Doc. TS‑PRIV‑001 · Status: In Force Distribution: Public

Privacy Policy

Effective 31 July 2026 · Updated 31 July 2026

Compliance

✓ GDPR Compliant
✓ UK GDPR Compliant
✓ CCPA / CPRA Compliant
✓ US State Privacy Compliant

We never sell, share, rent or track. One email address is all we hold — and every right below applies to you wherever you live.

Told Straight (“we,” “us”) runs toldstraight.com. This policy explains the one piece of personal data the site handles: an email address you choose to give us so we can tell you when the show launches.

The Short Version

What we collect: One email address — only if you type it in and submit it.
Why: To tell you when the show launches, then occasional episode updates.
Legal basis: Your consent. Unsubscribing withdraws it.
Where it lives: Our own AWS account, US East (Northern Virginia), USA.
Leaving the EEA: Covered by the EU Standard Contractual Clauses (June 2021), applied automatically through the AWS Service Terms.
We never: Sell it. Share it. Rent it. Track you. Set an analytics cookie.
Your rights: See it · correct it · delete it · get a copy · restrict it · object · withdraw consent · complain to a regulator. Email hello@toldstraight.com — free, and we act promptly.

These rights are the ones the UK/EU GDPR gives you, and we extend the same set to everyone regardless of where you live — including residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana, whose state privacy laws grant closely similar rights. Details below.

What we collect

Your email address, and only if you type it into the “Notify me” form and submit it. Nothing else is required and nothing else is asked for.

We do not run third-party advertising trackers, and the Coming Soon page sets no analytics cookies.

Why we collect it, and the legal basis

We use your email address to send you:

one message when the show goes live, and
occasional updates about new episodes.

The basis is your consent, given by submitting the form. You can withdraw it at any time (see Unsubscribe).

Where it is stored, and who can see it

Your address is stored in our own Amazon SES contact list, inside our AWS account. The list is not shared, sold, or rented to anyone. It is processed by Amazon Web Services as our infrastructure provider; no other third party receives it.

Where that is, physically. The list is held in Amazon Web Services’ US East (Northern Virginia) region, in the United States. If you are in the UK, the EU, or the wider European Economic Area, that means your email address is transferred outside the EEA.

The safeguard for that transfer. Amazon Web Services incorporates the Standard Contractual Clauses adopted by the European Commission in June 2021 into the AWS Service Terms, and states that they apply automatically whenever a customer uses AWS to transfer data outside the EEA. That is the mechanism this transfer relies on. We do not rely on Privacy Shield, which was invalidated in 2020.

How long we keep it

Until you unsubscribe, or until you ask us to delete it, or until the list is no longer used — whichever comes first.

Unsubscribe and your rights

Unsubscribe from any email using the link it contains, or by emailing hello@toldstraight.com. Because consent is our legal basis, unsubscribing withdraws that consent. Withdrawing it does not affect anything we did while it was given.
You can also ask us to:
- show you the data we hold about you, and give you a copy in a portable form;
- correct it if it is wrong;
- delete it;
- stop using it while a question about it is resolved; or
- object to our using it at all.
Email hello@toldstraight.com for any of these. We will act promptly and will not charge you. The only personal data we hold is your email address, so in practice most of these requests are answered by showing you your entry or removing it.
You can complain to a regulator. If you are in the UK, the EU, or the EEA and think we have handled your data wrongly, you have the right to lodge a complaint with your national data protection supervisory authority. You do not have to contact us first — though we would rather you did, so we can put it right.

If you live in the United States

Several US states now give residents privacy rights similar to the UK/EU GDPR — California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana, among others. Rather than track which law applies to you, we extend the same rights to everyone, listed above.

Two things those laws ask us to state plainly:

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We never have. There is no “Do Not Sell or Share My Personal Information” link on this site because there is nothing to opt out of.
We will not treat you differently for exercising a privacy right. Asking to see or delete your data costs you nothing and changes nothing, other than that we can no longer email you if you ask us to delete your address.

We also do not use your data for targeted advertising, we do not profile you, and we do not collect anything a law would classify as sensitive personal information — we hold an email address and nothing else.

If we ever refuse a request, you can appeal by replying to our response or emailing hello@toldstraight.com with the word “appeal”. We will reconsider and explain the outcome in writing. Several states require an appeal route; you have one regardless of where you live. If you are still unhappy, you can contact your state Attorney General.

Children

The show is for adults. We do not knowingly collect data from children.

Changes

If this policy changes, the new version is posted here with an updated effective date.

Contact

Questions about your data: hello@toldstraight.com.

← Back to Told Straight