EntreResource

GDPR overview

The privacy policy includes a dedicated section, "Legal Basis for Processing Personal Data under the General Data Protection Regulation (GDPR)", naming performance of a contract, consent, legitimate interest not overridden by the individual's rights, and legal obligation. A second section lists data protection rights: access, rectification, erasure, objection, restriction, portability and withdrawal of consent, together with the right to complain to a supervisory authority; identity may be verified before a request is answered. What is absent matters just as much. No Article 27 EU representative is designated and no data protection officer is named, the only published contact being nate@entreresource.com. Data is transferred to and processed in the United States, yet no transfer mechanism is cited, neither standard contractual clauses nor the Data Privacy Framework. The policy is dated 27 April 2019. The site describes its obligations; it never claims to be compliant.

Who owns the data?

EntreResource, LLC publishes the site and describes itself as the Data Controller of the personal data it collects: email address, first and last name, cookies and usage data such as IP address, browser type and version, pages visited, dates and times, time spent, device identifiers and diagnostics. Third-party service providers may access it, but only to perform tasks on the publisher's behalf, and they are obliged not to disclose it or use it otherwise. Data may also change hands in a merger, acquisition or asset sale, with prior notice, and may be disclosed where the law or a public authority requires it. No terms of service page exists: all of this comes from the privacy policy and the affiliate disclaimer.

Reuse rights

Nothing on the site is offered for reuse. The footer carries a "Copyright 2026, all rights reserved" notice, no licence is granted, and because there is no terms of service page, no document ever states what a reader may republish, quote or repurpose. The content itself is supplied "as is", with no guarantee of completeness, accuracy or timeliness. What the publisher does with your own data is spelt out more clearly: running and maintaining the service, notifying you of changes, enabling interactive features, providing support, analysing and improving the site, monitoring usage, detecting technical incidents, and sending news and offers. Marketing emails can be stopped through the unsubscribe link in each message or by contacting the publisher. Behavioural advertising and remarketing run through Google Ads, Twitter, Facebook and Pinterest, with opt-out handled in each platform's own settings, and the Do Not Track signal is explicitly not supported.

Data retention & training

Hosting summary

Processing takes place in the United States. The privacy policy states that your information, including personal data, may be transferred to and held on computers located outside your state, province, country or jurisdiction, where data protection laws may differ from your own, and that consenting to the policy counts as accepting that transfer. No transfer mechanism is named: neither standard contractual clauses nor the EU-US Data Privacy Framework appears in the document. Security is covered by a general commitment to take all steps reasonably necessary to protect your data, alongside the frank admission that no method of transmission over the internet is 100% secure. Beyond that, disclosure stops: no hosting provider, data centre, region or certification such as SOC 2 or ISO 27001 is mentioned anywhere. Technically, the domain observed sits behind Cloudflare with a RocketCDN layer on a WordPress site, which is an observation about the infrastructure rather than a statement made by the publisher.