Tech City News Limited, known as UKTN, has published its updated privacy notice, detailing how it collects, processes, and protects personal data from visitors to its website. The policy, last updated on 4 February 2024, applies to all interactions with the site, including newsletter sign-ups, product purchases, and competition entries.
Types of Data Collected
UKTN gathers various categories of personal data: Identity Data (name, title, date of birth), Contact Data (email, phone, address), Financial Data (payment card details), Transaction Data (purchase history), Technical Data (IP address, browser type), Profile Data (preferences, survey responses), Usage Data (how visitors use the site), and Marketing and Communications Data (preferences for receiving marketing). Aggregated data is also used but does not directly identify individuals.
Collection Methods
Data is collected through direct interactions (forms, emails, phone calls), automated technologies (cookies, server logs), and from third-party sources such as analytics providers (e.g., Google) and advertising networks (e.g., Google DoubleClick for Publishers). Users provide information when applying for services, creating accounts, subscribing to publications, entering promotions, or giving feedback.
Legal Bases for Processing
UKTN processes personal data under several lawful grounds: performance of a contract, compliance with legal obligations, and legitimate interests (such as recovering debts, improving services, and marketing). Consent is required for third-party direct marketing via email or text. Users have the right to withdraw consent at any time.
Marketing and Cookie Choices
Marketing communications are sent to users who have requested information or purchased services and have not opted out. UKTN uses profile data to tailor offers. Users can opt out via the website’s member area or by following unsubscribe links. Cookies can be managed through browser settings; disabling them may affect site functionality.
Data Sharing and International Transfers
Personal data may be shared with internal third parties (other group companies) and external third parties (service providers, professional advisers, regulators). UKTN does not transfer data outside the European Economic Area unless adequate safeguards are in place, such as approved contracts or Privacy Shield certification.
Security and Retention
Security measures include access controls, encryption, and breach notification procedures. Basic customer data is retained for six years after the end of the customer relationship for tax purposes. Users can request erasure or anonymisation in certain circumstances.
User Rights
Under data protection laws, users have rights to access, correct, erase, restrict processing, object to processing, request data portability, and withdraw consent. Requests are typically processed within one month, with no charge unless repetitive or unfounded. UKTN may require identity verification before fulfilling requests.
Contact Details
The Data Protection Officer (DPO) is Marco Callegari, reachable via email at mydata@wearemvi.com, postal address at 124 City Road, London EC1V 2NX, or phone at 0208 150 8286. Complaints can also be directed to the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.
Policy Changes
Any updates to the privacy notice will be communicated via the website. Users are encouraged to check for the latest version. The policy includes a glossary defining key terms such as legitimate interest, performance of contract, and legal obligations, as well as detailed explanations of each user right.
Third-Party Links
The website may contain links to external sites. UKTN is not responsible for the privacy practices of those third parties. Users are advised to review their privacy policies when leaving the UKTN site.
Special Categories of Data
UKTN explicitly states it does not collect special categories of personal data such as race, religion, health information, or criminal convictions. The policy reassures users that only necessary data is processed for legitimate business purposes.
Automated Decision-Making
The policy does not mention automated decision-making or profiling, but notes that usage data is aggregated for statistical analysis. Users concerned about algorithmic processing can contact the DPO for more information.
Exercising Your Rights
To exercise any right, users should contact the DPO. The process is designed to be straightforward, with no fees for standard requests. In complex cases, UKTN may extend the response time by up to two additional months, with prior notification.
Data Breach Protocol
In the event of a data breach, UKTN will notify affected users and regulators as required by law. The company has implemented procedures to detect, investigate, and mitigate breaches swiftly.
Children’s Privacy
Although not explicitly mentioned, the policy does not target children under 16. UKTN does not knowingly collect data from minors. If such data is inadvertently collected, it will be deleted upon discovery.
Global Standards
While UKTN is based in the UK, the privacy notice aligns with GDPR principles. Users outside the EEA may have different rights; they are encouraged to check local laws. The policy applies to all visitors regardless of location.
Recurring Updates
UKTN commits to periodic reviews of this policy to reflect changes in technology, law, and business practices. Users are notified of material changes via email or site announcements.
Understanding the Glossary
The glossary in the original policy defines ‘Legitimate Interest’ as balancing business needs with user impact, ‘Performance of Contract’ as necessary for contractual obligations, and ‘Comply with Legal Obligation’ as fulfilling regulatory requirements. These definitions help users understand why data is processed.
Internal and External Third Parties
Internal third parties include other companies in the UKTN group providing IT and administrative services. External third parties encompass service providers (e.g., cloud hosting, email platforms), professional advisers (lawyers, auditors), and public authorities (HMRC, regulators). All are bound by contractual data protection clauses.
Your Rights Explained
Users have the right to request access to a copy of their data, correction of inaccuracies, erasure (right to be forgotten), restriction of processing in specific situations, objection to processing based on legitimate interests or direct marketing, and data portability in a machine-readable format. Consent withdrawal does not affect past processing legality.
Source: UKTN News