Privacy policy.

Last updated: 18-Apr-26

Who I am

I am Toria Howell, an independent author. I publish my books and run my author business under the trading name Olewydd. This policy explains how Olewydd collects, uses, stores, and protects the personal information of people who interact with my website (toriahowell.com), join my newsletter (The Edit), download a reader gift, or contact me directly.

Olewydd's business address is Unit 7769, PO Box 92, Cardiff, CF11 1NB, United Kingdom. You can contact me about anything in this policy at hello@toriahowell.com.

In the language of UK GDPR, Olewydd is the data controller of any personal information you provide.

What this policy covers

This policy applies to:

  • People who subscribe to my newsletter, The Edit

  • People who download a reader gift through my website

  • Visitors to toriahowell.com

  • Anyone who contacts me by email

It does not cover what happens to your data when you buy my books from third-party retailers like Amazon, Apple Books, Kobo, or other shops. Those retailers are separate data controllers and have their own privacy policies, which I'd encourage you to read.

What information I collect and why

Newsletter subscribers (The Edit)

When you subscribe to my newsletter, Olewydd collects:

  • Your first name (so I can address you personally)

  • Your email address (so I can send you emails)

  • The date and time you subscribed, and the IP address you subscribed from (collected automatically by the email provider as proof of consent)

Olewydd uses this information to send you my newsletter, which includes updates about my books, behind-the-scenes tidbits, occasional special offers, and any reader gift you signed up to receive.

The lawful basis for processing this data is your consent, which you give by ticking the marketing consent box on the signup form. You can withdraw your consent at any time by unsubscribing (link at the bottom of every email) or by emailing me.

Reader gift downloads

If you sign up to receive a reader gift such as Fire in the Woods or the Saltmere epilogues, your email address is shared with BookFunnel, the book delivery service Olewydd uses. BookFunnel sends the file to you and provides reading-app support if you need it. They may keep your email on file for delivery and support purposes.

People who email me

If you contact me at hello@toriahowell.com, I'll have your email address and whatever you choose to put in the email. I use this only to respond to you and to keep a record of our correspondence.

My lawful basis for this is legitimate interests — specifically, my interest in being able to respond to people who get in touch.

Website visitors

Olewydd's website is hosted by Squarespace, which collects basic technical information about visitors automatically. This includes things like the pages you visit, how you arrived at the site, your approximate location (based on IP address), what kind of device and browser you're using, and how long you spend on each page. This information helps me understand how the site is being used and keep it running.

The lawful basis is legitimate interests — specifically, Olewydd's interest in understanding and improving how the site works.

Pinterest tracking

Olewydd has the Pinterest tag installed on the website. This is a small piece of code that allows Pinterest to see when visitors who arrived from Pinterest interact with the site. It helps me understand whether Pinterest content is bringing readers to my books, and may be used to show relevant content on Pinterest.

This involves a cookie being set in your browser. You can refuse or delete this cookie via your browser settings, or via Pinterest's own privacy controls.

The lawful basis is your consent, which you give via the cookie banner on the site. You can withdraw consent at any time by clearing your cookies or using the cookie controls.

Instagram feed

The website displays a feed pulled from my Instagram account. When this loads, your browser may exchange information with Instagram (Meta), and Meta may set their own cookies. Olewydd has no control over what Meta does with this — please see Meta's privacy policy for details.

The companies Olewydd shares your data with

Olewydd uses a small number of third-party services. Each acts as a data processor on Olewydd's behalf, and each has its own privacy policy you can read:

Olewydd also uses Google Search Console, which provides anonymised data about which Google searches lead people to the site. Search Console does not track individual visitors and no personal data about you is shared through it.

International transfers

Some of the services Olewydd uses are based in the United States, which means your data may be transferred outside the United Kingdom. The companies involved in such transfers — Squarespace, Flodesk, BookFunnel, Pinterest, Meta, and Amazon — rely on the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement, or Standard Contractual Clauses to make these transfers lawful under UK GDPR. You can find the specific arrangements in each company's privacy policy linked above.

How long Olewydd keeps your data

Newsletter subscribers: Olewydd keeps your subscriber data for as long as you remain subscribed. If you unsubscribe, your contact information is retained on a suppression list (so you're not accidentally re-added) for up to 6 years, in line with HMRC record-keeping guidance for sole traders.

People who email me: I keep our correspondence for up to 2 years, unless we're in active conversation or the email contains information I need to keep for tax or legal reasons.

Website analytics: Aggregated visitor data is retained by Squarespace and Pinterest in line with their own retention policies (typically 14–26 months).

Your rights under UK GDPR

You have the following rights in relation to the personal data Olewydd holds about you:

  • The right to be informed — which this policy is for

  • The right of access — you can ask for a copy of the personal data Olewydd holds about you

  • The right to rectification — you can ask to have anything inaccurate corrected

  • The right to erasure — you can ask to have your data deleted

  • The right to restrict processing — you can ask to have certain uses of your data paused

  • The right to data portability — you can ask for your data in a portable format

  • The right to object — you can object to certain types of processing

  • The right to withdraw consent — you can withdraw consent for marketing at any time

  • The right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator

To exercise any of these rights, email me at hello@toriahowell.com and I'll respond within one calendar month.

If you're unhappy with how I've handled your data, you can complain to the ICO at ico.org.uk or by phone on 0303 123 1113.

Children's data

My books are written for adult readers and my mailing list is intended for adults. Olewydd doesn't knowingly collect personal information from children under 13. If you're a parent or guardian and you believe your child has given me personal information, please email me and I'll delete it.

ICO registration

As a sole trader using personal information solely for the marketing and administration of Olewydd, I'm exempt from paying the data protection fee to the Information Commissioner's Office. Olewydd remains fully bound by all other UK GDPR obligations.

Changes to this policy

I'll update this policy from time to time as my business evolves or as the law changes. The "last updated" date at the top tells you when it was last revised. For significant changes that affect how I use your data, I'll let active subscribers know by email.

Contact

If you have any questions about this policy or about your personal data, please email me at hello@toriahowell.com.