Capital Lessons

Privacy Policy

Last updated: October 28, 2026

This policy explains what personal data Capital Lessons collects when you visit capitalessons.com, subscribe to our emails or write to us, and what you can do about it. We collect as little as we can.

Who is responsible for your data

The data controller is Capital Lessons, based in Portugal.

Contact for anything related to privacy: hello@capitalessons.com. Please write “Privacy request” in the subject line.

Because Capital Lessons is based in the European Union, the General Data Protection Regulation (GDPR) applies.

What we collect and why

When you subscribe to our emails

What: your email address, your subscription status (for example, whether you confirmed, unsubscribed or an email bounced), the date and details of your sign-up and confirmation, and which emails were delivered, opened or clicked.

Why: to send you the five-day series of market stories and then The Weekly Chapter, to confirm that you really asked to subscribe, to respect your unsubscribe, and to understand which stories are useful.

Legal basis: your consent (GDPR Article 6(1)(a)). You give it when you tick the consent box on the sign-up form, and you confirm it by clicking the link in our confirmation email. You can withdraw it at any time with the unsubscribe link in every email. After you unsubscribe, we may keep your email address on a suppression list so we don’t email you again by mistake. That is based on our legitimate interest in respecting your choice (Article 6(1)(f)).

Our emails are sent with ActiveCampaign, which stores this data for us. We measure which emails are opened and which links are clicked so we can learn which stories help. The sign-up form tells you this before you subscribe.

We don’t use ActiveCampaign’s site tracking, so ActiveCampaign doesn’t follow your visits to our website.

When you visit the website

Analytics. We use Google Analytics 4 to understand which pages are read and how people move through the site. It runs only if you accept analytics cookies in the consent banner. It collects information such as pages visited, approximate location, device and browser type, and how you arrived at the site. We don’t send your name or email address to Google Analytics. Legal basis: your consent (Article 6(1)(a)). You can change your choice at any time through Cookie settings.

Hosting and security. The site is hosted on Cloudflare. When you load a page, Cloudflare processes technical data such as your IP address, browser information and the time of the request, so the site can be delivered and protected from abuse. Legal basis: our legitimate interest in running a secure, working website (Article 6(1)(f)).

When you email us

What: your email address, your name if you include it, and whatever you write.

Why: to read and answer your message, fix errors you report, and handle privacy requests.

Legal basis: our legitimate interest in answering messages and keeping the site accurate (Article 6(1)(f)), or a legal obligation when you exercise your GDPR rights (Article 6(1)(c)).

What we don’t do

We don’t sell your personal data. We don’t use it for advertising profiles. Capital Lessons has no user accounts and no comments, and we don’t ask for payment details.

Service providers

We use a small number of providers to run the site, the newsletter and our inbox:

  • ActiveCampaign: email subscriptions and sending.
  • Google (Google Analytics 4): website analytics, only with your consent.
  • Cloudflare: website hosting and security.
  • Our email provider: receiving and storing the messages you send to us.

When you click a link to another website, including an affiliate link, that website’s own privacy policy applies. The partner may record that you arrived from Capital Lessons. See our Affiliate Disclosure.

International transfers

Some of our providers are based in the United States. ActiveCampaign, Cloudflare and Google are each certified under the EU-U.S. Data Privacy Framework, which the European Commission recognizes as providing an adequate level of protection for personal data sent to certified companies. We rely on that framework when your data is transferred to them. If ActiveCampaign stops being certified, we rely on the Standard Contractual Clauses approved by the European Commission in our agreement with ActiveCampaign.

How long we keep your data

  • Subscription data: while you are subscribed, and for up to 30 days after you unsubscribe. After that, we keep only your email address on a suppression list so we can keep respecting your unsubscribe.
  • Analytics data: Google Analytics keeps user-level and event-level data for 2 months after your last visit. Each new visit restarts that period. After that, only aggregated reports remain.
  • Technical logs: kept by Cloudflare for the period set in its own policies.
  • Emails you send us: up to 24 months, unless we need them longer to handle a request or a legal obligation.

Strictly necessary technologies, for example those used for security or to remember your cookie choice, are used without consent because the site needs them to work. Analytics cookies are set only after you accept them, and you can withdraw that consent at any time through Cookie settings. Refusing analytics doesn’t limit what you can read.

The full list of cookies, who sets them and how long they last:

  • cc_cookie: set by us (capitalessons.com). Stores your cookie choice. Lasts 182 days. Strictly necessary.
  • _ga: set by Google Analytics 4 (Google). Tells users apart for aggregate statistics. Lasts 13 months. Only if you accept analytics.
  • _ga_33H0G1F3HZ: set by Google Analytics 4 (Google). Keeps the session state for our analytics property. Lasts 13 months. Only if you accept analytics.

Your rights

Under the GDPR, you can ask to:

  • access the personal data we hold about you;
  • correct data that is wrong;
  • delete your data;
  • restrict or object to how we use it;
  • receive your data in a portable format;
  • withdraw your consent at any time, without affecting what was done before.

To use any of these rights, email hello@capitalessons.com. We may need to confirm that the request comes from you. We answer within one month, as the GDPR requires, or tell you if we need more time and why.

You also have the right to complain to a supervisory authority. In Portugal, that is the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt. We’d appreciate the chance to fix the problem first, so feel free to contact us before you file a complaint.

Children

Capital Lessons is written for adults. It isn’t directed at children, and we don’t knowingly collect personal data from anyone under 18. If you believe a child has subscribed, contact us and we will delete the data.

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top. If a change is significant, we will tell subscribers by email before it applies.

Contact

Questions about this policy or your data: hello@capitalessons.com.