Privacy Policy

Last updated: 2026-01-08

At a glance

We only collect what’s needed to run Route 89: newsletter email (Kit), purchase and delivery info (Gumroad), messages you send us, and basic server logs for security. We don’t sell personal data and we don’t run advertising trackers.

Controller: Route 89
Email: bram@route89.be

What we collect

We collect the minimum data needed to run Route 89:

  • Newsletter (Kit): your email address (and optional name) when you subscribe
  • Purchases (Gumroad): name, email, and purchase/delivery details so you can access your product and we can support you (checkout is handled by Gumroad)
  • Messages: if you email us, we receive your email address and message content
  • Technical data: basic server logs (e.g., IP address, user agent) for security and reliability (via our hosting provider)

We do not store your full payment card details. Payments are handled by Gumroad and its payment providers.

Why we process it

We process personal data under these legal bases:

  • Consent: sending the newsletter (you can unsubscribe anytime)
  • Contract: delivering digital products and providing support
  • Legitimate interests: preventing abuse and keeping the site reliable

How we use your data

We use your data to:

  • Deliver downloads and purchased products
  • Send opt-in emails and important service updates
  • Measure newsletter engagement in aggregate (opens/clicks) to improve content (via tracking pixels and unique links in emails)

We don’t sell personal data. We don’t use it for advertising. We don’t make automated decisions with legal or similarly significant effects.

Cookies & similar technologies

We use only essential cookies/technical storage where necessary for basic functionality and security. We do not use advertising trackers.

Processors we use

We use the following providers:

  • Kit (newsletter delivery)
  • Gumroad (payments and digital product delivery; merchant of record)
  • Easyhost (website hosting)
  • Google Fonts (font delivery)

These providers process personal data under their own privacy policies. We use these providers to operate Route 89 (newsletter, payments, hosting).

To display our site typography, we load font files from Google’s servers (fonts.googleapis.com / fonts.gstatic.com). This may involve Google processing your IP address and basic device/browser information to deliver the font files. We don’t use Google Fonts for analytics or advertising and it does not set cookies on our site.

International transfers

Some providers may process data outside the EEA. Where applicable, transfers rely on adequacy decisions or Standard Contractual Clauses.

Retention

We keep data only as long as needed:

  • Newsletter data: until you unsubscribe or request deletion
  • Purchase/accounting records: retained as required by law and/or our payment provider
  • Server logs: retained for a limited period for security and reliability
  • Support emails: kept as long as needed to respond and maintain reasonable records

Data security

We use standard security measures (HTTPS, access controls, backups). No method of transmission or storage is 100% secure, but we work to protect your data.

Your rights

If you’re in the EU/EEA, you can request:

  • Access
  • Rectification
  • Deletion
  • Restriction
  • Portability
  • Objection

You can withdraw consent at any time for the newsletter (unsubscribe link in every email). You can also lodge a complaint with your local data protection authority. We may need to verify your identity before fulfilling a request.

To exercise your rights, email bram@route89.be with the subject “Privacy”.

Changes to this policy

We may update this policy. The date at the top shows the current version.