What we collect, and what we don’t

We collect as little as we can get away with, and we do not sell any of it.

We are an independent newsroom, not an advertising technology company. Reading an article on SportPulse News does not require an account, and we do not build advertising profiles of our readers or share your data with data brokers.

This policy explains what we do collect, why we collect it, how long we hold it, and how to get it back or have it deleted. If anything here is unclear, ask us — the address is at the foot of this page.

• We never sell personal data. To anyone, for any price.
• No third-party ad trackers. Display advertising on this site is contextual, not behavioural.
• No account needed to read. Accounts exist for subscriptions and comment history only.
• Source material is treated separately and is never stored on systems covered by this policy.

We collect three kinds of information, and nothing else.

We process personal data on four lawful bases, and we use the narrowest one that fits.

• Contract — to deliver a subscription or newsletter you asked for.
• Legitimate interests — to keep the site secure, prevent fraud, and understand in aggregate which stories are read.
• Consent — for analytics cookies and any marketing email beyond what you signed up for. You can withdraw it at any time.
• Legal obligation — to keep financial records and respond to lawful requests.

We use a small number of processors to run the site. Each is bound by contract to process data only on our instructions, and none of them may use it for their own purposes.

We delete data when it stops being useful for the purpose we collected it for.

• Newsletter subscribers — until you unsubscribe, then 30 days.
• Subscription records — seven years, because tax law requires it.
• Server logs — 90 days, then deleted automatically.
• Analytics — aggregated after 14 months; no raw event data is kept beyond that.
• Inactive accounts — deleted after three years of no sign-in, with an email warning first.

Ask, and we will do it — usually inside five working days.

Wherever you live, we apply the same set of rights to everybody, because running two standards is a good way to get one of them wrong.

• Access — a copy of everything we hold about you, in a readable format.
• Correction — fix anything inaccurate.
• Deletion — remove your data, except records we are legally required to keep.
• Portability — take your data to another service.
• Objection — stop us processing on legitimate-interest grounds.
• Complaint — to us first, and to your data protection authority if we do not resolve it.

Data is encrypted in transit and at rest. Access is limited to the people who need it, logged, and reviewed twice a year. Everyone with access takes annual data-handling training.

Our processors are in the UK and the EU. Where any transfer outside those areas is unavoidable, it is covered by standard contractual clauses, and we will say so here.

When we change something material, we date the change at the top of this page and email anyone whose data is affected before it takes effect. Minor wording fixes are logged in the version note but not emailed.

Previous versions are available on request.