Legal

Privacy Policy

How Exposed News collects, uses, and protects personal data under UK GDPR and the Data Protection Act 2018.

Exposed News · Last updated October 2026

Who We Are

Exposed News (exposednews.co.uk) is an independent investigative news publication registered in England and Wales. For the purposes of UK data protection law, Exposed News is the data controller for personal data processed through this website.

Contact for data protection matters: officialtalkseo@gmail.com

What Data We Collect

We collect the minimum data necessary to operate this publication:

  • Server logs: IP addresses, browser type, pages visited, and timestamps — retained for 30 days for security and performance monitoring only.
  • Contact & tip submissions: Email addresses and any information you voluntarily provide when contacting us. This is handled under strict confidentiality obligations.
  • Cookies: We use only essential cookies required for the website to function (WordPress session cookie, dark mode preference). We do not use advertising or tracking cookies.
  • Analytics: If we use analytics software, it is configured with IP anonymisation and data minimisation. We do not share analytics data with third parties.

How We Use Your Data

We use the data we collect solely for the following purposes:

  • Operating and securing this website (legitimate interest)
  • Responding to editorial enquiries and tip submissions (legitimate interest / consent)
  • Complying with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not run targeted advertising. We do not use data to build profiles of individual readers.

Source Confidentiality

Communications from sources and whistleblowers are subject to the strongest available protections. Journalist privilege under Police and Criminal Evidence Act 1984, s.10 and the Data Protection Act 1998 (journalism exemption) applies to all source-related data.

We will not disclose source identities to any third party, including law enforcement, except where compelled by a court order after all legal appeals have been exhausted, and even then only after notifying the source where it is safe and legally permissible to do so.

Data Retention

  • Server logs: 30 days, then automatically deleted.
  • Editorial correspondence: Retained for as long as editorially necessary, typically the duration of the relevant investigation plus 7 years for legal compliance.
  • Source communications: Retained securely for as long as source protection obligations require; destroyed when no longer required.

Your Rights

Under UK GDPR you have the right to:

  • Access personal data we hold about you
  • Correct inaccurate data
  • Request erasure (subject to legal and journalistic obligations)
  • Object to processing
  • Data portability
  • Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any right, contact: officialtalkseo@gmail.com

Note: The journalism exemption in the Data Protection Act 2018 may limit certain rights where exercising them would prejudice the publication of journalistic material in the public interest.

Third-Party Services

This website is self-hosted on servers in the United Kingdom. We do not embed third-party social media widgets, advertising networks, or data-broker scripts. Outbound links to external sites are marked with rel="nofollow noopener"; those sites have their own privacy policies.

Changes to This Policy

We may update this policy from time to time. Material changes will be noted at the top of this page with a revised "last updated" date. Continued use of the site after changes constitutes acceptance.

Data protection enquiries: officialtalkseo@gmail.com · ICO complaints: ico.org.uk · Last reviewed October 2026.