Effective Date: April 2025

Welcome to AI & Supply Chain Insights—your trusted source for premium content on AI-powered supply chain transformation across Europe.

This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable European data protection laws.

1. Who We Are

AI & Supply Chain Insights is a publication hosted on Substack, operated by UNIVERSAL LIGHTNING, Inc., headquartered in Dover, Delaware.

If you have questions, contact us at:

📧 contact@supplia.fr

2. What Personal Data We Collect

We only collect personal data that is necessary, relevant, and limited to what is required to deliver and improve our newsletter and services.

• Name (if provided)

• Email address

• Subscription status (free, trial, paid)

• Interaction data (opens, clicks, etc.)

• Referral data (if you use a referral link)

• Survey responses (if you choose to participate)

Substack may collect additional technical data (e.g. IP address, device/browser info) for analytics and platform functionality. Please refer to Substack’s Privacy Policy for more details.

3. Why We Collect Your Data

We process your data for the following purposes:

✅ To send you our newsletter and updates

✅ To manage subscriptions and payments (via Substack)

✅ To analyze content performance and improve our offerings

✅ To fulfill our legal obligations under GDPR and relevant laws

✅ To respond to inquiries, feedback, or support requests

We rely on one or more lawful bases for processing your data, including consent, contractual necessity, and legitimate interest (e.g., improving newsletter quality, analytics).

4. How We Store and Protect Your Data

Your data is securely stored through Substack’s platform and encrypted during transfer. Access is limited to authorized personnel only. We implement appropriate security measures to protect your information from unauthorized access or misuse.

5. Third-Party Services

We do not sell or share your data with any third parties.

However, we rely on trusted sub-processors, such as:

• Substack, Inc. – newsletter distribution, subscription management

• Stripe – payment processing for paid subscribers

• Google Forms / Typeform – if you respond to optional surveys

Each of these services is contractually bound to meet GDPR compliance standards.

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to Access – Request a copy of your personal data

• Right to Rectification – Correct inaccurate or incomplete data

• Right to Erasure – Request deletion of your data (“Right to be forgotten”)

• Right to Restrict Processing

• Right to Data Portability

• Right to Object – To certain uses of your data

• Right to Withdraw Consent – At any time without affecting prior processing

• Right to Lodge a Complaint – With your local data protection authority

To exercise any of these rights, simply email us at dpo@supplia.eu.

7. How Long We Keep Your Data

We retain your data only for as long as necessary to fulfill the purposes described above, or as required by law. If you unsubscribe, your data will be deleted or anonymized unless legal retention is necessary.

8. International Data Transfers

Substack is based in the United States. When your data is transferred outside the EU, it is done so under appropriate safeguards such as Standard Contractual Clauses (SCCs) and Data Processing Agreements to ensure it remains protected.

9. Cookies and Tracking

Our newsletter platform may use cookies and tracking technologies to analyze performance (e.g., open rates, click-throughs). These do not personally identify you and are only used to improve content delivery.

For more on cookies, refer to Substack’s Cookie Policy.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. All changes will be posted on this page with a revised “Effective Date.” We recommend checking periodically for any updates.

11. Contact

If you have any questions, requests, or concerns about this Privacy Policy or your data:

📧 contact@supplia.fr

📍 Based in France and operating in full compliance with EU GDPR law

Thank you for being a part of the AI & Supply Chain Insights community. We respect your time, your data, and your trust.