What data we hold
We hold only the data you give us directly. There are two ways data reaches us:
- Newsletter signups: your email address and the date you subscribed.
- Correction submissions: the URL you flagged, the correction text you wrote, and an email address if you chose to include one for a follow-up response.
We do not track readers. There is no analytics system, no session-recording tool, no advertising profile. A reader who never submits a form leaves no personal data with us.
Your rights
Under GDPR, UK GDPR and equivalent legislation, you have the following rights in relation to personal data we hold about you:
- Access: request a copy of the personal data we hold.
- Rectification: request correction of inaccurate data.
- Erasure:request deletion of your data (“right to be forgotten”).
- Portability: request your data in a structured, machine-readable format so you can transfer it elsewhere.
- Restriction: request that we limit processing of your data while a dispute is resolved.
- Objection: object to processing based on legitimate interests.
- Automated decision-making: we do not make automated decisions about you. This right is noted for completeness.
California residents also have rights under the CCPA, including the right to know categories of personal information collected, the right to delete, and the right to opt out of sale. We do not sell personal information.
How to exercise your rights
Write to [email protected] with the subject line indicating the right you wish to exercise — for example, Data erasure request or Data access request. We will acknowledge receipt within five working days and respond fully within 30 days, as required by law.
Lawful basis for processing
- Newsletter subscriptions: processed on the basis of consent. You may withdraw consent at any time by unsubscribing via the link in any newsletter email or by writing to us.
- Correction submissions: processed on the basis of legitimate interests — specifically, maintaining the accuracy of information published on the site. If you include contact details with a submission, they are used only to respond to that submission.
Data retention
- Correction submissions: retained for 18 months after the correction is resolved (published, rejected or filed), then deleted.
- Newsletter subscribers: retained until you unsubscribe or request deletion.
Data sharing
Your data is never sold. It is never shared with advertisers, data brokers or marketing agencies.
We use Supabase as our data processor. Supabase is GDPR-compliant and processes data under a Data Processing Agreement. Data is stored in the eu-west-2 (London) region. No international transfer outside the United Kingdom or European Economic Area occurs.
Complaints
If you believe your data rights have not been respected, you may lodge a complaint with the Information Commissioner's Office (ICO) in the United Kingdom at ico.org.uk.