Privacy Policy
How Exposed News collects, uses, and protects personal data under UK GDPR and the Data Protection Act 2018.
Who We Are
Exposed News (exposednews.co.uk) is an independent investigative news publication registered in England and Wales. For the purposes of UK data protection law, Exposed News is the data controller for personal data processed through this website.
Contact for data protection matters: officialtalkseo@gmail.com
What Data We Collect
We collect the minimum data necessary to operate this publication:
- Server logs: IP addresses, browser type, pages visited, and timestamps — retained for 30 days for security and performance monitoring only.
- Contact & tip submissions: Email addresses and any information you voluntarily provide when contacting us. This is handled under strict confidentiality obligations.
- Cookies: We use only essential cookies required for the website to function (WordPress session cookie, dark mode preference). We do not use advertising or tracking cookies.
- Analytics: If we use analytics software, it is configured with IP anonymisation and data minimisation. We do not share analytics data with third parties.
How We Use Your Data
We use the data we collect solely for the following purposes:
- Operating and securing this website (legitimate interest)
- Responding to editorial enquiries and tip submissions (legitimate interest / consent)
- Complying with legal obligations
We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not run targeted advertising. We do not use data to build profiles of individual readers.
Source Confidentiality
Communications from sources and whistleblowers are subject to the strongest available protections. Journalist privilege under Police and Criminal Evidence Act 1984, s.10 and the Data Protection Act 1998 (journalism exemption) applies to all source-related data.
We will not disclose source identities to any third party, including law enforcement, except where compelled by a court order after all legal appeals have been exhausted, and even then only after notifying the source where it is safe and legally permissible to do so.
Data Retention
- Server logs: 30 days, then automatically deleted.
- Editorial correspondence: Retained for as long as editorially necessary, typically the duration of the relevant investigation plus 7 years for legal compliance.
- Source communications: Retained securely for as long as source protection obligations require; destroyed when no longer required.
Your Rights
Under UK GDPR you have the right to:
- Access personal data we hold about you
- Correct inaccurate data
- Request erasure (subject to legal and journalistic obligations)
- Object to processing
- Data portability
- Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise any right, contact: officialtalkseo@gmail.com
Note: The journalism exemption in the Data Protection Act 2018 may limit certain rights where exercising them would prejudice the publication of journalistic material in the public interest.
Third-Party Services
This website is self-hosted on servers in the United Kingdom. We do not embed third-party social media widgets, advertising networks, or data-broker scripts. Outbound links to external sites are marked with rel="nofollow noopener"; those sites have their own privacy policies.
Changes to This Policy
We may update this policy from time to time. Material changes will be noted at the top of this page with a revised "last updated" date. Continued use of the site after changes constitutes acceptance.