Effective date: November 10, 2026
This Privacy Policy (this “Policy”) explains how Brook Frazier and Andrew Ruth, doing business as Email Runs the World (“Email Runs the World”, “we”, “us” or “our”), collect, use, disclose and protect Personal Information in connection with the Site and the Services. Capitalized terms used in this Policy have the meanings given to them in Section 1.
1. Definitions and interpretation
1.1 In this Policy:
- “Booking Tool” means the third-party scheduling tool provided by TidyCal and embedded on the Site’s booking page.
- “CCPA” means the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020.
- “Controllers” means Brook Frazier and Andrew Ruth, in their capacity as joint controllers as described in Section 2.
- “Course” means the free email course entitled “Five Flows That Pay for Themselves.”
- “Course Emails” means the confirmation email and the seven instructional emails that make up the Course.
- “Effective Date” means the date stated at the head of this Policy.
- “EEA” means the European Economic Area.
- “EU GDPR” means Regulation (EU) 2016/679 (the General Data Protection Regulation).
- “Personal Information” means any information that identifies, relates to or can reasonably be linked to an identified or identifiable individual.
- “Process” and “Processing” mean any operation performed on Personal Information, whether or not by automated means, including collection, recording, storage, use, disclosure and deletion.
- “Quiz” means the health check quiz made available on the Site.
- “Service Providers” means the third parties identified in Section 5.1.
- “Services” means the Site, the Course, the booking of calls through the Booking Tool, and correspondence with us by email.
- “Site” means the website located at emailrunstheworld.com.
- “UK GDPR” means the EU GDPR as it forms part of the law of the United Kingdom.
- “You” and “your” mean any individual whose Personal Information we Process in connection with the Services.
1.2 In this Policy, headings are for convenience only; “including” and similar expressions mean “including without limitation”; and references to Sections are to sections of this Policy.
2. Data controllers
2.1 Brook Frazier and Andrew Ruth, doing business as Email Runs the World, are joint controllers of the Personal Information described in this Policy. This means that we jointly determine the purposes for which, and the means by which, that Personal Information is Processed.
2.2 “Email Runs the World” is a trading name. It does not denote a separate legal entity.
2.3 Our contact details are:
- Controllers: Brook Frazier and Andrew Ruth
- Trading name: Email Runs the World
- Location: Bangkok, Thailand
- Email: hello at emailrtw dot com
2.4 We have not appointed a data protection officer and are not required to do so.
3. Categories of Personal Information
3.1 Course sign-up. If you sign up for the Course, we collect your email address. We also record a source label identifying the page of the Site on which you submitted the sign-up form. Your email address is transmitted directly from the sign-up form to Klaviyo, Inc. (“Klaviyo”).
3.2 Email engagement data. When we send you Course Emails, Klaviyo may record whether you opened each email and whether you clicked any link in it, together with related technical information, such as the time of the open or click.
3.3 Call bookings. If you book a call with us through the Booking Tool, the Booking Tool collects your name, email address and selected appointment time, and your answers to three intake questions concerning your website, the email platform you use and your principal email marketing challenge.
3.4 Correspondence. If you email us directly, we receive your email address, any other contact details you provide, and the contents of your message and any attachments.
3.5 Technical and request data. When you visit the Site, our hosting provider, Cloudflare, Inc. (“Cloudflare”), Processes standard technical data transmitted by your browser or device, such as your IP address, browser type and version, operating system, the page requested, the referring page, and the date and time of the request.
3.6 Quiz. The Quiz operates entirely within your browser. Your answers are not transmitted to us or to any third party, and we do not store them.
3.7 Sources. We collect Personal Information directly from you (Sections 3.1, 3.3 and 3.4) and automatically through your use of the Site and the Course Emails (Sections 3.2 and 3.5). We do not obtain Personal Information about you from third-party sources.
3.8 Sensitive information. We do not request any special category or other sensitive Personal Information, such as information concerning health, racial or ethnic origin or religious beliefs, financial account details or government identifiers. You should not provide such information to us.
3.9 Provision of Personal Information. The provision of Personal Information is voluntary. However, we are unable to send you the Course without your email address, and you are unable to book a call without providing the details that the Booking Tool requests.
4. Purposes and lawful bases
4.1 We Process Personal Information only for the purposes set out below. Where the UK GDPR or the EU GDPR applies, we rely on the lawful bases indicated.
| Purpose | Personal Information used | Lawful basis (UK GDPR and EU GDPR) |
|---|---|---|
| Confirming your Course sign-up (double opt-in), sending the Course Emails and sending the further emails described in Section 4.2 | Email address, source label | Consent (Article 6(1)(a)) |
| Determining which Course Emails are opened and clicked, in order to improve the Course | Email engagement data | Legitimate interests (Article 6(1)(f)): improving our content |
| Scheduling, preparing for and holding a discovery call | Booking details and intake answers | Steps taken at your request prior to entering into a contract (Article 6(1)(b)) |
| Contacting you, after you have booked a call, regarding a potential engagement | Name, email address, booking details and intake answers | Legitimate interests (Article 6(1)(f)): developing our business with individuals who have expressed interest in our services |
| Responding to your emails | Correspondence | Legitimate interests (Article 6(1)(f)): responding to inquiries; or steps prior to entering into a contract, where your inquiry concerns a potential engagement |
| Delivering the Site and protecting it against abuse and attack | Technical and request data | Legitimate interests (Article 6(1)(f)): operating a secure website |
| Complying with legal obligations and establishing, exercising or defending legal claims | Any of the above, as necessary | Legal obligation (Article 6(1)(c)); legitimate interests (Article 6(1)(f)) |
4.2 Course Emails and further emails. Following confirmation of your sign-up, you will receive the seven instructional Course Emails. After the Course ends, we may occasionally send you further emails about email marketing and our services. Each email we send contains an unsubscribe link, and you may unsubscribe at any time.
4.3 Legitimate interests. Where we rely on legitimate interests, we have assessed whether those interests are overridden by your rights and freedoms and have concluded that they are not. You may request further information about this assessment, and you may object to such Processing at any time in accordance with Section 10.
4.4 No sale, advertising or automated decisions. We do not sell or rent Personal Information. We do not use Personal Information for advertising, including targeted or cross-context behavioral advertising. We do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects.
5. Disclosure of Personal Information
5.1 Service Providers. We disclose Personal Information to the following Service Providers, which Process it on our behalf in order to provide their services to us:
| Service Provider | Function | Personal Information involved | Privacy information |
|---|---|---|---|
| Klaviyo, Inc. | Email platform: receives Course sign-ups, sends Course Emails, records email engagement and processes unsubscribe requests | Email address, source label, sign-up confirmation records, email engagement data | klaviyo.com/legal/privacy/privacy-notice |
| Sumo Group, Inc. (TidyCal) | Provision of the Booking Tool | Name, email address, appointment time, intake answers, technical data collected by the Booking Tool | tidycal.com/privacy-policy |
| Google LLC (Google Workspace) | Email hosting for hello at emailrtw dot com | Correspondence, booking notifications | policies.google.com/privacy |
| Cloudflare, Inc. | Website hosting, content delivery and security | Technical and request data | cloudflare.com/privacypolicy |
5.2 Certain Service Providers may also Process limited Personal Information for their own purposes, such as security, fraud prevention or service improvement. Such Processing is governed by the relevant Service Provider’s own privacy policy.
5.3 Other disclosures. We may disclose Personal Information where required by law, regulation, court order or other legal process; where necessary to establish, exercise or defend legal claims; or to protect the rights, safety or property of Email Runs the World or others. If our business, or substantially all of its assets, is transferred to another party, Personal Information may be transferred as part of that transaction, subject to this Policy.
5.4 We do not otherwise disclose Personal Information to third parties.
6. International transfers
6.1 The Service Providers are based in the United States. Personal Information may be stored and Processed in the United States and in any other country in which the Service Providers or their sub-processors operate. Those countries may have data protection laws that differ from the laws of your country.
6.2 Where we transfer Personal Information from the United Kingdom or the EEA to a country that has not been found to provide an adequate level of protection, we rely on the appropriate safeguards provided in the Service Providers’ data processing terms, such as the recipient’s certification under the EU-U.S. Data Privacy Framework and its UK Extension, or standard contractual clauses approved by the European Commission together with the UK International Data Transfer Addendum. You may request further information about these safeguards by contacting us in accordance with Section 15.
7. Retention
7.1 We retain Personal Information only for as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.
7.2 In deciding how long to retain Personal Information, we consider the purpose for which it was collected, whether you remain subscribed to our emails or in contact with us, and any legal, tax or accounting obligations that apply to us.
7.3 You may request the deletion of your Personal Information at any time in accordance with Section 10.
8. Cookies and similar technologies
8.1 The Site does not set cookies and does not use analytics, advertising or other tracking technologies. Fonts are hosted on the Site and are not loaded from third-party font services.
8.2 The Booking Tool may set its own cookies or use similar technologies when it loads. Such cookies and technologies are described in TidyCal’s privacy policy.
8.3 Course Emails may contain small images or tracked links that enable Klaviyo to record opens and clicks, as described in Section 3.2. The recording of opens may be restricted by disabling the automatic loading of images in your email client.
8.4 As the Site does not track visitors, it does not alter its behavior in response to Do Not Track or Global Privacy Control signals.
9. Security
9.1 We maintain reasonable technical and organizational measures to protect Personal Information against unauthorized access, loss, misuse and alteration. These measures include the use of established Service Providers that maintain their own security programs, the delivery of the Site over encrypted connections, and the restriction of access to Personal Information to the Controllers.
9.2 No method of transmission or storage is completely secure, and we cannot guarantee the absolute security of Personal Information.
10. Your rights
10.1 Subject to applicable law, you have the right to:
- Access: request confirmation of whether we Process your Personal Information and a copy of that Personal Information;
- Rectification: request the correction of inaccurate or incomplete Personal Information;
- Erasure: request the deletion of your Personal Information;
- Restriction: request that we restrict the Processing of your Personal Information in certain circumstances;
- Portability: request a copy of the Personal Information you have provided to us, in a structured, commonly used and machine-readable format; and
- Withdrawal of consent: where we rely on consent, withdraw that consent at any time, without affecting the lawfulness of Processing carried out before its withdrawal. Consent to the Course may be withdrawn by means of the unsubscribe link in any Course Email.
10.2 Right to object. You have the right to object at any time to Processing based on our legitimate interests, including contact following a booked call. Where you object to Processing for direct marketing purposes, we shall cease such Processing.
10.3 We extend the rights described in this Section 10 to all individuals, regardless of their location.
10.4 Exercise of rights. Requests shall be submitted by email to hello at emailrtw dot com. We shall respond within one month of receipt of a request. Where permitted by law, we may extend this period for complex requests, in which case we shall inform you of the extension. We may require verification of your identity before acting on a request, ordinarily by confirming that the request originates from the email address we hold. We shall not charge a fee unless a request is manifestly unfounded or excessive.
10.5 Complaints. If you are located in the United Kingdom, you have the right to lodge a complaint with the Information Commissioner’s Office (ico.org.uk/make-a-complaint). If you are located in the EEA, you have the right to lodge a complaint with the data protection authority of the country in which you live or work, or in which the alleged infringement took place. You are not required to contact us before lodging a complaint; however, we invite you to do so, so that we may first seek to resolve the matter.
11. Notice to California and other U.S. state residents
11.1 Certain U.S. state privacy laws, including the CCPA, apply only to businesses that meet specified thresholds. As of the Effective Date, we do not believe that we meet those thresholds. We nevertheless provide the following information.
11.2 Categories collected in the preceding 12 months. Identifiers (name, email address and IP address); internet or other electronic network activity information (technical and request data and email engagement data); and professional or commercial information that you choose to provide (your website, email platform and email marketing challenges). The sources and purposes of, and the recipients to whom we disclose, each category are described in Sections 3 to 5.
11.3 No sale or sharing. In the preceding 12 months, we have not sold Personal Information and have not shared Personal Information for cross-context behavioral advertising. We do not knowingly sell or share the Personal Information of consumers under 16 years of age.
11.4 No sensitive Personal Information. We do not collect or use sensitive Personal Information, as defined under the CCPA.
11.5 No disclosure for third parties’ direct marketing. We do not disclose Personal Information to third parties for their own direct marketing purposes.
11.6 Your rights. You may request to know, access, correct or delete your Personal Information in accordance with Section 10. We shall not discriminate against you for exercising any of these rights. You may designate an authorized agent to submit a request on your behalf, in which case we may require the agent to provide proof of authorization and may require you to verify your identity directly.
12. Children
12.1 The Services are intended for businesses and are not directed at individuals under 16 years of age. We do not knowingly collect Personal Information from individuals under 16 years of age. If you believe that such an individual has provided Personal Information to us, you may notify us in accordance with Section 15, and we shall delete that Personal Information.
13. Third-party websites
13.1 The Site may contain links to third-party websites and services. This Policy does not apply to those websites and services, and we are not responsible for their privacy practices. You should review the privacy policy of any third-party website or service before providing Personal Information to it.
14. Changes to this Policy
14.1 We may amend this Policy from time to time. Any amended Policy shall be published on the Site, and the Effective Date shall be revised accordingly. Where we make material changes, we shall take reasonable steps to notify affected individuals, which may include notice by email where we hold the individual’s email address and remain in contact with that individual.
15. Contact
15.1 Questions concerning this Policy, and requests to exercise the rights described in Section 10, may be directed to us as follows:
- Email: hello at emailrtw dot com