The Runbook

Privacy Policy

Last updated: 22 September 2026

Introduction and our commitment to privacy

Silicon Biztech Limited, trading as GoZupees ("GoZupees," "we," "us," or "our"), is the operator of runbook.fm and is committed to protecting the privacy and security of personal information entrusted to us by our readers, listeners, and subscribers. runbook.fm is a podcast and newsletter about how AI systems get shipped in production, and we understand that privacy protection is fundamental to maintaining the trust of the audience we serve.

This Privacy Policy explains how we collect, use, protect, and share personal information when you visit runbook.fm, subscribe to our newsletter, or otherwise engage with the site. We have designed our privacy practices to comply with applicable data protection laws including the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018.

We recognise that privacy protection is an ongoing responsibility that requires continuous attention to evolving technologies, changing business practices, and developing legal requirements. We regularly review and update our privacy practices to ensure they remain effective and appropriate for the audience we serve.

Information we collect and how we collect it

The personal information we collect depends on how you interact with runbook.fm, and generally includes information that you provide directly to us and limited technical information that we process automatically when you use the site.

Information you provide directly

When you subscribe to the newsletter, we collect your email address, which is required. You may also optionally provide your name, role, and company. We use this information to send you the newsletter and related updates about the show, and to understand who our readers are so we can improve the content.

If you contact us by email or through any other channel, we collect the information you choose to provide, which typically includes your name, email address, and the content of your communications with us. We use this information to respond to your inquiries and maintain records of our communications.

Information collected automatically

When you use the site, we process your IP address transiently for the sole purpose of rate-limiting the subscribe endpoint against abuse. We do not store IP addresses, and we do not link them to your subscriber record. Server access logs are retained only for as long as required to diagnose service issues and are not used for profiling.

How we use personal information

We use personal information only for the legitimate purposes that enable us to run runbook.fm and communicate with the people who have signed up. Our use of personal information is guided by principles of data minimisation, purpose limitation, and transparency.

Delivering the newsletter and running the site

We use subscriber information to deliver the newsletter, send related updates about new episodes and the show, and understand reader interests in aggregate so that we can improve the content. We use technical information such as transient IP addresses to keep the site secure and available.

Communication and marketing

We may use personal information to send you the newsletter and invite you to occasional events or briefings that may be of professional interest. Every email we send includes a clear option to unsubscribe, and we provide easy ways for anyone who prefers not to receive further communications to opt out.

Legal compliance and security

We also use personal information to comply with legal obligations, protect our legitimate business interests, and ensure the security and integrity of the site. This includes maintaining records required by applicable laws and regulations, protecting against fraud and security threats, and enforcing our terms of use.

Under applicable data protection laws, we must have a lawful basis for processing personal information. The legal basis for our processing depends on the specific personal information involved and the context in which we collect and use it.

When you subscribe to the newsletter, we rely on your consent as the legal basis for sending you the newsletter and related communications. Consent is freely given, specific, informed, and you can withdraw it at any time by unsubscribing.

For rate-limiting the subscribe endpoint, keeping the site secure, and maintaining our service, we rely on our legitimate interests in operating runbook.fm safely. We balance these legitimate interests against the privacy rights and interests of individuals to ensure that our processing is appropriate and proportionate.

We may also process personal information when necessary to comply with legal obligations that apply to our operations, such as tax and accounting requirements and other legal requirements that apply to companies operating in the UK.

Information sharing and disclosure

We share personal information only when necessary for legitimate purposes and in accordance with applicable privacy laws. We do not sell personal information to third parties, and we implement appropriate safeguards to protect personal information when it is shared with others.

Service providers

We share personal information with a small number of service providers who help us run the site and deliver the newsletter:

  • A managed database provider, which hosts the subscriber record.
  • An email delivery provider, which sends the newsletter on our behalf.
  • A hosting provider, which serves the site itself.

When we share personal information with service providers, we implement appropriate contractual protections that require these providers to protect personal information in accordance with our privacy standards and applicable legal requirements. We limit the personal information shared to what is necessary for the specific services being provided, and we require service providers to use personal information only for the purposes specified in our agreements with them.

Legal requirements and business transfers

We may disclose personal information when required by law, such as in response to court orders or other legal processes, or when necessary to protect our legal rights, prevent fraud, or ensure the safety and security of the site. We evaluate such requests carefully and disclose only the information that is legally required, while notifying affected individuals when permitted by law.

In the event of a business transaction such as a merger, acquisition, or sale of assets, personal information may be transferred as part of the transaction. We would provide notice of such transfers and ensure that personal information continues to be protected in accordance with applicable privacy laws.

International data transfers

Some of our service providers operate outside the United Kingdom, which means personal information may be transferred across international borders in connection with running the site and delivering the newsletter. We implement appropriate safeguards to ensure that international transfers of personal information comply with applicable data protection laws and provide adequate protection for personal information.

For transfers of personal information from the United Kingdom to other countries, we rely on adequacy decisions issued by UK authorities when available, or implement appropriate safeguards such as Standard Contractual Clauses approved by relevant data protection authorities. We evaluate the privacy and security practices of our providers and implement contractual protections that ensure appropriate safeguards for international data transfers.

Data security and protection

We implement technical and organisational security measures to protect personal information from unauthorised access, use, disclosure, alteration, and destruction. Our security practices are designed to provide appropriate protection for the sensitivity of the personal information we hold and the risks associated with our operations.

Technical security measures

Technical security measures include encryption of personal information during transmission and storage, access controls that limit access to personal information based on business need and role responsibilities, network security controls that protect against unauthorised access and cyber attacks, and monitoring systems that detect and respond to potential security incidents.

Organisational security measures

Organisational security measures include team training and awareness that ensure the people who work on runbook.fm understand their responsibilities for protecting personal information, access reviews for anyone who has access to sensitive information, incident response procedures that enable rapid response to potential security breaches, and regular reviews that verify the effectiveness of our security controls.

Your rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to the personal information we hold about you:

  • The right to access the personal information we hold about you.
  • The right to correct any information that is inaccurate.
  • The right to have your personal information deleted.
  • The right to restrict or object to how we use it.
  • The right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
  • The right to receive your data in a portable form.
  • The right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email privacy@runbook.fm and we will respond within the time frames required by law.

Data retention

We retain your subscriber record for as long as you remain subscribed to the newsletter. If you unsubscribe, we keep the minimum record necessary to ensure we do not accidentally re-subscribe you. If you ask us to delete your data entirely, we will remove your record from our database in accordance with applicable legal requirements.

Technical logs are retained only for as long as required to diagnose service issues and are not used for profiling.

Cookies and analytics

runbook.fm does not currently use third-party analytics and does not set tracking cookies. If that changes, we will update this policy and, where required by law, request your consent before loading anything that tracks you across sites.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. Material changes will be flagged at the top of this page and dated. Your continued use of the site after a change indicates your acceptance of the updated policy.

Contact us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Privacy team: privacy@runbook.fm