Niche of One Privacy Policy

Learn how Niche of One collects, uses, and protects your data.

Privacy Policy for Niche of One

Effective Date: July 29, 2025

Welcome to Niche of One (https://nicheof.one)! This Privacy Policy explains how Niche of One ("we," "us," or "our") collects, uses, stores, and shares your information when you visit our website, subscribe to our content, or become a member.

We are committed to protecting your privacy and being transparent about our data practices. As the owner and operator of Niche of One, we act as the Data Controller for the information collected on our website. Ghost CMS, the platform we use, acts as a Data Processor under our instructions.

By using Niche of One, you agree to the collection and use of information in accordance with this policy.

TL;DR Summary: We collect your email (and optional name) to provide content and manage memberships. If you pay, Stripe handles your payment info securely; we don't store it. We internally track how you engage with our content to improve our site. We don't track data using third-party services like Google Analytics. We use essential cookies for site functionality. We share data only with necessary services (like Ghost and Stripe) and never sell your personal data. You have rights over your data, including access and deletion.

1. What Information We Collect

We collect various types of information to provide and improve our services to you.

a. Information You Provide Directly

When you interact with Niche of One, you may provide us with the following personal information:

Email Address: Required when you subscribe to our newsletter or become a member (free or paid). This is our primary identifier for your account.
Name (Optional): You may choose to provide your name when signing up or updating your profile.
Payment Information: If you opt for a paid membership, payment details (such as credit card numbers) are collected and processed securely by our third-party payment processor, Stripe. We do not directly store your sensitive payment card information on our servers. We only retain a unique customer ID provided by Stripe to manage your subscription.
Custom Labels/Tags: If you are a member, we may apply internal labels or tags to your account to help us segment our audience (e.g., based on interests, engagement, or membership type).
Communications: Any information you provide when you communicate with us directly, such as through email or support inquiries.

b. Information Collected Automatically

When you visit or interact with Niche of One, certain information is automatically collected by the Ghost CMS platform and our web server.

Member Activity Data: For logged-in members, Ghost collects data related to your engagement with our content and newsletters, including:
- Newsletter Opens: Whether you opened a specific newsletter email.
- Newsletter Clicks: Which links you clicked within a newsletter.
- Post Views: For members-only content, whether you have viewed specific posts.
- Conversion and Referral Sources: How you discovered our website or a specific piece of content that led to your signup or paid conversion.
Technical Data: Our web server (which runs Ghost) may log certain technical information, such as:
- IP Address: The Internet Protocol (IP) address of the device you use to access our website. (Note: While our web server logs IP addresses for security and diagnostic purposes, Ghost itself does not store these in its member database by default.)
- Browser Type and Version: Information about the web browser you are using.
- Operating System: The operating system of your device.
- Device Information: Type of device used (e.g., desktop, mobile).
- Referrer URL: The website you came from before visiting Niche of One.
Gravatar Information (if enabled): If Gravatar is enabled on our site, your email address may be used to fetch your globally recognized avatar from the Gravatar service. This means your email address is shared with Gravatar for this purpose. If you prefer not to have your email shared with Gravatar, please inform us, or ensure your Gravatar settings are adjusted accordingly.

c. Cookies

Niche of One uses "essential cookies" to ensure the proper functioning of our website, particularly for member authentication and site security. These cookies are small data files stored on your device.

Admin Authentication Cookies: Used to keep website administrators logged into the Ghost Admin dashboard.
Member Authentication Cookies: Used to keep members logged in so they can access members-only content and maintain their session.
Private Site Authentication Cookies: If our site (or a section of it) is password-protected, a cookie is used to remember your authentication.

These cookies are "strictly necessary" for the website to provide the services you request and generally do not require explicit consent under privacy regulations like GDPR. We do not use analytical or marketing cookies unless explicitly stated otherwise (and if we did, we would implement a consent mechanism).

2. How We Use Your Information

We use the information we collect for the following purposes:

To Provide and Manage Our Services: To create and manage your member account, deliver newsletters and content, and provide access to members-only areas.
To Process Payments: To facilitate and manage your paid subscriptions through Stripe.
To Communicate With You: To send you important updates, transactional emails (e.g., welcome emails, password resets, payment confirmations), and newsletters you have subscribed to.
To Personalize Your Experience: To tailor content and recommendations based on your subscription status and engagement with our publications.
To Analyze and Improve Our Website: To understand how our audience engages with our content and services, identify popular topics, track conversion rates, and make informed decisions to improve Niche of One.
For Security and Fraud Prevention: To protect our website and users from unauthorized access, fraud, and other malicious activities.
To Comply with Legal Obligations: To meet any applicable legal or regulatory requirements.

We share your information only in limited circumstances and with trusted third parties necessary to operate our services:

Ghost CMS: As our underlying platform, Ghost processes data on our behalf to operate the website, manage members, and send emails.
Stripe: For all paid memberships, your payment information is shared directly with Stripe for secure processing. Stripe's own Privacy Policy governs their use of your data.
Gravatar (if enabled): As mentioned, if Gravatar is enabled, your email address is shared with Gravatar to display your avatar.
Other Third-Party Services: We do NOT use other third-party services for specific functionalities (e.g., advanced analytics, comment systems, email marketing beyond Ghost's native features). If we integrate such services in the future, we will ensure they comply with relevant privacy standards and will update this policy accordingly.
Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

We do not sell your personal data to third parties.

4. How We Store and Protect Your Information

We take the security of your data seriously.

Secure Storage: Your data is stored on secure servers. Ghost CMS implements industry-standard security practices, including SSL certificates (for encrypted connections), password hashing (using bcrypt), data validation, and automated security updates.
Stripe Security: Stripe is a PCI-compliant service provider, ensuring the highest level of security for your payment information.
Data Location: Our servers store data primarily in the EU and the US.
Retention: We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. If you request account deletion, we will delete your data within a reasonable timeframe, subject to any legal retention requirements.

5. Your Data Protection Rights

Depending on your location and applicable data protection laws (such as GDPR or CCPA), you may have the following rights regarding your personal data:

Right to Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure ("Right to be Forgotten"): You have the right to request that we erase your personal data under certain conditions.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Object to Processing: You have the right to object to our processing of your personal data under certain conditions.
Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
Right to Withdraw Consent: If we are relying on your consent to process your personal data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within a reasonable timeframe and in accordance with applicable laws.

6. Third-Party Websites and Services

Niche of One may contain links to other websites or services that are not operated by us. This Privacy Policy applies only to our website. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party websites you visit.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically for any changes.

8. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

By Email: contact@joeforrest.com