Privacy Policy

This Privacy Policy describes how Percolating Media LLC, doing business as ScrollSignal ("ScrollSignal," "we," "us," or "our"), collects, uses, and protects information about visitors to scroll-signal.com and subscribers to The Signal newsletter.

1. Information we collect

• Newsletter subscriptions: Your email address and subscription date.
• Report purchases: Stripe collects payment information directly. We receive your email, purchase details, and billing country. We do not store credit card numbers.
• Website analytics: Aggregate data on pages visited, time on site, and general geography. No personally identifiable information through analytics alone.
• Contact inquiries: Your email and message content.
• Cookies: Used for analytics and basic functionality. See Section 9.

2. How we use your information

• To send The Signal newsletter (with your consent)
• To fulfill your report purchase and deliver the file
• To respond to inquiries and provide support
• To understand and improve how the Site is used
• To comply with legal obligations and prevent fraud

We do not use your information for advertising and do not sell, rent, or trade personal information to any third party.

3. Legal basis for processing (GDPR / UK GDPR)

For users in the EU or UK:

• Contractual necessity: To fulfill your report purchase.
• Consent: To send The Signal newsletter — withdrawable at any time.
• Legitimate interests: Website analytics to understand and improve the Site.
• Legal obligation: Retention of purchase records as required by law.

For data transfers from the EU/UK to the US, we rely on our service providers' privacy practices. By using the Site, you acknowledge this transfer.

4. Email communications

Every Signal newsletter includes an unsubscribe link. You may also unsubscribe by emailing hello@scroll-signal.com. Our physical address appears in every newsletter as required by CAN-SPAM:

5. Third-party service providers

• Beehiiv: Newsletter platform. beehiiv.com/privacy
• Stripe: Payment processor. stripe.com/privacy
• Cloudflare: Website host and DNS. cloudflare.com/privacypolicy
• Payhip: Digital product delivery. payhip.com/privacy
• Google Workspace: Business email. Subject to Google's Workspace privacy terms.

We may engage individual researchers or consultants who assist in preparing reports. They are bound by confidentiality obligations and may only use your data to perform their role.

6. Data retention

• Newsletter subscribers: Retained while subscribed; removed within 30 days of unsubscribing.
• Purchase records: Retained for 7 years for legal and accounting compliance.
• Contact inquiries: Retained for up to 3 years.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, port, or object to processing of your personal data, or to withdraw consent. Contact hello@scroll-signal.com. We respond within 30 days.

8. California privacy rights (CCPA)

California residents may request to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise CCPA rights, email hello@scroll-signal.com with "CCPA Request" in the subject.

9. Cookies

We use cookies for analytics and functionality. We do not use cookies for advertising or cross-site tracking. Manage cookies through your browser settings.

10. Children's privacy

Our Site is intended for business professionals and is not directed at children under 13.

11. Data security

We use HTTPS encryption and secure payment processing via Stripe. No internet transmission is completely secure.

12. Changes to this policy

We will notify newsletter subscribers of material changes at least 14 days before they take effect.

13. Contact and complaints

EU and UK residents may lodge a complaint with their local data protection authority. UK residents may contact the ICO at ico.org.uk.