“I want to let you know that simplelists.com is terrific. User-friendly, helpful, and powerful.”
Nancy Noyes, Maryland, United States
“I just can't say enough good things about this email list service. Thanks for everything!”
Brian Deem, Minnesota, United States
“Simplelists is an amazing tool that is very fast and efficient. The company is incredible to work with.”
Tom Wachs, Kansas, United States
“Simplelists ROCKS!”
Matt Pellowski, Minneapolis, United States
those employees, agents, list members and independent contractors of the Customer who are authorised by the Customer to use the Services.
BUSINESS DAYa day other than a Saturday, Sunday or public holiday in England when banks in London are open for business.
CHANGE OF CONTROLthe beneficial ownership of more than 50% of the issued share capital of a company or the legal power to direct or cause the direction of the general management of the company, and controls, controlled and the expression change of control shall be construed accordingly.
CONFIDENTIAL INFORMATIONinformation that is proprietary or confidential and is either clearly labelled as such or identified as Confidential Information in clause 11.
CONTRACTthe provision of the Services in accordance with these Terms.
CUSTOMERthe person identified as the “Customer” who registered for the Service and pays the charges.
CUSTOMER DATAthe data inputted by the Customer, Authorised Users, or the Supplier on the Customer’s behalf for the purpose of using the Services or facilitating the Customer’s use of the Services.
DOCUMENTATIONthe document made available to the Customer by the Supplier online via https://www.simplelists.com or such other web address notified by the Supplier to the Customer from time to time which sets out a description of the Services and the user instructions for the Services.
INITIAL SUBSCRIPTION TERMthe initial term of the Contract as defined by the length of the subscription purchased.
INITIAL SUBSCRIPTIONSthe initial amount of Subscriptions which the Customer has purchased.
RENEWAL PERIODthe period that the Customer makes payments for the Service.
SERVICE COMMENCEMENT DATEthe date that the Customer registers for an account.
SERVICESthe subscription services to be provided by the Supplier to the Customer for the purposes of email forwarding and related services.
SOFTWAREthe online software applications, access to which is provided by the Supplier as part of the Services.
SPAMany of but not limited to: sending unsolicited mail messages ("junk mail") or other advertising material to individuals who did not specifically request such materials; the forging of mail header information.
SUBSCRIPTION FEESthe subscription fees payable by the Customer to the Supplier for the Subscriptions.
SUBSCRIPTIONSthe subscriptions purchased by the Customer which entitle Authorised Users to access and use the Services in accordance with the Contract.
SUBSCRIPTION TERMhas the meaning given in clause 14.2 (being the Initial Subscription Term together with any subsequent Renewal Periods).
SUPPLIERSimplelists.com of BCM6673, London, WC1N 3AX.
TERMSthe terms and conditions set out in this document as amended from time to time.
Virusany thing or device (including any software, code, file or programme) which may: prevent, impair or otherwise adversely affect the operation of any computer software, hardware or network, any telecommunications service, equipment or network or any other service or device; prevent, impair or otherwise adversely affect access to or the operation of any programme or data, including the reliability of any programme or data (whether by re-arranging, altering or erasing the programme or data in whole or part or otherwise); or adversely affect the user experience, including worms, trojan horses, viruses and other similar things or devices.
Email list hosting and mailing list distribution
Duration of the processingFor the length of time that the Customer has an active account
Nature and purpose of the processingThe collection, recording, storage and retrieval of data related to list members. The collection, recording, storage, retrieval and dissemination of list emails to list members.
Type of personal dataName, email address and related notes of list members. Emails distributed via email lists.
Categories of data subjectList members of Simplelists
Plan for return and destruction of the data once the processing is completeData will be destroyed one year after a Customer's Simplelists account has expired. A customer may request the return of the data at any time before this.
This Privacy Policy will help you understand what information we collect from you and process using this website, how we obtain it, and what choices and rights you have about your personal data. When we refer to “Simplelists” within this Privacy Policy, we are referring to Simplelists.com of BCM6673, London, WC1N 3AX, the company which provides the email list hosting services, the associated websites, and any associated services or features which may be made available to you from this website.
Simplelists is based within the United Kingdom, and as such is registered with the Information Commissioner’s Office (ICO) as a Data Controller under the UK Data Protection Act of 1998 (Z9414171). We have also aligned this Privacy Policy with the EU General Data Protection Regulation 2016/679 (GDPR) which comes into effect on 25th May 2018, under the supervision of the ICO within the UK.
You may decide to send us your personal information via this website if you are seeking more information, requesting a demonstration or trial of one of our services, or for other similar business administration or support purposes. Your decision to disclose your personal data is entirely voluntary, and by doing so, you are providing us with specific consent to use your personal data only in relation to the specific purposes for which you have disclosed it to us. Simplelists may access and use your Customer Data only for the purposes for which you have submitted it to us to (a) provide information to you, (b) contact you, (c) provide services to you, or (d) maintain the operations and security of the website and services we provide to you. We will not use your personal information for any other purposes, for example the communication of marketing material, unless we have your specific consent to do so. We will always handle and store your personal data in accordance with industry best practice aligned with ISO27001, the international standard for information security. This includes the activities and procedures undertaken by our own personnel and any third parties (see "Declaration of Sub-Processing" section below), and the technical controls which we have implemented to prevent the unauthorised access, compromise or theft of information from our applications, supporting computer systems and premises.
We do not sell, loan, lease, give away, share or in any other way make your personal information or your Simplelists list address, or your list members details and email addresses, available to parties other than Simplelists.com, except to comply with law or legal processes. The people who have permission to send messages to your list is controlled entirely by you, in accordance with your list settings.
We will not monitor or disclose the contents of your email list, except when required to by law, or when required to do so in the course of system maintenance, or when requested by the Customer. We do store email messages coming through our servers, but only for the purpose of displaying the messages in the Archives feature, or for debugging in the event of a problem. Access to messages that have been stored is only available to system administrators in the course of their duty, or through Archives pages (should they be enabled for your list). If you wish your messages to never be recorded, please contact Support, although in any case we will keep a message should there be a problem with the forwarding address, and attempt delivery for a maximum of 5 days, after which time the message will be returned to the list owner.
GDPR specifies a set of personal data categories which are “sensitive”, and which require special consideration by Data Controllers. This website, and any services available from this website, do not knowingly collect or process any sensitive personal data.
This website, and any services available from this website, are not directed to children under the age of 13. If you learn that a child under the age of 13 has provided us with their personal information without having parental consent, please contact us immediately so that we can take appropriate action.
As prescribed within data protection regulations, you have several rights connected to the provision of your personal data to Simplelists using this website. These include your rights to request that we:
To contact Simplelists, please see the "about" section on our website. If we do not properly address your request, or fail to provide you with a valid reason we are unable to do so, you have the right to contact the Information Commissioner’s Office to make a complaint. They can be contacted via their website (www.ico.org.uk).
To make an informed decision on whether to provide your personal data to Simplelists using this website, we need to make you aware of any organisations that act as Data Processors for us in the provision of our services to you. Details of these are contained in our separate GDPR Statement available on our website.
The activities within which each of these Data Processors participates are available upon request by contacting us.
This website uses cookies to record log data. We use both session-based and persistent cookies, dependent upon how you use or interact with our website. Cookies are small text files sent by us to your computer, or from your computer or mobile device to us each time you visit our website. They are unique to you or your web browser. Session-based cookies last only while your browser is open and are automatically deleted when you close your browser. Persistent cookies last until you or your browser delete them, or until they expire. We use cookies which are not specific to your account but are unique and allow us to undertake website analytics and customization, among other similar things. If you decide to disable some or all cookies, you may not be able to use some of the functions on our website. We may use third-party cookies, for example Google Analytics, and you may choose to opt-out of third party cookies from their website.
This website may include relevant hyperlinks to external websites not controlled by Simplelists. Whilst all reasonable care has been exercised in selecting and providing you with such links, you are advised to exercise caution before clicking any external links. We cannot guarantee the ongoing suitability of external links, nor do we continually verify the safety or security of the contents which may be provided to you. You are advised, therefore, that your use of external links is at your own risk and we cannot be responsible for any damages or consequences caused by your use of them.
We may change this Privacy Policy from time to time, and if we do we will post any changes on this page. If you continue to access this website or use services available from this website after those changes have come into effect, you will have agreed to the revised policy.
If you have any questions about this Privacy Policy, would like to exercise any of your statutory rights, or to make a complaint, please write to: Simplelists.com, BCM 6673, London, WC1N 3AX or email: support@simplelists.com
The UK’s data protection framework is changing on 25th May 2018, when the existing Data Protection Act 1998 will be replaced with the European Union General Data Protection Regulation (“GDPR”) (2016/679). Whilst the UK will soon be leaving the EU, the replacement data protection legislation being progressed through Parliament is very closely aligned to the requirements of GDPR.
Simplelists.com (“Simplelists”) provides email list hosting services to its customers, and as such is responsible for the secure and compliant processing of personal data related to our customers, as well as the protection of our customers’ information (which may include personal data) whilst it is being processed by one of our system. This GDPR statement has been prepared to provide key information about these various personal data processing activities to our customers.
Article 25 of GDPR requires that data processing activities (e.g. the Simplelists software solution) provide data protection by design and default. Simplelists has achieved this requirement by ensuring that its application has been designed in accordance with industry best practice, using trusted technologies, and has been subject to penetration testing to ensure that vulnerabilities are being properly managed, and configurations remain effective.
Simplelists utilises resilient UK data centres which are subject to formal ISO27001 certification. Unless we have entered into a specific agreement with a customer to host their instance of Simplelists in a non-UK country, we commit that all personal data processing is undertaken within the United Kingdom, under the prevailing UK data protection framework.
Article 35 of GDPR requires that formal Data Protection Impact Assessments (“DPIA”) are undertaken by organisation where there is a “high risk to the rights or freedoms of natural person”. Simplelists has assessed that there are no high risks to individuals who may purchase or use our software solution.
Article 6 of GDPR requires that the lawfulness of data processing be advised. Simplelists uses “legitimate interests” as the basis for the secure processing and storage of its customer data in order to deliver the Simplelists software solution to them. This includes the communication of information related to our solution or similar matters. We occasionally communicate with non-customers and will only do so based upon the “explicit consent” which we have been provided with by the data subject, either through a positive confirmation on a web form, or by their communication preferences shared from social media channels. We provide clear methods for data subjects to remove or vary their consent if they wish to do so.
Article 28 of GDPR requires that our customers should formally communicate their data processing requirements to Simplelists (as their data processor). In the event that a customer does not provide such written instructions to Simplelists (a) this omission does not remove their obligation to do so, and (b) Simplelists will deliver the software solutions in accordance with its published service definitions and other related materials.
Simplelists acts as:
Each customer is responsible for ensuring that they have an appropriate legal basis for processing personal data within a Simplelists software solution and will fully indemnify Simplelists in the event of any claim of any sort being brought for not having a valid basis.
The Simplelists software solution is not directed towards children under the age of 13. If you learn that a child under the age of 13 has provided their personal information to us without having parental consent, please contact us immediately so that we can take appropriate action. In accordance with Section 5 above, should a Simplelists customer select to upload children’s personal data into their deployment of a Simplelists software solution then they will be required to evidence that the have a valid legal basis for doing so.
Article 9 of GDPR specifies a set of personal data categories which are considered to be “sensitive”, and which require special consideration by Data Controllers. The software solutions provided by Simplelists does not knowingly collect or process any sensitive personal data. In accordance with Section 5 above, should a Simplelists customer select to upload sensitive personal data into their deployment of the Simplelists software solution then they will be required to evidence that the have a valid legal basis for doing so.
Articles 16-21 of GDPR provide data subjects with several rights in relation to their personal data, including:
Where Simplelists is acting as Data Controller (see 4(a) above), then it will receive, validate, record, progress and respond to any such data subject requests received.
Should Simplelists, acting as Data Processor (see 4(b) above), then it will advise the applicant of the customer’s details that should be used to make their request. As a responsible Data Processor, Simplelists will assist its customers with complying with valid requests.
Should a data subject decide to exercise their rights, they should contact Simplelists as below.
Simplelists confirms its use of:
Simplelists confirms that:
Simplelists confirms that it securely retains and manages data which records the use of our software solutions, including user credentials and IP addresses. Should a customer require assistance with information contained within our data processing records, please contact us as below.
We actively monitor our software solutions for unusual activities and issues, which includes indications of data breaches. Simplelists will promptly act to notify either the customer or the ICO (as applicable to our role) in the event of a data breach being suspected (as per Article 33), and if acting as Data Controller will also inform affected data subjects (as per Article 34).
It remains the customer’s responsibility to remove all personal data prior to terminating their service provision with Simplelists. Should the customer not do this, then Simplelists will securely purge their data at the point when the resources are to be redeployed – but this does not take place instantly and customers are strongly recommended to (a) remove their own personal data beforehand, or (b) contact Simplelists Support if assistance is needed to do this
All Simplelists personnel are based within the EU and receive regular, formal instruction in matters relating to information security and data protection. Those with specific roles relating to the management of risk assessments, data protection impact assessments, data subject rights and incident management receive more focused training.
Simplelists will submit to audits and inspections, and provide the Customer (as the Controller) with whatever information it needs to ensure that we are both meeting our Article 28 obligations. Simplelists will tell the controller immediately if it is asked to do something infringing the GDPR or other data protection law of the EU or a member state.
Simplelists software solutions may include relevant hyperlinks to external websites not controlled by us. Some links may be added by list members by sending emails to lists and being displayed in archives. As such, you are advised to exercise caution before clicking any external links. We cannot guarantee the ongoing suitability of external links, nor do we continually verify the safety or security of the contents which may be provided to you. You are advised, therefore, that your use of external links is at your own risk and we cannot be responsible for any damages or consequences caused by your use of them.
Simplelists is registered with the Information Commissioner’s Office under the UK Data Protection Act 1998 – registration number Z9414171 applies.
If a Simplelists customer or data subject believes that Simplelists has not delivered upon its obligations under GDPR, they have a right to make a compliant to the ICO. They can be reached by using the contact form on their website.
BCM 6673, London, WC1N 3AX
Email: support@simplelists.com