Sun 10 Nov 2024

 

2024 newspaper of the year

@ Contact us

Privacy Policy

Associated Newspapers Ltd

Privacy & Cookies Policy (the “Policy”)

Last updated: 26 March 2024

Previous version: 23 February 2024

1. What is this Policy for?

This Policy explains how we protect and handle any personal information you provide to us, including via our websites, our apps, our social media pages/accounts, email, telephone and in person. It also covers any personal information we receive from third parties and provides you with an overview of your rights.

By using our products and services, including browsing our websites, registering, logging in or signing up for newsletters or marketing, you agree that we may use your personal information as outlined in this Policy. There may be occasions when we share responsibility for the processing and protection of your personal data in connection with your use of our products and services as joint controllers with our partners (please see Section 2 Who we are for additional information). In such instances our partners will process your personal data in accordance with their privacy notices.

2. Who we are

dmg media is an international multi-channel media company which is home to some of the UK’s most popular brands, including the Daily MailThe Mail on SundayMailOnlineMailOnline Ireland, Irish Daily Mail, The Irish Mail on Sunday, MetroThis is MoneyYou MagazineMyMailMailPlusMailShopMailWineClubMailTravel, MailFinance, MailExperiences, MailBookshop, The Mail (Mail Subscriptions), The i, inews and Eliza.

These brands are all trading styles of Associated Newspapers Ltd. which is the controller of your personal data for the purposes of data protection law.

These brands also share infrastructure, systems and technology and all fall under the data control of Associated Newspapers Ltd. These brands work together to understand how our users interact with our products and services, and to share insights to improve our products and services.

If you are a MyMail member and have linked your account with your Nectar account, Associated Newspapers Ltd. and Nectar Loyalty Ltd. (“Nectar”) will each be data controllers of your personal data. Associated Newspapers Ltd will handle your personal data in accordance with this Policy and Nectar will handle your data in accordance with Nectar’s Privacy Policy and Cookie Policy.

If you engage with certain online bargains, discounts, last-minute vouchers, best buys and/or similar promotional offers (“Offers”) made available on our websites, or make use of the DailyMail Extras extension for desktop web browsers (“Extension”), we shall process your data as joint controllers with Global Savings Group Ltd (“GSG”) and its affiliate CupoNation GmbH, who assist GSG as a marketing partner. GSG will handle your data in accordance with its Privacy Policy and CupoNation GmbH will handle your data in accordance with its Privacy Policy and Cookie Policy.

3. What kinds of information do we collect

We use the term “personal information” – also called “personal data” in the laws of some states and countries – to refer to information that reasonably identifies, relates to, describes, or can be associated with you. Data that has been deidentified or that otherwise cannot reasonably be related back to a specific person is not considered personal information. Once we treat data as deidentified, we commit not to attempt to reidentify such information. The precise definition of personal information may vary depending on your state or country of residence, but we take the same approach to protecting your privacy.

We collect the following types of personal information about you from various sources by different methods:

Information you have provided to us:

We collect information such as your name, telephone number, address, email address when you create and log into an online account, subscribe to one of our titles, sign up for our newsletter or marketing communications, respond to one of our competitions/promotions or Offers, order or register your interest in one of our products, use the Extension or post a comment under an article, in addition to, where you or your organisation provide us with products or services, the name of your organisation and bank and account details and information relating to a particular transaction.

Subscription Services – Third Parties

If you take out a subscription service for digital or paper products, we use third party companies to support us. They set you up with the subscriptions you want, on-line, print or both. These companies provide us with identity, entitlements, and subscriptions management, customer journey / audience conversion and personalisation services. The personal data that Piano, Stripe and HH&S collect on our behalf when you subscribe, creates an identity that may include your name, email, payment details (from credit/debit card or electronic payment systems, such as Apple Pay), password, newsletter preferences, payment tokens, address information and personal preferences. Piano will handle your personal data in accordance with its Privacy Policy and GDPR policy. You can also see the HH&S Privacy Policy You can see the Stripe privacy Notice here.

This information may be collected via your computer browser, an online web form, a data capture form, an app, by email, by telephone, or by post.

When you visit our website or app, we shall create a unique identifier (“UID”) that allows us to recognise you when you use our website or apps, including if you log in from a different device or platform.

Information from your device:

We collect information from and about the device you are using when you interact with one of our websites, apps or other products/services, including adverts.

This may include:

Device Type: Information about your operating system, hardware, software, browser type in order to tailor the experience to your device (e.g. screen resolution).

Device Operations: Information about your operations and behaviours performed on your device to tailor the experience based on how you or similar users have interacted with our content.

Unique Identifiers: Device IDs, UIDs and Advertiser IDs in order to save your preferences against an identifier to refer to on subsequent pages and to display advertising.

Device Settings: Information from your device’s setting (such as access to your GPS location or other information related to the location of your device) so that we know which version of the website to serve you.

Network/Connections: Your IP address, so that we can recognise your geographical location.

Cookies: Data from cookies or similar technologies placed on your device which tells us about your use of our websites and/or selected third party websites. Some cookies are also placed by third parties. Please see Section 17 on Cookies and other identifiers below for more information about our use of cookies and other similar technologies.

Information collected by the Extension.

Unique identifiers: A unique installation ID or similar identifier is also processed to recognise the Extension you have installed.

Access Data: With regard to each of your visits to our websites and the URLs and domains you visit while the Extension is installed, GSG’s web servers record technical information which your browser automatically transmits. This includes the IP address used to connect your computer or mobile device to the internet (including in truncated form), the browser type and version you use, the operating system, date and time of your access, whether Java is on or off, whether cookies are accepted or rejected.

Usage Data: GSG collects further information about your visit to our websites and your usage of its services and content and the URLs and domains you visit while Extension is installed. That information includes the full URL clickstream to, through and from the Extension (including date and time), visited sub-pages, information you searched for, response times, length of visits to certain pages, email openings and which banners or links on the website or in an email were clicked on, browsing activity (such as scroll positions, clicks and mouse movements), search queries, the URL of the website you visited immediately beforehand. GSG uses such data for a variety of purposes (e.g. to better understand your needs and preferences so that GSG can improve the Extension, its other services and their functions and to provide you with more relevant and interest-based contents.

Device Data: In case of Extension, screen size, time zone setting, and geographical identifiers.

For more information on how GSG processes your information and how to exercise your rights, please visit GSG’s Privacy Policy.

Posting comments on articles

When you comment on an article, the information you post and your username are publicly accessible. This information can be viewed and collected by other people. We strongly suggest you avoid sharing any personal details, and especially information that can be used to identify you directly such as your name, age, address and name of employer in your comments. We are not responsible for the privacy of the information you make publicly accessible via the comments section. Please see our Terms and House Rules for more information.

Information about transactions made

If you purchase anything or make any other financial transactions on any of our properties (e.g. on MailShop), we collect information about your purchase and ask for information including your name, email address and delivery address, to be forwarded on to the partners who are responsible for delivering your order. This may include payment information such as your credit/debit card number where we are engaging a third party to process payments on our behalf.

Information from partners

Where you have registered or created an account with one of our websites, we may obtain information about you from other companies who have obtained your permission (through their own privacy policies) to share information about you.

We may overlay demographic and lifestyle data from CACI to help us understand what you might be interested in for insight and marketing purposes (also known as profiling). CACI data are built using a variety of sources, including publicly available data (such as the electoral register and UK Census records) or from surveys and polls where you have given permission for your data to be shared. For more information on these partners and how you can opt-out of having your data shared with us from these sources for profiling purposes, please see the section entitled “Marketing Personalisation” in Section 7 below.

Social media

If you log-in to our websites through a social media site, such as Facebook, Twitter or Google, you are granting permission to such company to share your user information with us. This will include your name and email address plus any other information you have permitted them to share with third parties. If you remove our website from your Facebook, Twitter or Google account, we shall no longer have access to this information.

We use plugins from social media networks and other platforms on our websites, that may allow you to share content with these networks/platforms or use their services on our websites. For more information, please see Section 7 of this Policy.

Browser pop-up notifications

When you consent to receiving pop-up browser notifications from one of our websites, we collect the following information:

  • the URL of the page you were on when you were subscribed;
  • your country code;
  • your device type;
  • your browser name and version;
  • whether the notification was shown to you; and
  • the topics of the notification you have clicked on or interacted with.

Information about other people

By supplying us with information about someone else, you confirm that they have authorised you to provide us with their information (including sensitive personal data) on their behalf.

4. Legal bases for processing your data under UK GDPR and EU GDPR

We rely on the following legal bases to process your personal data under the UK General Data Protection Regulation (“UK GDPR”) and the EU General Data Protection Regulation (“EU GDPR”).

Contract: We process some of your data as a necessary part of performing our contractual obligations to you. For example, to ensure that products you buy can be delivered to you, to provide you with access to your digital subscription or to provide a prize to which you have won.

Consent: Some processing activities will only be done where we have sought your prior consent. If we require your consent, we shall provide you with full details of the information that we would like and the reason we need it. Once given, you have the right to withdraw your consent again at any point and we shall be obliged to stop processing your data and delete it unless we can demonstrate that another legal basis applies.

Legal obligation: There may be situations where we need to use your information to comply with legal and regulatory obligations or defend claims. This includes publishing information about competition winners.

Legitimate interests: We process some of your data because it is in our legitimate interests to do so. Where this is the case, we have considered the impact that using your information may have on you and limited our use to only what is strictly necessary. Where we are using this as our basis, we can provide you with an explanation of why the processing is in our interests and you are free to contest this decision if you wish.

Examples of our legitimate interests processing activities include:

  • supporting a free press and individual and societal rights to receive information;
  • developing, delivering and maintaining relevant and engaging products services and advertising; and
  • understanding who our audiences are in order to improve our content and services.

5. How we may use your information

Journalism

We use personal information for journalistic activities to support a free press and to support individual and societal rights to receive information.

Legal basis for these processing activities: Legitimate interests

Message boards, blogs and other public forums

Our websites may provide message boards, blogs and other user generated content facilities. Anything that you share will become public information. You should always be careful when deciding to disclose your personal information. Please see our Terms and House Rules for more information.

Legal basis for these processing activities: Consent (if requested) or legitimate interests

Comment Moderation

We monitor comments for offensive/objectionable content and disruptive behaviour that breach our Terms.

Legal basis for these processing activities: Legitimate interests

Comment Services

Where we provide you with functionality to comment on an article, you will need to create an account with us to use the comment functionality. We process your registration data and any comments that you voluntarily submit in accordance with our legitimate interests in providing users with the ability to comment on articles. The information you post and your username are publicly accessible and can be viewed and collected by other people. We strongly suggest you avoid sharing any personal details, and especially information that can be used to identify you directly such as your name, age, address and name of employer in your comments. We are not responsible for the privacy of the information you make publicly accessible via the comments section.

Our comments functionality is also subject to our Terms and House Rules. We will monitor and moderate comments, including for offensive/objectionable content and disruptive behaviour.

We use a third-party service provider, OpenWeb Technologies Ltd, to provide our comment functionality and to moderate comments, but we remain the data controller in respect of this activity.

Legal basis for these processing activities: Legitimate interests

Delivering services

By using our websites, apps and other products and services, we may process your information, including your name, phone number and email address, for the purpose of providing you with such products and services and managing our relationship with you, which shall include (without limitation):

  • carrying out ecommerce activities;
  • managing your accounts, entitlements and subscriptions;
  • communicating with you in relation to your account or service, service updates or other non-marketing communications;
  • delivering customer services and support;
  • contacting you when a checkout journey is not completed if you have provided your information;
  • dealing with and responding to you about a comment you have submitted on our message boards or other such user generated content facilities;
  • ensuring the integrity of votes, competitions and polls;
  • maintaining records of our communications with you if you get in contact with us; and
  • responding to press complaints submitted both direct to us and via the Independent Press Standards Organisation (IPSO).
Legal basis for these processing activities: Consent (if requested) or legitimate interests or contract
  • running competitions effectively and informing you if you have been successful in any competitions or promotions.
Legal basis for this processing activity: Contract or legal obligation

We may also record phone calls or customer enquiries via online chat for quality, training and management purposes.

Legal basis for this processing activity: Legitimate interests or contract

Digital events

We may use your personal data (such as your name, email address, etc.) to provide you with digital event functionality and content, including recordings, user generated content and chat functionality. This may also include speeches or presentations, chat content, questions, poll results and audio-visual content incorporating your likeness, image or opinions.

This content may be retained and reused by us for later business purposes (for example for reuse at subsequent events or to allow webinar access at a later stage).

Legal basis for processing this data: Consent (if requested) or legitimate interests

Direct marketing, newsletters and browser push notifications

In accordance with your preferences and data protection legislation, we may use your information, including your name, email address, and phone number, to send you direct marketing communications, newsletters and to carry out marketing analysis.

This may include communications by email, post, telephone, SMS or app notifications about our products and services, events and special offers. This also includes browser push notifications where you have consented to receiving these. We may also send you periodic emails to inform you about the any changes to our products and services where we have permission to do so.

In relation to email marketing communications, we may send you such communications when we have your consent, or when you are an existing customer who has previously bought or subscribed to a similar product or service from us. You may opt out of email marketing communications when your personal information is first collected as part of that purchase or subscription.

You may also unsubscribe from receiving email marketing or newsletters at any time by clicking the “unsubscribe” link at the bottom of each email. If you unsubscribe from email marketing or newsletters, we shall keep your email address to ensure that we do not send you any marketing in future.

Legal basis for processing this data: Consent (if requested) or legitimate interests

Personalisation / identifying your interests / audience segmentation / audience conversion / ecommerce activities

We use your information, including your UID, to provide you with a greater personalised experience when you visit or use one of our sites or apps, and for insight and marketing purposes.

We make assumptions and draw inferences about your interests based on the kind of articles and content you click on or read.

We use this information to segment our audiences into groups with attributes. This helps us show you more relevant content/adverts and helps our advertisers target more effectively.

Our partner, Piano, assists us in understanding user journeys (e.g. which pages our users are visiting the most, which pages lead to the greatest audience conversion, etc.), user session length on our website/app, testing the effectiveness of our marketing campaigns, and optimising our website/app based on audience data. Please see Piano’s Privacy Policy and GDPR policy.

Please note you have the right to object to profiling for marketing purposes at any time. If you wish to opt-out of having your personal information profiled for personalisation purposes, you can do so via the Privacy Settings.

Legal basis for this processing activity: Consent (if requested) or legitimate interests

Cookie Matching

Where you have given consent, we check to see if you have a cookie ID when you visit one of our properties. We are then able to compare the cookie ID we have to see if we know who you are. See Section 14 on Cookies for more information.

Legal basis for this processing activity: Consent

Data matching and lookalike audience building

We allow partners to reach audiences on our platforms via data matching where they have appropriate permissions. We use your UID (together with other associated personal data such as email address) to carry out such data matching. This is conducted at an aggregate level or an individual level, depending on how targeted our partners want to reach audiences on our platforms. Your UID is stored with an independent third party data management platform (DMP) who will match UIDs with the data from advertisers with whom we partner. This matching is based on common identifiers (such as email address). This matching is completed using a data clean room where neither we nor the advertiser will have access to each other’s data.

The data overlap between our audiences and these partners is useful to understand if an advertising campaign would be effective.

As part of the matching process, we segment audiences based on predefined attributes. These audiences may be similar to our partners’ existing audiences and are therefore called “lookalike audiences”. For example, a female fashion brand may want to reach “women interested in fashion”. This helps them find the right audiences and we are able to show you more relevant advertising.

You may amend your settings in order to avoid UID matching taking place in the future by contacting us (see Section 20 below) or by adjusting your account settings.

Legal basis for this processing activity: Consent (if requested) or legitimate interests

Tailored advertising

We use advertising to fund some of our websites and apps. Some advertising is ‘contextual’ meaning it is shown due to the particular webpage you are presently viewing. Other advertising, known as “online behavioural advertising” is shown to you based upon your likely interests, which are inferred from your browsing history. This information is collected through the use of cookies and similar technologies or your UID. For more information on controlling your tailored advertising preferences, please see Section 17 on Cookies below.

Sometimes we allow advertisers to show advertisements directly on our website and apps, which are tailored to you based upon information they have obtained, such as your browsing history on their own websites.

Other times we shall arrange for our customers to be shown advertisements on our own or other websites or apps. These advertisements are tailored to you with information we have obtained from your browsing on our websites and apps via cookies.

Where we arrange for our customers to be shown advertisements, we use technological and contractual mechanisms to protect your cookie data and to ensure that your browsing data used for advertising is not used by advertisers or other website owners for other purposes, such as linking online behavioural advertising data with your contact details, unless you have provided the advertiser or other website with your express permission to do this.

When you are shown an advertisement, our advertising systems do not know who you are or your contact details (such as your name, email address or postal address).

Your IP address may also be used, in connection with our legitimate interests to tailor the advertising we arrange to be shown.

We may also target advertising on social media sites to specifically include customers who have registered for our products and services.

Legal basis for this processing activity: Consent (if requested) or legitimate interests

Location based services and advertising

Where we provide services that utilise your device’s location, such as local weather or news, your location will be determined either from a lookup of your IP address in a “GeoIP” database which lists information provided by your ISP (usually your closest town or borough).

Sometimes we can collect the precise location directly from the device (such as through GPS or Wi-Fi on mobile devices) but only where you have granted permission for us to access this location information via your device settings. We use such information to provide you with a more tailored, relevant experiences when using our websites/apps.

Where you have granted permission to access your device’s location and consented to us to use your data for advertising purposes, this location information may be used to tailor the advertising you receive, including showing you certain advertisements when you are in the vicinity of a particular location.

Legal basis for this processing activity: Consent

Measurement and analytics

We may use certain information (such as the websites that you visit and advertisements you see or click on and emails you interact with) to help us, advertisers and other promotional partners measure the effectiveness and distributions of their advertisements and promotions as well as the effectiveness of our own services and communications.

Legal basis for this processing activity: Consent (if requested) or legitimate interests

Ad blocker detection

We collect information from your device to detect whether you’re using an ad blocker. This is to determine if we are able to show you advertising. As an advertising funded publisher, we rely on the ability to show you advertising.

Legal basis for this processing activity: Legitimate interests

Surveys and market research

We collect information via online survey units (Pulse Poll) and via our online research community of our readers (Matters Community) to help us better understand our readers and how they engage with the advertising they are shown. We collect this information when you voluntarily contribute or we invite you to contribute to any of our surveys, polls or forum discussions on our websites or online research community, for example when we ask you questions about your behaviour or response to adverts seen. We will also use your responses to our surveys, polls or forum discussions to send you targeted advertising, where we have your permission to do so. How we use data relating to our online survey units is covered by this Policy. For more information about how we use data relating to our online research community, please see our separate Matters Community Privacy Policy.

Legal basis for processing this data: Consent (if requested) or legitimate interests

Improving our services and products

We may use your information to monitor and improve our products, content and services. This may include (without limitation):

  • developing the design and style of our products and services to make improvements;
  • carrying out statistical, technical and logistical analysis to inform our strategic development; and
  • blocking disruptive use and ensuring the security of our products and services.

If you have registered on our websites or apps, we may analyse the information we hold on you in aggregate with our other customers to improve our advertising systems.

Legal basis for this processing activity: Legitimate interests

Disclosures permitted or required by law

Your data will be disclosed where we are obliged to do so by law. We may also disclose your information in order to protect or enforce our rights or the rights of others and for the prevention and detection of crime.

Legal basis for these processing activities: Legitimate interests or legal obligation

Regulatory compliance

We may share your personal data with the Audit Bureau of Circulations Ltd so they can verify aggregated statistics about circulation and usage of our products or review our policies, processes and procedures for compliance with relevant standards. You can view their privacy policy by following this link.

Legal basis for processing this data: Legitimate interests

Receipt of services from suppliers

If we have engaged you or the organisation you represent to provide us with products or services (for example, if you or the organisation you represent provide us with services such as IT support or financial advice), we will collect and process your personal data in order to manage our relationship with you or the organisation you represent, to receive products and services from you or the organisation you represent and, where relevant, to provide our products and services to others

Legal basis for processing this data: Legitimate interests or contract

6. If you fail to provide your personal data

Where we are required by law to collect your personal data, or we need to collect your personal data under the terms of a contract we have with you, and you fail to provide that personal data when we request it, we may not be able to perform the contract we have or are trying to enter into with you. This may apply where you do not provide the personal data we need in order to provide the services you have requested from us. In this case, we may have to cancel the provision of the relevant services to you, in which case we will notify you.

7. How we may share your information

Sharing with third-party partners

Partners: When you purchase goods or services from us, we partner with specialist companies (including payment companies) to fulfil your order and provide certain customer services. This includes vendors on MailShop who you may have bought something from and specialist companies who assist us in obtaining ratings and reviews of product(s) and/or service(s), namely, YouGarden, Clifford James Consultants Limited, KH Direct Ltd, and Aspire Furniture Ltd.

We usually remain the data controller of your information and the other companies only process data under our instructions and cannot use the information for their own purposes. If one of our third-party partners acts as data controller of your personal data (whether or not as a data controller in common with us) we shall let you know before you register for the service.

You can access the privacy policy of YouGarden here, Clifford James Consultants Limited here, KH Direct Ltd here, and Aspire Furniture Ltd. here.

Legal basis for processing this data: Contract

Service Providers: We may pass your information to our processors – companies that we use to provide services on our behalf, for example for delivery services and prize fulfilment companies. These processors can only use your information in accordance with our instructions and for no other purpose.

Legal basis for processing this data: Contract or consent (if requested) or legitimate interests

 Promotions: Sometimes we bring you promotions in association with other companies. If you enter such promotions, the other company will use the information you submit and we provide to them as a data controller in line with their own privacy policies. We shall let you know the precise arrangement at the time you provide your personal information.

Legal basis for processing this data: Consent (if requested) or legitimate interests

Cobranded products / affiliate marketing: We regularly partner with industry affiliates to bring you special deals on products and packages you may find of interest. These include travel providers on MailTravel and financial service providers on MailFinance or This is Money. These providers collect marketing permissions for us and share data back with us about your purchases in order for us to measure the effectiveness of our marketing campaigns.

If you decide to book a holiday with an affiliate, use their advisory services or set up an account, or purchase a financial product, these affiliates will be data controllers of the information you have provided them in order to administer your relationship with them and will handle your information in accordance with their own privacy policies.

Legal basis for processing this data: Legitimate interests

Functionality: We may share information about you with suppliers that we engage to help us provide our services and/or functionality of our websites and apps.

Legal basis for processing this data: Consent (if requested) or contract or legitimate interests

Advertisers: We may provide third party advertisers with reports containing aggregate statistical data about our websites’ and apps’ audience to determine the reach of their target audience. This aggregated information may include demographic data such as age range and/or geographic location of groups of our customers.

This aggregated data does not include contact details (such as names, addresses or email addresses) that can be used to personally identify you or contact you.

Legal basis for processing this data: Consent

Online Behavioural Advertising partners: We allow third parties to collect and use information obtained during your browsing activities in order to deliver tailored advertisements to you. These parties are listed in our Privacy Settings tool where we provide you with their details, links to their privacy notices and the ability to opt out of their use.

We may provide Online Behavioural Advertising partners, including DMPs, LiveRamp and ID5, with a unique UID or information that could be used to (re)create one – such as a hashed version of your email address, and they can collect or receive information about your browser and device, such as type of browser, browser language, browser settings, cookie information, device type, operating system, IP address and ISP information. This can help our selected DMP match our UIDs with data belong to our partners by using a clean room where neither we nor the partner has access to each other’s data. This match is noted against our UID and use cases are established demonstrating lookalike groupings of potential interest to our partners.

This data sharing can also help partners continue to make advertising and site/app content relevant to users even if browser cookies are cleared, for example by re-creating deleted cookies (if you have consented to this).

Please note that ID5 may also use your user ID and/or internet activity information (such as browsing history) to provide, maintain and improve their services and products. This includes research and development activities (e.g. conducting machine learning to better optimise the efficiency of their products and services) and investigating, protecting against and deterring malicious activity (such as fake traffic). For further information, please see ID5’s privacy notice here.

To withdraw your consent for those cookies or to otherwise opt out of their services directly, please visit https://liveramp.com/opt_out/ and https://id5-sync.com/privacy/optout. You can also control their use on our sites, or opt out of all non-essential site tracking, via our Privacy Settings Tool linked to above. Our Privacy Settings Tool also specifies which partners rely on your consent and which partners rely on legitimate interests to use your data.

Legal basis for processing this data: Consent (if requested) or legitimate interests

Marketing personalisation: We may match your data with data held by CACI, to add extra lifestyle and demographic insight information to your account with us which we then use to make our marketing more relevant to you (subject to your communication preferences and our internal policies and procedures). We can only obtain this information where they have your permission to share this information with us in line with their privacy policies. You can opt-out of having your personal information profiled in this way by contacting us, or our joint controllers, or adjusting your account settings. For more information about these activities and the data provided, and to opt out of their programmes directly, please visit them at CACI.

Legal basis for processing this data: Consent (if requested) or legitimate interests

Facebook insights data: Facebook Ireland Ltd (“Facebook”) provides us with statistics and insights (“Page Insights”) that help us understand the use of our Facebook Fan Pages (e.g. Daily Mail, Daily Mail Celebrities, Daily Mail Australia, Daily Mail Sport, Daily Mail Animals, Daily Mail Videos, etc.). When you visit or interact with one of our Facebook Fan Pages, we shall process your personal data as joint controllers with Facebook.

Facebook is primarily responsible for the data processing when you visit one of our Fan Pages. However, we use Page Insights and information you provide via your Facebook profile to define our audiences, customise advertisements and create Fan Pages to match the interests of our visitors.

For further information from Facebook about:

  • Page Insights and how to exercise your rights, please see here;
  • the determination of the responsibilities within this joint controller relationship please see here;
  • the placement of cookies by Facebook when visiting a Facebook Fan Page, please see here; and
  • protecting your privacy at Facebook, please see here.
Legal basis for processing this data: Legitimate interests

Social media plugins: Some of our websites use social media plugins to help you share content more easily with your friends.

Social Media Plugin  Privacy policy
Facebook Share Button

Facebook Messenger Share Button

Facebook Like Button

https://www.facebook.com/policy.php
Twitter Share Button

Twitter Follow Button

https://twitter.com/en/privacy
Pinterest Share Button

Pinterest Follow Button

https://policy.pinterest.com/en-gb/privacy-policy
Flipboard Share Button

Flipboard Follow Button

https://about.flipboard.com/privacy/
Instagram Follow Button https://help.instagram.com/519522125107875
Snapchat Follow Button https://www.snap.com/en-GB/privacy/privacy-policy

If you do not click on the respective buttons, no personal data will be collected and stored by the social media company.

If you are logged onto to your Facebook, Twitter, Pinterest, Flipboard, Instagram or Snapchat account, certain user data (including your IP address at the time) may be collected and linked to your social media account information by the respective social media company.

We receive no personal data from the social media companies about which articles you have clicked or seen on our websites. However, we do receive summarised, aggregated statistical reports on the use of these plugins.

Legal basis for processing this data: Legitimate interests

DMGT group:Associated Newspapers Ltd. is part of the Daily Mail and General Trust plc Group (“DMGT”). Members of DMGT may, use and share, within that group, the information you provide and other information held about you for the purposes set out in this Policy. For more information about the DMGT group please see the DMGT website and the DMGT Privacy Policy.

Legal basis for processing this data: Legitimate interests

Change of Control: We may transfer, sell or assign any of the information described in this Policy to third parties as a result of a sale, merger, consolidation, change of control, transfer of assets or reorganisation of our business.

 Legal basis for processing this data: Legitimate interests

 Ipsos Iris Online Audience Measurement Solution: When you visit our website, we may collect certain personal data about you for an online audience measurement project that analyses internet users’ behaviour and profile across different websites, applications and devices in the UK. In order to do this, our website will contain tags which is a script used to gather personal data on a website; this means when visiting the site, we can record the amount of active time spent on each web page by each user and will be reported by type of device.

We will also use digital fingerprint technology, also known as "Machine Identification", to gather certain information about your computer, hardware and software, such as: IP address, unique device identifier, display settings of your monitor, type of browser used and type of operating system. This information will be converted into a unique serial number (the digital "fingerprint") and determines if it matches previous fingerprints.

Ipsos MORI, a specialist research agency will be carrying out this research, in conjunction with UKOM, the UK Online Measurement company. To carry out this research, Ipsos MORI and their trusted partner, DotMetrics, will need to receive the information gathered about your computer, hardware, software and webpage activity in order to carry out the research and analysis. This information will only be shared with Ipsos MORI and DotMetrics, if we have obtained the relevant consent from you when you initially accessed our website.

Please be assured that Ipsos MORI takes its data protection and information security responsibilities seriously and applies various precautions to ensure your personal data is protected from loss, theft or misuse. Your personal data will only be used for research and analysis purposes in line with the Market Research Society Code of Conduct and associated regulations and guidelines. All reporting for this research will be anonymous. Ipsos MORI will only retain your personal data in a way that can identify you for as long as is necessary to support the research project and findings.

To contact Ipsos MORI about this specific research, please email compliance@ipsosiris.com

Legal basis for processing this data: Legitimate interests or consent (if requested)

8. Details of transfers to third countries and safeguards

Any organisation who has access to your information in the course of providing services on our behalf will be governed by contractual restrictions and/or technical limitations to make sure they protect your information and comply with applicable data protection legislation.

When transferring your personal data outside the United Kingdom (UK) or the European Economic Area (EEA), we will comply with our legal and regulatory obligations in relation to your personal data, including having a lawful basis for transferring personal data and putting appropriate safeguards in place to ensure an adequate level of protection for the personal data. Where these organisations are based outside of the UK or the EEA in a jurisdiction that has not been deemed adequate by the EU Commission, we shall, if appropriate, enter into EU Commission approved model clauses with these organisations to ensure appropriate safeguards are in place. We will take reasonable steps to ensure the security of your personal data in accordance with applicable data protection laws.

9. Joint Controller Processing

We sometimes work with other organisations and process data collected by them as Joint Controllers. This means that both we, and the other organisation, have responsibilities to process your data in accordance with relevant Data Protection and Privacy laws. Where this is the case, you may approach either ourselves, or the other organisation, to fulfil any data subject requests in relation to your data. We will process any personal data under this arrangement in accordance with this Privacy Notice. If you wish to know more about our Joint Controller arrangements in this regard, please contact us at dataprotection@dmgmedia.co.uk.

Facilitation of the Advertising served on GB News’ website is conducted under a Joint Controller relationship between ourselves and GB News. Their privacy notice, which will apply to how they process personal data under this agreement, can be seen here.

10. Your rights under the UK GDPR and the EU GDPR

In certain circumstances, for example if you are a UK or EEA resident, you may exercise the rights available to you (with some exceptions and restrictions) under the UK or the EU data protection laws as follows:

  • Access: If you wish to exercise your right to access a free copy of your data, you can contact us, or our joint controllers, at the contact details provided below at Section 20.
  • Portability:: If you wish to receive personal data that you have provided to us in a structured, commonly used and machine-readable format, or transmit this data directly to another controller, please contact us, or our joint controllers, at the contact details provided below. Please note that this right applies only to the information that is processed by automated means, on the basis of consent or performance of a contract.
  • Deletion: To ask us to delete your personal data, please contact us, or our joint controllers, at the contact details provided below. However, there may be circumstances where we are legally entitled to retain certain data.
  • Rectification: If you wish to update or rectify your data, you can do this directly by accessing your account settings.
  • Restriction: To request the restriction or suppression of your personal data, please contact us, or our joint controllers, at the contact details provided below.
  • Revoke consent for direct marketing: : If you wish to object to the processing of your data for direct marketing, you can opt-out by updating your settings or clicking on the ‘unsubscribe’ link in any marketing email or newsletter you receive from us.
  • Opt-out of online behavioural advertising: You are able to control whether we and our partners may use your information for online behavioural advertising related purposes when you visit our websites via our Consent Management Platform that appears when you first visit our sites, or by going to the Privacy Settings.
  • Objection to automated profiling: If you wish to opt-out of having your personal information profiled for personalisation purposes, you can adjust your account settings or contact us directly at the contact details provided below.
  • Objection to legitimate interests: If you wish to object to our processing of your data where we are pursuing our legitimate interests or those of a third party, please contact us, or our joint controllers, at the contact details provided below stating the nature of and reasons for such objection.
  • Complain: You also have the right to lodge a complaint about us with your local supervisory authority, for example the Information Commissioner’s Office in the UK.

Exercising Your Rights

To exercise your rights under the GDPR, please contact us, or our joint controllers, at the contact details provided below in Section 20, indicating the type of right you would like to exercise and that you are making the request under the GDPR. In case of requests for deletion, please note there may be circumstances where we are legally entitled to retain certain data (see Section 15 Data retention and account deletion).

We may seek to verify the identity of the person submitting the request.

Where you are making a request via a third party, we need to be satisfied that the third party making the request is entitled to act on your behalf and may ask the third party to provide evidence of this entitlement. If we are satisfied that the third party has the appropriate authority, we will respond directly to that third party.

11. Your rights under the CCPA (for California residents only)

This section of the Policy applies solely to visitors, users, and others who are residents of the State of California. The California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act of 2020 (“CPRA”), collectively referred to as “California Consumer Privacy Laws,” provide California consumers with specific rights regarding their personal information. This section describes your rights under the California Consumer Privacy Laws, explains how you can exercise those rights, and provides an overview of the types of personal information we collect.

Under the California Consumer Privacy Laws you have the following rights :

  • Right to know. You have the right to know about the categories and the specific personal information that we may collect, the purposes for collecting that personal information, the categories of third parties to whom we may disclose that personal information and whether we disclose personal information for business purposes or for commercial purposes that would be considered a “sale” under the California Consumer Privacy Laws .
  • Right to data portability. You have the right to request a copy of the personal information we have collected and maintained about you during the 12 months preceding the request.

Upon receipt of a valid and verifiable request from you, we shall disclose to you both the categories and specific pieces of personal information we have collected about you, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting that personal information, the categories of third parties which whom we share that information.

You have a right to receive the above twice per year. If we provide the information electronically, it will be in a in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another entity without hindrance from us.

  • Right to delete. You have the right to request that we delete any personal information that we have collected from you unless retention of that information is permitted under applicable law. Please note that if you request deletion of your personal information, we may deny your request or may retain certain elements of your personal information if it is necessary for us or our vendors to:
    • Complete the transaction for which the personal information was collected, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between our business and you.
    • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
    • Debug to identify and repair errors that impair existing intended functionality.
    • Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
    • Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
    • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the deletion of the information is likely to render impossible or seriously impair the achievement of such research, if you have provided informed consent.
    • To enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us.
    • Comply with a legal obligation.
    • Otherwise use the personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
  • Right to correct. You have the right to request the correction of any personal information we maintain about you.
  • Right to opt-out of the sale or sharing. You have the right to opt out of the sale or sharing of your personal information, along with the right to later opt in to the sale of such information.

You can opt-out of the sale of your personal information by opening our California Privacy Settings tool and clicking on the “Do Not Sell or Share My Personal Information” button at any time. This will opt-you out of cookie placement and the collection of your data by online advertising service providers. We will also treat Global Privacy Control browser signals as opt-out of sale/share requests.

Exercising Your Rights

To exercise your rights under the California Consumer Privacy Laws, please contact us, or our joint controllers, at the contact details provided below in Section 20, indicating the type of right you would like to exercise and that you are making the request under the California Consumer Privacy Laws.

In order to process your deletion and/or access request, we are required by law to collect certain information about you to verify your identity. For example, if you have an account with us, you can use your account information to verify. If, however, we cannot verify your identity from the information already maintained by us, we may request additional information from you, which shall only be used for the purposes of verifying your identity under the California Consumer Privacy Laws , and for security or fraud-prevention purposes, such as a passport or driver’s license.

A consumer may use an authorised agent to submit a request on their behalf if the consumer provides the authorised agent written permission signed by the consumer. We may also require that the consumer verify their identity directly with us and confirm that they have provided the authorised agent permission to act on their behalf.

We will make every effort to respond to your request within 45 days from when you contacted us. If you have a complex request, the California Consumer Privacy Laws allow us up to 90 days to respond. We will still contact you within 45 days from when you contacted us to let you know we need more time to respond.

We will not discriminate against you because you have exercised your rights under the California Consumer Privacy Laws .

Explicit Notice

We and our advertising partners collect personal information (such as the cookies stored on your browser, the advertising identifier on your mobile device, or the IP address of your device) when you visit our site or use our app. We, and our third-party business partners, use this information to tailor and deliver ads to you on our site or app, or to help tailor ads to you when you visit others’ sites or use others’ apps. To tailor ads that may be more relevant to you, we and/or our partners may share the information we collect with third parties.

If you do not wish for us or our partners to use and disclose your personal information to third parties in this manner, which is considered a “sale” under the California Consumer Privacy Laws, select the applicable control from the “Do Not Sell or Share My Personal Information” link.

Please note that although we shall not sell your personal information after you click that button, we shall continue to share some personal information with our partners (who will function as our service providers in such instance) to help us perform advertising-related business functions such as, but not limited to:

  • measuring the effectiveness of our ads;
  • managing how many times you may see an ad;
  • reporting on the performance of our ads;
  • ensuring services are working correctly and securely;
  • providing aggregate statistics and analytics;
  • improving when and where you may see ads; and/or
  • reducing ad fraud.

If you access this site or app from other devices or browsers, visit the link below from those devices or browsers to ensure your choice applies to the data collected when you use those devices or browsers. If you use different browsers, devices or platforms, you will need to opt out on each browser, device or platform.

Additionally, although clicking the “Do Not Sell or Share My Personal Information” link will opt you out of the sale of your personal information for advertising purposes, it will not opt you out of the use of previously collected and sold personal information or all context-based advertising.

Personal Information We Collect

The California Consumer Privacy Laws define personal information as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include:

  • Information that is lawfully made available from federal, state, or local government records;
  • De-identified or aggregated information; and
  • Information excluded from the California Consumer Privacy Laws such as health or medical information covered under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and financial information covered under the Fair Credit Reporting Act (“FCRA”) or Gramm-Leach Bliley Act (“GLBA”).

Information regarding our collection, use and disclosure of personal information are detailed elsewhere in this Policy. To help consumers make informed privacy decisions, the California Consumer Privacy Laws create and define categories of personal information, and our practices regarding personal information are organized below into the aforementioned categories. Please note that some types of personal information may apply to multiple categories.

In the past 12 months, we have collected the categories of personal information described in Table 1 below for the business or commercial purpose(s) indicated. Depending on your level of interaction with us, we may not have collected your personal information from all of the categories.

Table 1: Categories of Personal Information

Category Purposes
Identifiers Providing Content Services, Auditing, Data Security & Fraud Prevention, Troubleshooting, Develop and improve services, Commercial Interests, Content Personalisation, Subscription & Loyalty Programs.
Customer records information Providing Content Services, Auditing, Commercial Interests, Develop and improve services, Content Personalisation, Subscription & Loyalty Programs,
Characteristics of protected classifications under California or federal law None
Commercial information Providing Content Services, Auditing, Commercial Interests, Develop and improve services, Content Personalisation, Subscription & Loyalty Programs.
Internet or other similar network activity information Providing Content Services, Auditing, Commercial Interests, Data Security & Fraud Prevention, Troubleshooting, Develop and improve services, Content Personalisation, Subscription & Loyalty Programs.
Geolocation data Providing Content Services, Auditing, Commercial Interests, Data Security & Fraud Prevention, Troubleshooting, Develop and improve services, Content Personalisation, Subscription & Loyalty Programs.

Table 2: How We Use and Disclose Your Personal Information

Table 2 below describes the sources for each category of personal information we collect, the entities to whom we (i) may disclose your personal information; (ii) we may sell your personal information; and (iii) with whom we may share your personal information for cross-context behavioural advertising.

Category Source Shared with
Identifiers Directly from consumers

Website cookies

Our Affiliates; customer service providers; payment processors;  Social Media platforms and Third-Party Services providers; advertising networks; advertising platforms; data analytics providers; our security, fraud, and legal compliance partners.
Customer records information Directly from consumers Customer service providers; payment processors; Third-Party Services providers.
Characteristics of protected classifications under California or federal law N/A
Commercial information Directly from consumers

From our Third-Party Services providers

Our Affiliates; customer service providers; payment processors; data analytics providers; our security, fraud, and legal compliance partners.
Internet or other similar network activity information Directly from consumers

From our Third-Party Services providers

Our Affiliates; customer service providers; Social Media platforms and Third-Party Services providers; advertising networks; advertising platforms; data analytics providers; our security, fraud, and legal compliance partners.
Geolocation data Directly from consumers

From our Third-Party Services providers

Our Affiliates; customer service providers; payment processors;  Social Media platforms and Third-Party Services providers; advertising networks; advertising platforms; data analytics providers; our security, fraud, and legal compliance partners.

California “Shine the Light”

Under California Civil Code Section 1798.83 (“Shine the Light”), if you reside in California, you have the right to ask us one time each year if we have shared personal information with third parties for their direct marketing purposes. To make a request, please send us an email at the contact details provided below in Section 20, and indicate that you are a California resident making a “Shine the Light” inquiry. Requests are free of charge.

12. Your Virginia and other state privacy rights

This section of the Policy applies solely to visitors, users, and others who are residents of the Commonwealth of Virginia, describes your Virginia Consumer Data Protection Act (“VCDPA”) rights and explains how you can exercise those rights. We will also apply similar VCDPA rights to residents of other U.S. states with similar laws to which you and we are both subject.

The categories of personal information we process, our purposes for processing your personal information, the categories of personal information that we share with third parties and the categories of third parties with whom we share it are detailed above in this Policy.

Certain rights that you may have concerning your personal information are set forth in this Policy. The VCDPA provides you with the following additional rights:

  • Right to know. You have the right to know whether we process your personal information and to access such personal information.
  • Right to data portability. You have the right to obtain a copy of your personal information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another business without hindrance, where the processing is carried out by automated means. You may request such personal information up to twice annually, subject to certain exceptions.
  • Right to delete. You have the right to delete personal information that you have provided by or that we have obtained about you. Please note that we may deny such request if the requested deletion falls under an exception to this right set forth in the VCDPA. Additionally, if you request deletion of your personal information and we have obtained such information from a third-party source, we may retain such data by keeping a record of the deletion request and the minimum data necessary to ensure that your personal information remains deleted from our records and that such retained data is not used for any other purpose, or we may opt you out of the processing of such personal information for any purpose except for those allowed under the VCDPA.
  • Right to correct. You have the right to correct inaccuracies in the personal information we collect from you, taking into account the nature of the personal information and the purposes for which we process it.
  • Right to opt out of selling or sharing. You have the right to opt out of the processing of the personal information for purposes of (i) targeted advertising, (ii) the sale of personal information, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. If you wish to opt out of the processing of your personal information for any of the purposes set forth in this sub-section, please see our Virginia Privacy Settings tool and click on the “Do Not Sell or Share My Personal Information” button at any time.

Exercising Your Rights

To exercise your rights under the VCDPA, please contact us, or our joint controllers, at the contact details provided below in Section 20, indicating the type of right you would like to exercise and that you are making the request under the VCDPA. In case of requests for deletion, please note there may be circumstances where we are legally entitled to retain certain data (see Section 15 Data retention and account deletion).

After submitting a request, we will take steps to verify your identity in order for us to properly respond and/or confirm that it is not a fraudulent request. In order to verify your identity, we will request, at a minimum, that you provide your name, email address, phone number, address, and relationship to us, so that we can seek to match this information with the information existing in our systems. When providing us this information, you represent and affirm that all information provided is true and accurate. If we are unable to verify using reasonably commercial efforts that the consumer submitting the request is the same individual about whom we have collected personal information, then we are not required to comply with the request; we may contact you for more information reasonably necessary to authenticate the request, but ultimately we may not be able to meet your request.

Only you may make a verifiable request related to your personal information. If you are making a request as the parent or legal guardian of a known child regarding the processing of that child’s personal information, we may ask you to submit reliable proof of your identity.

We will make every effort to respond to your request within 45 days from when you contacted us. If you have a complex request, the VCDPA allows us up to 90 days to respond. We will still contact you within 45 days from when you contacted us to let you know we need more time to respond and the reason for the extension.

We shall not discriminate against you because you have exercised your rights under the VCDPA.

Your Right to Appeal

If we decline to take action regarding a request that you have submitted, we will inform you of our reason for declining to take action and provide instructions for how to appeal the decision. In the event that we do not respond to a request that you make pursuant to one of the privacy rights set forth in this section, you have the right to appeal our refusal to take action within a reasonable period of time after you receive our decision. Within 60 days of our receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, we will also provide you with an online mechanism, if available, or other method through which you may contact the Attorney General to submit a complaint.

13. Your Nevada privacy rights

If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information to third parties who intend to license or sell that personal information. You can exercise this right by contacting us, or our joint controllers, at the contact details provided below in Section 20, with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account.

14. Your rights under the LGPD

This section describes your rights under the Brazil general data protection law (“LGPD”) and explains how you can exercise those rights.

This section of the Policy applies to:

  • Personal data collected in Brazil;
  • Personal data processing activities that are carried out in Brazil;
  • Personal data processing activities whose purpose is to process personal data of individuals in Brazil; and/or
  • Personal data processing activities whose purpose is to offer or provide goods or services to individuals in Brazil.

In certain circumstances, for example if you are a Brazil resident, you may exercise the rights available to you (with some exceptions and restrictions) under the LGPD. Please see Section 10 above for details of the rights of information, access, portability, deletion, correction, revoke consent for direct marketing and opt-out of online behavioural advertising. Also, see Section 10 above for details of how to exercise your rights. Please include in your request that you are making your request under the LGPD.

15. Data retention and account deletion

We store your data for no longer than necessary in relation to the purpose under which such data was collected. This is determined on a case by case basis and depends on things such as the nature of the data provided, why it was collected, the legal basis we rely upon to process the data, and our relevant legal or operation retention requirements. For example, if you request to delete your account, we still have to retain some data for fraud prevention purposes and financial auditing.

Please note that we evaluate deletion requests against our processing for the purposes of journalism, which includes original content and accompanying comments. When we receive a request to delete your personal data from our organisation, we are prepared to anonymise your comments by removing your email address and alias from your public account profile. In doing so, your comments are disassociated with your public account profile and therefore you are no longer publicly identified as the author of your comments. However, we keep your data because we may receive claims for libel and or/defamation in relation to user comments.

Please see our Terms and House Rules for more information.

16. Children and young people

Our websites, apps and other products and services are not aimed at children. We do not intentionally target, or otherwise process information from individuals who are under the age of 16.

We do not create interest segments specifically designed for the purpose of online behavioural advertising to children who are under the age of 16.

You must be at least 16 years of age to consent to online behavioural advertising via your Privacy Settings. If you are aged under 16, please ask for permission from your parent or guardian before giving us your information or using our websites or apps.

If you are a parent or guardian of a child under 16, please contact us, or our joint controllers, if you are aware that your child has used our websites or apps or otherwise provided their information to us without your consent. We shall delete or otherwise cease processing your child’s personal information within a reasonable time.

In accordance with industry best practice guidelines, we may retain your information for a reasonable amount of time to make sure that we do not contact you in the future.

17. Cookies and other identifiers

When you use our websites and apps or interact with our emails, we may collect information using cookies or similar technologies. We may also collect information using your email address. For the purposes of this section, we use the word “cookies” for simplicity.

What are cookies and how do they work?

Cookies are small files that are downloaded to your computer or mobile device when you visit a website. Your browser sends these cookies back to the website every time you visit the site again, so it can recognise you. This allows websites to tailor what you see on the screen.

Do you use other technologies which are similar to cookies?

Yes, we use the following:

  • Web beacons: Our websites, apps and emails often contain small invisible images known as “web beacons” or “tracking pixels”. These are used in a way similar to cookies to:
    • understand when a particular part of a webpage, email or app is viewed;
    • understand how successful an article or an email marketing campaign has been; and
    • verify any clicks through to links or advertisements contained in emails.
  • Tracking URLs: These are web links that allows us to measure when a link is clicked on. They help us measure the effectiveness of campaigns and advertising and the popularity of articles that are read.
  • Device identifiers: We use device identifiers on mobile devices in the same way as cookies are used on web browsers. A device identifier is a unique number on your device which allow us to remember your device.

We use these similar technologies on websites, emails and apps, for the same purposes and in much the same way as we use cookies on websites. We shall use “cookies” and “websites” below as shorthand for “cookies and similar technologies” on “websites, emails and in apps”.

What do you use cookies for?

Cookies and other online tracking technologies are an important part of the internet. They make using websites much smoother and affect lots of the useful features of websites.

There are many different uses for cookies, but for within our sites, they fall into the following groups:

Cookies that are needed to provide the service you have asked for (Essential / Strictly Necessary)

Some cookies are essential so you can move around our websites and use their features. Without the use of these cookies parts of our websites would not function. For example:

  • your username and keeping you logged in during your visit – without cookies you might have to log in on every page you go to; and
  • when you add something to the online shopping basket, cookies make sure it is still there when you get to the checkout. 

Cookies that collect information about your choices and preferences (Functional / Preference)

These cookies collect information about your choices and preferences, and allow us to remember things like:

  • remembering a location you’ve provided us with so we can show you relevant content to where you are and to provide local weather forecasts;
  • if you have filled in a survey, so you’re not asked to do it again; and
  • showing “related article” links that are relevant to the page you are looking at.

Cookies used to understand how people use our products and services (Analytics)

We use analytics cookies to gather information about what pages, links and sections of our apps are popular and which ones do not get used so much to help us keep our sites relevant and up to date. They are also useful to be able to identify trends of how people navigate our sites so we can identify improvements to make to the customer journey.

We may combine information collected by analytics cookies with other information that you provide to us. For instance, if you have registered for an account with us, we may combine your contact details other information you provide us with the browsing history from your device collected by analytics cookies (including data collected from before you registered and when you are signed-out).

We may also use this combined information to improve our products and services. For instance, we may analyse this information in aggregate to improve our advertising systems.

Our properties may also feature Nielsen proprietary measurement software, which will allow you to contribute to market research, such as Nielsen TV Ratings. To learn more about the information that Nielsen software may collect and your choices with regard to it, please see the Nielsen Digital Measurement Privacy Policy.

Cookies used to show advertising that is relevant to you (Tracking and Advertising)

Some advertising, known as “online behavioural advertising” is tailored to you and uses information collected by first party and third-party cookies based your web browsing activity.

Cookies are placed on your browser to remember the websites you have visited. Also, when you log into your account, we can recognise your UID. Advertising based on what you have been looking at is then displayed to you when you visit websites who use the same advertising networks.

To help us deliver relevant advertising using cookies, we use Google Marketing Platform. Click here to find out more about Google Marketing Platform.

Additionally, to help us deliver relevant advertising using cookies and track audience conversion, we use Facebook Ads. You can find more information about Facebook Ads here.

We also use these cookies in order to:

  • know how many advertisements we serve, how many times these are clicked or hovered over with a mouse cursor, how many advertisements we show to a given user and how many customer actions these generate;
  • understand which customers reach a sale or other action page on an advertiser’s site. This allows us to monitor how many sales or actions we achieve for an advertising client, and therefore, how effective our advertising is; and
  • protect our advertisers’ brands, we often use a technology that scans the page to ascertain that it is safe from profane, sensitive and potentially brand-negative topics, before serving an ad there. This process is called “ad verification”.

Ad-blockers: We and our advertisers may use information from within our webpages to determine whether you have an ad-blocker enabled. This information may be stored or associated with your device (including through the use of cookies) to re-insert advertisements on our websites and to understand how our customers use ad-blockers. The advertisements that are re-inserted may include those from ad-blockers’ “white lists” or that promote our own products and services. We reserve the right to restrict your access to some or all of our website while you have an ad blocker turned on.

Do Not Track: Our websites do not respond to “Do Not Track” browser settings; however, we treat Global Privacy Control signals as an opt-out of selling or sharing of personal information under the California Consumer Privacy Laws, and as opt-out of processing for targeted advertising requests under the VCDPA.

Managing Cookies: You can change your cookie settings on this website at any time via your Privacy Settings. Please note that this consent tool is not supported on certain versions of Internet Explorer. Please change your browser in order to exercise your rights under the UK GDPR or the EU GDPR.

Cookies can also be controlled using the following instructions:

  • Mobile Devices: When using a mobile device, you can opt-out of receiving online behavioural advertising by selecting “Limit Ad Tracking” in the Settings of your Apple iPhone or iPad, or the “Opt out of interest-based ads” in the Settings on your Android device. You may also be able to reset your unique identifier used for online behavioural advertising (referred to as an “Advertising ID”) in the Settings on your Apple or Android device.
  • Online Behavioural Advertising cookies:: If you are primarily concerned about third party cookies generated by advertisers, you can turn these off by going to Your Online Choices.
  • Web-Beacons: You can usually prevent the operation of web-beacons by changing your web-browser Privacy Settings and your ad choices, or for those in emails, by switching off images in your email client or viewing emails using only the “text” display (rather than “HTML” display’). See the “Help” section of your email client for instructions. Please see the All About Cookies website for further information about managing your options.
  • You can also visit the trade body representing these advertising platforms where you can control your third-party online advertising preferences by going to th Network Advertising Initiative.
  • Browsers: The links below take you to the help sections for each of the major browsers that will tell you how you can manage your cookies:

Please note that our website, apps and other products and services may not work correctly (or at all) if you change certain preferences. For example, you may not be able to purchase products via our websites. However, you may still be able to place an order via our telephone order line.

Where you use our apps, similar technologies to cookies are used for analytics, it is not presently possible to opt-out of these similar technologies. If you are not happy to be included in our analysis, please do not use our apps.

Please also note that after applying these settings, you will continue to receive advertising, however, it may not be tailored to your likely interests using information collected from cookies and similar technologies on your device.

18. How we protect your personal information

Personal information is maintained on our servers or those of our vendors, and is accessible by authorized employees, representatives, and agents as necessary for the purposes described in this privacy policy.

We use reasonable and appropriate physical, technical, and organizational safeguards designed to promote the security of our systems and protect the confidentiality, integrity, availability, and resilience of personal information. [Those safeguards include: (i) the pseudonymization and encryption of personal information where we deem appropriate; (ii) taking steps to ensure personal information is backed up and remains available in the event of a security incident; and (iii) periodic testing, assessment, and evaluation of the effectiveness of our safeguards.]

However, no method of safeguarding information is completely secure. While we use measures designed to protect personal information, we cannot guarantee that our safeguards will be effective or sufficient. In addition, you should be aware that Internet data transmission is not always secure, and we cannot warrant that information you transmit utilizing the Properties is or will be secure.

19. Updates to this Policy

We reserve the right to make changes to this Policy. Where changes are made, we shall post the revised Policy here with an updated effective date. Please check regularly for any changes to this Policy. Your continued use of our products and services after the effective date of the revised Policy (or such other act specified at that time) will constitute your consent to those changes. However, we will not, without your consent, use your personal information in a manner materially different from what was stated at the time your personal information was collected.

20. How to contact us

If you have any queries or comments about this Policy or wish to exercise any of your rights under the UK GDPR, the EU GDPR, the California Consumer Privacy Laws , VCDPA or other laws, we encourage you to contact us at: dataprotection@dmgmedia.co.uk or using the free toll numbers for California on 877-439-7822 and Virginia on 888-583-2992,

Alternatively, you can write to us at:

Legal Department – Data Protection & Privacy
Associated Newspapers Limited
Northcliffe House
2 Derry Street
London, W8 5TT
U.K.

Alternatively, you can also write to us at:

Associated Newspapers (Ireland) Limited
Top Floor,
Two Haddington Buildings,
20-38 Haddington Road,
Dublin 4,
D04 HE94
Republic of Ireland

You can write to our DPO at:

Dunphy-Moriel Legal Services Ltd.
F.A.O. Data Protection office - Associated Newspapers Ltd.
85 Great Portland Street
First Floor
London, W1W 7LT
UK