a business owner and investor sharing my investing journey — not a corporation, not a data broker, not a faceless entity.
If you have questions about this policy, you can reach me via the contact page.
2. What Data We Collect
We keep things minimal. Here's what we may collect:
- Information you give us directly — when you fill in the Buy Less Crap Club form, you give us your name and email address. You may also optionally tell us what brought you here.
- Website analytics (only with consent) — if you agree to analytics cookies, we collect anonymised information about how people use the site: which pages are popular, rough visitor counts, and how people found us. No personal data. IP addresses are anonymised.
- Cookie consent preferences — we remember whether you said yes or no to cookies so we don't keep asking.
3. How We Use Your Data
We use your data for exactly what you'd expect — and nothing else:
- To send you the occasional investing update if you joined the Buy Less Crap Club.
- To understand (anonymously) how many people visit and what they find useful.
- To reply if you contact me directly.
We do NOT: sell your data, share it with advertisers, build marketing profiles on you, track you across other websites, or do anything shady. That's not how we operate.
4. Legal Basis for Processing (GDPR)
Under UK and EU GDPR, we rely on the following lawful bases:
- Consent — when you sign up to the Buy Less Crap Club, you give clear consent for us to email you. You can withdraw this at any time by unsubscribing.
- Legitimate interest — anonymised analytics (with your opt-in consent via the cookie banner) help us understand if anyone is reading and what's useful.
5. Data Retention
We keep your data only as long as needed:
- Club subscribers — your name and email are kept until you unsubscribe. Once you unsubscribe, you're removed from the list.
- Anonymised analytics — anonymised usage data may be kept indefinitely as it cannot be tied back to any individual.
6. Your Rights
Under GDPR, you have the right to:
- Access — ask what personal data we hold about you.
- Rectification — ask us to correct any inaccurate data.
- Erasure — ask us to delete your personal data.
- Objection — object to processing of your personal data.
- Portability — request a copy of your data in a machine-readable format.
To exercise any of these rights, just reach out via the contact page. There's no charge, and we'll respond within 30 days.
7. Third-Party Services
We use a small number of trusted third-party services to run this site:
- Landingsite — hosts the website and processes form submissions (the Buy Less Crap Club signup). Form data is stored securely and only used to deliver the emails you signed up for.
- Privacy-friendly analytics — if you consent, we may use a cookieless, GDPR-compliant analytics tool that doesn't track you personally.
If you follow links to third-party websites (Instagram, Facebook, X/Twitter, Trading 212, InvestEngine, Vanguard, or any platform I mention), those sites have their own privacy policies. I have no control over what they do — please check their policies directly.
8. Data Security
We take reasonable technical and organisational measures to protect your personal data. The site uses HTTPS encryption (SSL/TLS), and form submissions are processed through Landingsite's secure infrastructure. That said, no online service is 100% secure — if you believe your data has been compromised, contact me immediately.
9. Children's Privacy
This site is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you're a parent and believe your child has provided us with personal data, please contact me and I'll delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. If the changes are significant, we'll let Club subscribers know by email.
11. Contact
If you have questions about this Privacy Policy or want to exercise your data rights, reach out via the contact page.
