Privacy notice
Draft for legal review. This is an internal compliance assessment, not legal advice, and should be confirmed by qualified counsel before launch.
What we collect
- Briefing sign-ups: email, chosen regions/topics, and the time and wording of your consent.
- Forms (news tips, events, partnerships, corrections): name, email, organization and your message.
- On your device only: saved stories and your privacy choice (essential local storage).
- Analytics: none loaded unless you choose "Allow analytics". No advertising trackers.
Compliance assessment
| Framework | Status | Notes |
|---|---|---|
| EU GDPR | Partly in place | Consent for email and analytics; minimal data. Still needed: named controller and contact, data processing agreements, records of processing, a way to request access or deletion, and decisions on transfers outside the EU. |
| UK GDPR / PECR | Partly in place | Opt-in cookie/analytics choice in place. ICO registration and a UK representative still need to be checked. |
| US state laws (e.g. CCPA/CPRA) | Low risk | No sale or sharing of personal data. A "do not sell or share" notice still needs to be added. |
| Brazil LGPD, Canada PIPEDA, UAE PDPL, Saudi PDPL, Australia Privacy Act, India DPDP, China PIPL, Japan APPI | Needs review | Consent-first design supports these laws, but each needs local legal review — especially rules on sending data abroad (PIPL, PDPL, DPDP). |
Your rights
You can unsubscribe at any time and ask for access to, correction of or deletion of your data. Use the request form on the Corrections & disclosure page until a dedicated privacy contact is published.