This page sets out how Letter Mail, Inc. handles personal data under the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA). It supplements our Privacy Policy.
Our role
For personal data about our users, Letter acts as a data controller. When we handle mailbox data on behalf of business customers under a contract, we act as a processor (see our Data Processing Agreement).
Your GDPR rights
- Access a copy of your personal data.
- Correct inaccurate data.
- Erase your data ("right to be forgotten").
- Restrict or object to certain processing.
- Data portability (receive your data in a portable format).
- Withdraw consent at any time, where processing relies on consent.
- Lodge a complaint with your local supervisory authority.
Legal bases
We rely on: performance of our contract with you; our legitimate interests in securing and improving the Service; compliance with legal obligations; and consent where required.
Data Protection Officer and EU representative
You can contact our Data Protection Officer at dpo@letter.click. Where required by Article 27 GDPR, our EU representative can be reached at the same address.
International transfers
Letter is based in the United States. For transfers of EEA, UK or Swiss data, we use the European Commission's Standard Contractual Clauses and additional safeguards where needed.
California (CCPA/CPRA)
- Categories collected: identifiers (name, address, recovery email), account credentials, mail content and metadata, internet and device activity, and commercial (subscription) information.
- We do not sell or share your personal information for cross-context behavioural advertising.
- Your rights: to know, to access, to delete, to correct, and to opt out of any sale or share (which we do not do). We will not discriminate against you for exercising these rights.
How to submit a request
Email privacy@letter.click. We will verify your identity and respond within the time limits set by the applicable law (generally one month under GDPR, 45 days under CCPA).
← Back to letter.click