3thought.

Privacy Notice.

Website privacy notice · Last updated: 17 June 2026

1Introduction

This privacy notice explains how we collect and process your personal data through your use of our website at 3thought.net, including when you subscribe to our publication or otherwise interact with us online.

By providing us with your data, you confirm that you are at least 18 years of age.

3thought Ltd, a company registered in England and Wales under company number 17130105, trading as 3thought, is the data controller and is responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice).

Contact details

Company: 3thought Ltd (registered in England and Wales, company number 17130105)

Trading name: 3thought

Email: support@3thought.net

Website: 3thought.net

Registered office: Suite RA01, 195-197 Wood Street, London, E17 3NU

It is important that the information we hold about you is accurate and up to date. Please let us know if your personal information changes by emailing us at support@3thought.net.

2What data we collect, why we collect it, and our legal basis

Personal data means any information capable of identifying an individual. It does not include anonymised data. We process the following categories of personal data about you:

Communication Data

This includes any communication you send us, whether by email, social media or through the contact form on our website. We process this data to reply to your communications and maintain appropriate records.

Our lawful basis is legitimate interests: specifically, to respond to enquiries and maintain records relating to our business and publication.

Subscriber and Customer Data

When you subscribe to 3thought, we collect your name, email address, and payment details (processed via Stripe). We process this data to:

• provide your subscription;
• manage your account;
• deliver your articles;
• administer billing and free trial mechanics;
• maintain transaction records; and
• provide subscriber support.

Our lawful basis is performance of a contract between you and us.

User Data

This includes data about how you use our website and interact with our emails, including engagement data such as email opens, clicks and interactions where available. We process this data to:

• operate and improve our publication;
• understand subscriber engagement;
• improve delivery and readability;
• diagnose technical issues; and
• administer our website and publication effectively.

Our lawful basis is legitimate interests.

Technical Data

This includes your IP address, browser type, device information, time zone settings, and page navigation data collected through analytics systems and cookies. We process this data to:

• monitor website performance;
• improve website functionality;
• maintain security; and
• understand how our website is used.

Our lawful basis is legitimate interests.

Marketing and Preference Data

This includes your communication preferences and records of whether you have opted out of marketing communications. We process this data to ensure we contact you only in ways you have agreed to or which are otherwise permitted under applicable law.

Our lawful basis is legitimate interests or, where required, consent.

We do not collect any sensitive personal data, including information relating to health, ethnicity, religious beliefs, political opinions, sexual orientation, trade union membership, or genetic or biometric data.

We do not carry out automated decision-making or automated profiling.

We will only use your personal data for the purpose for which it was collected or for a reasonably compatible purpose. If we need to use your data for a different purpose, we will notify you and explain the legal basis for doing so.

3How we collect your personal data

We collect personal data in the following ways:

Directly from you

When you subscribe to 3thought, complete a form on our website, or contact us by email or social media.

Automatically

When you visit our website, we may collect Technical Data through cookies and similar technologies. Please see our Cookie Policy for further details.

From third-party service providers

We use third-party providers to help operate 3thought, including:

• Beehiiv — our publication, subscriber management and email delivery platform;
• Stripe — our payment processor; and
• Rewardful — our affiliate tracking platform.

These providers may process your personal data on our behalf.

From analytics providers

We may receive analytics and usage information from providers that help us understand how our website and publication are used.

4Marketing communications

Our lawful basis for processing your personal data to send marketing communications is either your consent, or our legitimate interests in growing and developing 3thought.

Under the Privacy and Electronic Communications Regulations (PECR), we may send you marketing communications if you have purchased a subscription from us or requested information about our publication, and you have not opted out of receiving such communications.

If you are a limited company, we may send marketing emails without prior consent, though you may opt out at any time.

We will never sell your personal data or share it with third parties for their own marketing purposes without your express consent.

You can opt out of marketing communications at any time by clicking the unsubscribe link in any email we send, or by emailing us at support@3thought.net. Please note that opting out of marketing communications does not affect service-related emails required to administer or deliver your subscription.

5Disclosures of your personal data

We may share your personal data with the following categories of third parties:

• Beehiiv — our publication and subscriber management platform;
• Stripe — our payment processor;
• Rewardful — our affiliate tracking provider;
• professional advisers including lawyers, accountants and insurers;
• government authorities where required by law; and
• purchasers or successors in the event of a sale, transfer or restructuring of our business.

We require all third parties to respect the security of your personal data and to process it in accordance with applicable law and our instructions.

6International transfers

Some of our third-party providers are based outside the United Kingdom, including in the United States. In particular:

• Beehiiv processes subscriber and engagement data in the United States;
• Stripe processes payment and billing data in the United States; and
• Rewardful processes referral and affiliate tracking data in the United States.

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place to protect your data to standards substantially equivalent to those under UK data protection law. These safeguards may include UK adequacy regulations, International Data Transfer Agreements (IDTAs), Standard Contractual Clauses, or other approved transfer mechanisms.

7Data security

We have implemented appropriate security measures designed to prevent your personal data from being accidentally lost, used, altered, disclosed or accessed without authorisation. Access to personal data is limited to those who have a legitimate business need to access it.

We also have procedures in place to respond to suspected personal data breaches and will notify the Information Commissioner’s Office (ICO) and affected individuals where legally required.

8Data retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting and reporting obligations.

For tax and legal purposes, we are generally required to retain basic customer and transaction records for six years after the end of the relevant relationship.

Subscriber engagement data held through Beehiiv may be retained while your subscription remains active and for a reasonable period afterwards where necessary for legal, operational or record-keeping purposes.

Where possible, we may anonymise data for research, analytics or statistical purposes, in which case it may be retained indefinitely.

9Your legal rights

Under UK data protection law, you have rights including:

• the right to access your personal data;
• the right to correct inaccurate data;
• the right to request erasure of your data;
• the right to restrict processing;
• the right to data portability;
• the right to object to processing based on legitimate interests; and
• where processing is based on consent, the right to withdraw consent at any time.

Further information about your rights is available from the Information Commissioner’s Office at ico.org.uk. To exercise any of your rights, please contact us at support@3thought.net. We will respond to legitimate requests within one month.

If you are dissatisfied with how we process your personal data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the opportunity to address your concerns first before you contact the ICO.

10Third-party links

Our website may contain links to third-party websites, applications or services. We do not control those third-party services and are not responsible for their privacy practices. We encourage you to read the privacy notice of every website you visit.

11Cookies

We use cookies and similar technologies to improve website functionality, understand how visitors use our website, analyse subscriber engagement, and support publication and affiliate tracking functionality.

Some cookies are essential to the operation of the website. Others, including analytics and tracking cookies, may require your consent depending on how they are used. You can control cookies through your browser settings and, where applicable, through our cookie consent tools. Please note that disabling cookies may affect the functionality of certain parts of our website.

Beehiiv and other third-party providers may also set cookies in connection with publication analytics, subscriber activity and referral tracking. For further details, please see our Cookie Policy at 3thought.net/cookies.

12Automated access and scraping

Unauthorised automated access, scraping, harvesting or extraction of content or subscriber data from our website, publication or associated systems is prohibited. We reserve the right to take technical and legal measures to protect our intellectual property, subscriber data and platform integrity.