Privacy policy

Last updated 31 October 2026

Who we are

Flag It First is the data controller for the personal data described here. Contact: hello@doflagitfirst.com.

What we collect and why

• Your email address, when you ask for the checklist, so we can send it and our weekly scam-alert email (which may occasionally include clearly labelled products or offers).
• A record of your consent: the date and time you signed up and the form you used.
• Email activity: our email provider, Kit, records whether emails are opened and links clicked, and technical details such as IP address and email client. We use this to improve the emails and to remove inactive subscribers.

Lawful basis: your consent. You can withdraw it at any time with the unsubscribe link in every email, or by emailing us. Withdrawing doesn't affect anything we did before.

Who processes it for us

• Kit (Kit.com, United States) stores the email list and sends our emails. Kit states that it is certified to the UK Extension to the EU–US Data Privacy Framework, and its data processing addendum includes the UK International Data Transfer Agreement. Kit's GDPR page
• Cloudflare hosts this website. Like any web host, it processes technical data such as IP addresses to deliver and protect the site. Cloudflare states that it complies with the UK Extension to the EU–US Data Privacy Framework. Cloudflare's privacy policy

We never sell your data or share it for anyone else's marketing.

How long we keep it

Until you unsubscribe. If you don't open or click any email for 24 months, we delete your details. After you unsubscribe, Kit may keep your email on a suppression list so you aren't emailed again.

Cookies and this website

This website sets no cookies and uses no tracking or advertising scripts. Videos don't load until you press play. When you do, the video comes from YouTube (Google), which may set cookies under Google's privacy policy. The sign-up form sends your email straight to Kit.

Your rights

You can ask for a copy of your data, or ask us to correct it, delete it, restrict or object to its use, or move it elsewhere. Email hello@doflagitfirst.com. We'll reply within one month.

Complaints

If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113.

Children

The email list is for adults (18 and over).