Privacy Policy
Last updated: 11 September 2026
Who I am
I am Gaby Koppel, an author and journalist. This site is where I write about my work and my books, and where readers can sign up to my newsletter or get in touch. I am the data controller for the information described in this policy, which means I decide what is collected and why.
You can reach me through the contact form on this site. My postal address is available on request.
ICO registration number: ZC242467
What I collect
I keep very little, and only what you give me.
Your name and email address, when you contact me or subscribe.
The content of your message, when you write to me through the contact form, by email, or on LinkedIn, Instagram, Facebook or X.
Newsletter subscriber details, held by Substack, if you sign up.
Professional contact details for journalists, producers, editors and other press contacts I work with.
Basic technical information collected by the website platform, such as the pages visited and general location. See the cookie notice via the button below.
I do not collect payment details through this site, and I do not collect or keep any special category data such as health information.
How I collect it
The contact form on this site.
The newsletter sign-up on this site.
Messages sent to me on LinkedIn, Instagram, Facebook and X.
Email.
Meeting people in person at events, talks and signings.
Why I use it, and my legal basis
Under UK GDPR I need a lawful basis for using your information. These are the bases I rely on.
| What | Why | Legal basis |
|---|---|---|
| Enquiries and messages | To read and reply to you | Legitimate interests: I cannot answer you without keeping what you sent |
| Newsletter subscription | To send you my newsletter and updates | Consent, which you can withdraw at any time |
| Press and media contacts | To keep in touch about my work and my books | Legitimate interests: ordinary professional contact in publishing and journalism |
| Website operation and security | To keep the site running, secure and free of spam | Legitimate interests |
I do not sell your information, and I do not use it to build profiles or make automated decisions about you.
Where it is kept, and who else can see it
| Provider | What they do |
|---|---|
| Squarespace | Hosts this website and stores contact form entries |
| Substack | Runs my newsletter and holds the subscriber list |
| Microsoft (Outlook) | My email provider |
| K-SKY | Builds and maintains this website, and occasionally sees form entries while doing so |
| Squarespace runs Google reCAPTCHA |
Your information is kept in my email account and in the services I use to run the site and the newsletter. These providers process it on my behalf and cannot use it for their own purposes.
Some of these providers are based in the United States or store data there. Where that happens, the transfer is covered by the safeguards required under UK data protection law, such as the UK International Data Transfer Addendum or the UK extension to the EU-US Data Privacy Framework.
I will not share your information with anyone else unless you ask me to, or unless I am legally required to.
How long I keep it
| What | How long |
|---|---|
| Enquiries and messages | Up to 24 months after our last contact, then deleted |
| Newsletter subscribers | Until you unsubscribe, and then removed from the list |
| Press and media contacts | For as long as the professional relationship is active |
| Website form entries | Cleared from the site once the message has been dealt with |
Your rights
Under UK data protection law you can ask me to:
Show you what information I hold about you.
Correct anything that is wrong.
Delete it.
Stop or limit how I use it.
Send it to you, or to someone else, in a portable format.
Stop using it where I have relied on legitimate interests.
You can also withdraw your consent to the newsletter at any time, either by using the unsubscribe link at the foot of every issue or by writing to me. To make any of these requests, please use the contact form on this website. I will respond within one month, and there is no charge.
Complaints
If you are unhappy with how I have handled your information, please tell me first and I will try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
If this policy changes, I will update this page and change the date at the top.