newsflareza logo

Privacy Policy

Last updated: 22 September 2026.

Who we are and our role as data controller

newsflareza operates this commercial website as the data controller under the UK GDPR and the Data Protection Act 2018. We determine the purposes and means of processing personal data collected through the site and related services focused on news production resources. Our registered address is News UK, 1 London Bridge Street, London, SE1 9GF, United Kingdom and we can be reached at [email protected].

Scope of this notice and who it covers

This privacy notice applies to all visitors and users of the website who interact with our course materials, contact forms or any other features. It covers individuals in the United Kingdom and explains how we handle personal data when you access resources on studio lighting, camera setup, editorial planning and newsroom workflows. The notice does not cover third-party websites that may be referenced in general terms.

Categories of personal data and their sources

We collect personal data directly from you when you use the contact form or request information. This includes your name, email address and any message content you provide. We also collect technical data such as IP address, browser type and device information automatically through server logs. No data is obtained from public sources or third-party brokers. Where cookies are accepted, usage data relating to page views and navigation is gathered to improve service delivery.

Purposes of processing and legal bases

Personal data is processed for several distinct purposes, each with its own legal basis under UK GDPR. First, to respond to enquiries submitted via the contact form we rely on legitimate interests in maintaining customer communications. Second, to deliver the news production resources and course content we process data under the necessity of performing a contract. Third, for analytics and service improvement we use consent obtained through the cookie banner where required by PECR. Fourth, to comply with legal obligations such as tax and accounting rules we process data as necessary to meet statutory requirements. Each purpose is documented internally with records of processing activities.

Whether providing data is required and consequences of refusal

Supplying contact details through the form is voluntary, yet without them we cannot respond to your specific query about visual clarity in broadcasts or workflow optimisation. Technical data is collected automatically and refusal would require disabling standard browser functions, which may limit site functionality. Consent for non-essential cookies can be withdrawn at any time without affecting core content access.

Cookies and similar technologies

The site uses cookies and similar tracking technologies to ensure basic operation and to gather anonymous usage statistics. A site-wide cookie banner allows you to manage preferences. Full details of the types of cookies employed and how to control them appear in our separate Cookie Policy, which should be read alongside this notice.

Processors, recipients and disclosures required by law

We engage carefully selected service providers acting as processors to host the website, manage email delivery and provide secure storage. These processors receive only the data necessary for their functions and are bound by contractual safeguards. Personal data may also be disclosed to regulators or law enforcement where a legal obligation exists, or to protect our rights in the event of suspected misuse.

International transfers and safeguards

Some processors may be located outside the United Kingdom. In such cases we ensure appropriate safeguards are in place, including standard contractual clauses approved for UK transfers and, where relevant, supplementary measures to protect data subject rights. No transfers occur without assessment of the destination country's data protection standards.

Retention periods and criteria

Contact form data is retained for a maximum of two years after the last interaction to allow follow-up and service improvement, after which it is securely deleted. Technical logs are kept for twelve months for security monitoring. Contractual records required for accounting purposes are retained for six years in line with statutory obligations. Retention is reviewed regularly against the original purpose of collection.

Security and data-minimisation practices

We implement appropriate technical and organisational measures, including encryption in transit, access controls and regular staff training, to protect personal data. Data collection is limited to what is strictly necessary for the stated purposes. While we strive to maintain high standards, no system can guarantee absolute security against all threats.

Your data subject rights

Under UK GDPR you have the right to access your personal data, request rectification or erasure, restrict processing, and receive a portable copy of data you have provided. You may also object to processing based on legitimate interests. To exercise any of these rights please contact us at [email protected] with a clear description of your request. We will respond within one month, extendable by two further months for complex cases.

Right to withdraw consent and object to direct marketing or profiling

Where processing relies on consent you may withdraw that consent at any time by adjusting cookie settings or notifying us at [email protected]. We do not conduct direct marketing or automated profiling that produces legal effects, so no separate opt-out mechanism for those activities is required.

Right to complain to the supervisory authority

If you believe your data has been handled in breach of UK GDPR you have the right to lodge a complaint with the Information Commissioner's Office, the UK supervisory authority. Contact details and guidance are available on the ICO website.

Children and age restrictions

The website and its resources are intended for adult professionals working in news production. We do not knowingly collect personal data from individuals under the age of eighteen. If we become aware that data from a child has been submitted we will delete it promptly.

Automated decision-making and profiling

No automated decision-making or profiling that produces legal or similarly significant effects is carried out on this site. All decisions regarding service delivery remain subject to human review.

Changes to this policy and effective date

We may update this privacy notice to reflect changes in law or our practices. The current version is effective from 22 September 2026. Continued use of the site after any update constitutes acceptance of the revised terms. Previous versions are available upon request at [email protected].