Privacy policy

What this policy covers

This policy covers novelist.one, its subdomains, and The Drive game at drive.novelist.one.

Who we are

This site, its subdomains and The Drive game are run by MASHWRKS Limited and Novelist, who are joint controllers of the personal data collected here. We decide together how and why it is used. In this policy "we" and "us" means both of us.

• MASHWRKS Limited ("MASHWRKS"), Unit 2, 3-5 Legge Lane, Birmingham B1 3LD, company number 12766598.
• Novelist, the artist.

For all privacy questions and rights requests, contact info@mashwrks.co.uk.

Joint controllers

MASHWRKS and Novelist have an arrangement setting out who does what. MASHWRKS handles privacy requests, keeps the data secure and manages the service providers listed below. Both of us use the data only for the purposes in this policy. You can exercise your rights against either of us, and we will pass your request on so it is dealt with.

What we collect

When you sign up for updates we collect:

• your email address and phone number
• your first and last name
• which updates you agreed to receive (email, SMS or both)

To prove you gave consent we also record the exact wording you agreed to, the date and time, the page you signed up on, your IP address and your browser's user agent.

If you text, call or email us, we receive what you send (see Texting, calling and emailing below).

Like any website, our hosting and security services receive connection information, such as your IP address, browser and the page requested, to deliver and protect the site. They may keep operational logs.

If you accept analytics or marketing cookies, we and our partners collect information about how you use this site (see Cookies below).

If you buy something from our shop, your order is processed by Shopify, which collects the details needed to take payment and deliver your order.

If you play The Drive, see The Drive (game) below for what the game collects.

Why we use it and our lawful basis

We use your data only for these purposes:

• To send you updates by email and/or SMS about Novelist's music, releases, tours and merch: your consent, given to both MASHWRKS and Novelist on the sign-up form. You can withdraw it at any time.
• To keep a record of your consent: our legitimate interest in being able to show we have your permission, and our legal obligations.
• To reply when you text, call or email us: our legitimate interest in answering your message (or, if you ask about an order, performance of a contract with you).
• To deliver, secure and troubleshoot the site: our legitimate interest in running a safe, working website.
• To process shop orders: performance of a contract with you.
• Analytics cookies, on the website and in the game, to understand how they are used: your consent, given through the cookie banner.
• Marketing cookies, on the website and in the game, to measure which ads bring people here and show relevant ads: your consent, given to both MASHWRKS and Novelist through the cookie banner.

Who we share it with

MASHWRKS and Novelist share the data with each other as joint controllers, for the purposes listed above.

We also use trusted service providers who process data on our behalf, under contract:

• Sanity (content and sign-up storage)
• Vercel (website hosting, security and operational logs)
• Shopify (shop and checkout)
• our email and SMS delivery providers, when we send updates
• analytics and advertising partners such as Google and Meta, only if you accept those cookies
• Mixpanel, for analytics (how the site is used), only if you accept analytics cookies
• Song (song.so), for marketing attribution, only if you accept marketing cookies
• Tracklution, for marketing measurement and conversion tracking, only if you accept marketing cookies

We never sell your personal data.

Texting, calling and emailing

This site shows a public phone number for texts and calls and a contact email address. The Text, Call and email links open the messaging, phone or email app on your device, and the copy-number button copies the number to your device's clipboard. Using them does not send a message to us or sign you up for anything automatically.

If you choose to text, call or email us, your phone, messaging or email provider and we receive what you send. This may include your phone number or email address, your name if it appears, and the content of your message. We use it to reply and to keep a record of the conversation.

Texting, calling or emailing us is not consent to marketing. We only send updates by email or SMS if you sign up using the form on this site. Replying STOP to an update message withdraws that consent (see Withdrawing consent below).

Please don't send sensitive information, such as payment card details, by text or email. We keep messages you send us for 24 months. To ask how a message is being used, or to have it deleted, email info@mashwrks.co.uk.

The Drive (game)

The Drive has no account or sign-up. It does not collect your name, email address or phone number.

Essential storage on your device keeps your game settings, your cookie choice and your best times. This stays in your browser.

Your cookie choice is shared between novelist.one and the game, using one cookie on .novelist.one, so a choice you make on one applies to the other.

If you accept analytics cookies, Mixpanel (with data stored in the EU) records what happens in the game: screens and menus opened, cars viewed and chosen, races started, checkpoints reached, crashes, turbo pickups, police chases, pauses, results (time, score, outcome and personal bests), settings changes and links tapped. It also records your browser, device type and approximate location worked out from your IP address. It uses an anonymous device ID only: no user profiles are created and nothing in the game is linked to your name or contact details.

If you accept marketing cookies, Tracklution receives page views, race starts, race finishes and taps on the in-game news text and dial number, so we can measure which ads bring people to the game.

You can change your choice at any time in the game under Settings → Privacy & cookies, or on the website using Cookie settings.

Children

The Drive is likely to be played by people under 18. We do not build profiles from game play, and the game collects no contact details. Any analytics or marketing measurement in the game is anonymous and happens only with consent. Anyone under 13 should not sign up for updates without a parent or guardian.

International transfers

Some providers store data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to protect your data.

How long we keep it

We keep your sign-up details for as long as you are subscribed. If you unsubscribe, we delete your contact details within 30 days, but keep a minimal record of your consent and withdrawal for up to 2 years so we can show we acted on your choice. Cookie choices are remembered for 6 months.

Your rights

You have the right to access, correct or delete your data, to restrict or object to how we use it, and to data portability. To use any of these rights, email info@mashwrks.co.uk.

Withdrawing consent

• Email: use the unsubscribe link in any email.
• SMS: reply STOP to any message.
• Cookies: use Cookie settings at the bottom of the page.
• Or email info@mashwrks.co.uk.

Cookies

We only set non-essential cookies if you agree. Essential storage remembers your cookie choice and your shopping cart. Analytics cookies help us understand how the site is used. Marketing cookies let us and our advertising partners show you relevant ads elsewhere. We use Google Consent Mode, so Google tags respect your choice.

If you accept analytics cookies, we load Mixpanel. It records the pages you view, the links, buttons and videos you use, sign-ups and shop activity (products viewed, items added to the cart and checkouts started, with prices), together with your browser and device type, screen size, the site that sent you here and an approximate location (city and country) worked out from your IP address, which Mixpanel discards once it has done so. When you sign up, Mixpanel is given a one-way scrambled (hashed) version of your email address so we can recognise a returning subscriber; it never receives your email address, phone number or name. Mixpanel stores its identifiers in your browser's local storage rather than a cookie, keeps the data for two years and holds it in the European Union. It does not load if you decline, and withdrawing consent stops tracking and clears what it stored in your browser.

If you accept marketing cookies, we also load two marketing tools. Song (song.so) measures which ads and links bring people to the site: it reads ad click identifiers (such as fbclid, ttclid, _fbc and _fbp), UTM and other URL parameters, and form submissions, and is served from our own subdomain. Tracklution measures marketing and conversion tracking: it sends page views, product views, add-to-cart actions, sign-ups and checkout starts to advertising platforms, and passes on the contact details you enter in the sign-up form (hashed by Tracklution) only when you have accepted marketing cookies. Neither loads if you decline, and withdrawing consent stops new events being sent (a page reload clears them completely). You can change your mind at any time via Cookie settings.

Other sites and services

Links to other sites are outside this policy and have their own privacy practices. Shopify's handling of your order data is described in its own privacy policy.

Complaints

If you are unhappy with how we handle your data, please contact us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy. The date at the top shows when it last changed.