Who operates this site

The operational email address identifies a contact route for this site. It does not establish the legal operator or data controller.

Controller and privacy contact

The legal data controller is TO BE CONFIRMED. The dedicated privacy contact is TO BE CONFIRMED. Until those factual fields are replaced, privacy enquiries can be sent through the verified operational route enquiries@brightonchronicle.co.uk.

This policy covers personal information handled through Brighton Chronicle at www.brightonchronicle.co.uk. It does not make a parent company, another publication or another storefront the controller.

Information we handle

• Newsletter: email address, site host, source URL, subscription status, a salted IP hash, user agent and timestamps.
• Advertising enquiries: The advertising page was observed without a working form. If the form is enabled, it collects business name, contact name, email, optional phone, locality, business type, budget range, desired outcome, message, marketing choice, source URL/page, salted IP hash, user agent, status and timestamps.
• Editorial contact: contact details, message, submitted files or media, source information and correspondence provided with news tips, complaints, corrections or rights requests.
• Technical and usage data: IP-derived or pseudonymous identifiers, device/browser details, requested pages, referrer, time and interaction data generated by hosting, security and analytics technologies.
• Account data: username or email, password verifier, session and security records if the legacy account surface is used. Whether public accounts remain enabled is under review.

Purposes and lawful bases

• Provide requested newsletters or account functions: contract steps, performance of a contract, or consent as applicable.
• Answer enquiries and assess editorial submissions, complaints and takedowns: legitimate interests in operating an accountable publication, legal obligations, and establishment or defence of legal claims.
• Process advertising enquiries: contract steps and legitimate interests in responding to prospective customers. Optional marketing requires the applicable consent or another lawful basis.
• Protect services, prevent abuse and keep audit records: legitimate interests in security and service integrity, and legal obligations where applicable.
• Measure readership and improve services: consent where required, or a specific statutory exception only where its conditions are actually met and users have the required information and simple objection mechanism.
• Advertising: enquiry information where the advertising form is active. No third-party ad-serving script was identified in the supplied discovery.

Who receives information

Information is shared only where needed for the purposes above, with safeguards appropriate to the relationship. Recipient categories include:

• Google Analytics 4 (measurement ID G-3ZY8K4VB0L) for audience measurement.
• Piranha Analytics (site ID fb6f97f0) for audience measurement.
• Hosting, security and technical support providers; exact legal entities and contracts: TO BE CONFIRMED.
• Professional advisers, insurers, auditors, regulators, courts or law-enforcement bodies where justified or required.
• A buyer or successor in a genuine restructuring, subject to confidentiality and data-protection requirements.

We do not describe personal information as sold. Any advertising or data-sharing arrangement that changes this position must be added before activation.

International transfers

Locations in which providers process information and the applicable transfer safeguards are TO BE CONFIRMED. Where information is transferred outside the UK, the controller must use a lawful transfer mechanism and provide information about how to obtain a copy of the safeguards.

Retention

Personal information is kept only as long as reasonably necessary for the stated purpose, legal obligations, security, accounting and disputes. Exact period-by-purpose retention schedules are TO BE CONFIRMED. Until approved periods are inserted, records must not be retained indefinitely merely because a deletion schedule is absent.

Your rights

Depending on the circumstances, UK data-protection law may give you rights to be informed, access your information, correct it, erase it, restrict or object to processing, receive portable information, and challenge certain automated decisions. Where processing relies on consent, you may withdraw consent without affecting earlier lawful processing.

Send a request to the operational contact above while the dedicated privacy contact remains to be confirmed. We may request proportionate information to verify identity and authority.

Complaints

Please contact us first so the issue can be investigated. You may also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint/. This does not limit other legal remedies.

Security, children and automated decisions

Appropriate technical and organisational measures should protect information according to risk. No internet service can promise absolute security. The service is not intended to solicit personal information from children without appropriate authority. The presence and logic of any solely automated decision with legal or similarly significant effects are TO BE CONFIRMED.

Changes

Material changes will be issued as a new version. The version and effective date above identify the exact policy served for this canonical company.