Privacy policy
Last updated: October 12, 2026
This policy explains how your personal data is processed when you request the free chapter of The 25th Hour or subscribe to emails from Bennett Morgan. It is provided under Articles 13 and 14 of the EU General Data Protection Regulation (GDPR).
Data controller
The data controller is Paolo Ganzerli, VAT number IT09548251215. You can contact the data controller at info@the25thhourmethod.com.
What we collect
We collect your email address, your first name if you choose to provide it, your consent and the exact consent statement, the timestamp of your submission, and any utm_source, utm_medium, and utm_campaign parameters in the page URL. These optional parameters identify the campaign that brought you to this site. We do not ask for sensitive personal information.
Why we use your information
We use this information to provide the free chapter and send occasional emails about the book. Optional campaign parameters help us understand which campaigns generate chapter requests. Your first name may be used to personalize correspondence. We do not sell your personal information or use automated decision-making or profiling that produces legal or similarly significant effects.
Legal basis and choice
The legal basis is your consent under Article 6(1)(a) GDPR. The consent checkbox is not preselected. Submitting your details is voluntary. If you do not consent, the signup form will not process your request. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
Storage and recipients
Signup information is stored in a protected database. Visitors cannot read, change, or delete lead records through the site. The controller and authorized service providers processing data on the controller's instructions may access it only for the purposes described here. Any email delivery provider added to this service must be covered by an appropriate data processing agreement.
If a service provider processes data outside the European Economic Area, the controller must ensure an applicable adequacy decision or appropriate safeguards, such as the European Commission's Standard Contractual Clauses, are in place. Contact us for information about providers, storage locations, and applicable safeguards. The controller must verify these arrangements before using the service for live email campaigns.
Retention and unsubscribe
We retain your signup information until you unsubscribe or withdraw your consent. On withdrawal, we stop marketing emails and erase or anonymize your signup data, except for any minimal records that must be retained to comply with legal obligations or document and honor your withdrawal. Every marketing email must include an unsubscribe link. You may also unsubscribe by contacting info@the25thhourmethod.com.
Your rights
You have the right to request access, rectification, erasure, restriction of processing, and, where applicable, data portability. You may withdraw consent at any time and object to direct marketing. To exercise your rights, email info@the25thhourmethod.com. We may request proportionate information to verify your identity and will respond within one month, subject to the extensions permitted by GDPR.
You may lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, at www.garanteprivacy.it, or with the supervisory authority where you live or work.
External links and cookies
Amazon links take you to Amazon, which processes data under its own privacy policy. This site does not set advertising or analytics cookies for the chapter form. Infrastructure providers may process technical request information necessary to deliver and secure the service. Google Fonts requests may disclose technical information, including your IP address, to Google.
Contact and updates
For questions or requests, contact info@the25thhourmethod.com. We will update this policy if the way we process data changes.