Tech City News Limited, the publisher of UKTN (UK Tech News), has released a comprehensive update to its privacy policy. The revised document, effective as of February 2024, clarifies how the company handles personal data for users of its website and services. This update comes amid increased regulatory scrutiny and evolving data protection standards in the UK and Europe.
The new policy is structured into ten distinct sections, providing a layered approach that allows users to understand their rights and the company's obligations. Key areas include data collection categories, lawful bases for processing, disclosure practices, international transfers, data security, retention schedules, and legal rights under the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
What Data Does UKTN Collect?
UKTN collects several types of personal data when users interact with its website or services. These are grouped into Identity Data (e.g., name, title, date of birth), Contact Data (e.g., email, phone number, billing address), Financial Data (e.g., payment card details), Transaction Data (e.g., details of products or services purchased), Technical Data (e.g., IP address, browser type, operating system), Profile Data (e.g., username, preferences, survey responses), Usage Data (e.g., how users navigate the site), and Marketing and Communications Data (e.g., marketing preferences).
Importantly, UKTN states that it does not collect any Special Categories of Personal Data, such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data. The company also clarifies that aggregated, anonymised data may be used for analytics and business improvement, but such data cannot be used to identify an individual.
How Is Your Personal Data Collected?
The company collects personal data through three main channels. First, through direct interactions – when a user fills in forms, signs up for newsletters, creates an account, purchases a service, enters a competition, or provides feedback. Second, through automated technologies like cookies and server logs, which capture technical information about browsing behaviour. Third, from third parties and publicly available sources, including analytics providers (e.g., Google Analytics) and advertising networks (e.g., Google DoubleClick for Publishers).
UKTN also notes that failure to provide necessary personal data may prevent the company from performing a contract – for instance, if a user does not provide payment information, their subscription cannot be processed.
Lawful Bases for Processing
UKTN processes personal data under several lawful bases. For most activities, the company relies on the performance of a contract (e.g., processing an order), compliance with a legal obligation (e.g., tax record-keeping), or its legitimate interests. Legitimate interests include administering the business, preventing fraud, improving services, and marketing. UKTN explicitly states that it does not generally rely on consent as a basis for processing, except for sending third-party direct marketing via email or text. Users can withdraw consent at any time.
A detailed table in the privacy policy maps specific purposes to data types and legal bases. For example, registering a new customer uses Identity and Contact Data under contract performance. Managing payments uses Financial and Transaction Data under contract and legitimate interest (debt recovery). Administering the website, delivering advertisements, and analysing usage all fall under legitimate interests, as they help the company understand customer behaviour and grow its business.
Marketing Communications and Opt-Out Options
UKTN will send marketing communications to users who have requested information, purchased goods or services, or entered a promotion – provided they have not opted out. The company uses data to create a profile of user interests and suggest relevant products or services. For third-party marketing, explicit opt-in consent is required before sharing data with external companies.
Users can opt out of marketing at any time by adjusting their preferences in the website’s member area or by following the unsubscribe link in any marketing email. Opting out of marketing does not affect the processing of data related to service transactions or legal obligations.
Data Retention and Security
UKTN retains personal data only as long as necessary for the purposes for which it was collected. By law, basic information about customers (including Contact, Identity, Financial and Transaction Data) must be kept for at least six years after they cease being customers, primarily for tax and regulatory reasons. In some cases, data may be anonymised and used indefinitely for research or statistical purposes.
The company has implemented appropriate technical and organisational measures to safeguard personal data against accidental loss, unauthorised access, alteration, or disclosure. Access to personal data is limited to employees, agents, and contractors who have a legitimate business need to process it, and they are bound by confidentiality obligations. UKTN has procedures in place to handle any suspected data breach, and will notify affected individuals and regulators where required by law.
International Transfers
UKTN states that it does not transfer personal data outside the European Economic Area (EEA). If transfers to third countries occur in the future, the company will rely on European Commission adequacy decisions or standard contractual clauses to ensure the same level of data protection. For US-based providers, the Privacy Shield framework (now invalidated, but referenced in the policy) or alternative safeguards will be used.
Your Legal Rights Under the Policy
The privacy policy outlines seven key rights for individuals under data protection law. These include the right to access personal data (subject access request), correction of inaccurate data, erasure (the “right to be forgotten”), restriction of processing, objection to processing (including for direct marketing), data portability, and withdrawal of consent. UKTN typically responds to legitimate requests within one month, though complex or multiple requests may take longer. The company will not charge a fee unless the request is manifestly unfounded or excessive.
To exercise any of these rights, users can contact the Data Protection Officer (DPO), Marco Callegari, via email at mydata@wearemvi.com or by post at 124 City Road, London, EC1V 2NX. The policy also reminds users of their right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection supervisory authority.
Changes to the Policy and Third-Party Links
UKTN reserves the right to update its privacy policy and will inform users of significant changes. The current version was updated on 4 February 2024. The website may contain links to third-party sites, and UKTN is not responsible for their privacy practices; users are encouraged to read the privacy policies of any external sites they visit.
Glossary and Key Definitions
The policy includes a glossary defining key terms such as “Legitimate Interest,” “Performance of Contract,” “Compliance with Legal Obligation,” and descriptions of internal and external third parties with whom data may be shared. Internal third parties include other companies within the Tech City News group (acting as joint controllers or processors) based in the UK or EU. External third parties include service providers for IT and administration, professional advisers (lawyers, auditors, insurers), and regulatory authorities like HM Revenue & Customs.
Source:UKTN News