Privacy Notice
How we handle personal data for website visitors, newsletter subscribers, professional contacts, contributors, advertisers and commercial partners.
This notice is published ahead of launch so it can be reviewed. The fields highlighted in orange are still to be completed, and the notice does not take effect until they are. It will be finalised before the site opens on Monday 19 October 2026.
1. Who we are
The Digital Chief is operated by [LEGAL ENTITY NAME], company number [NUMBER], registered office [ADDRESS]. For data protection questions contact [PRIVACY EMAIL]. ICO registration number, if applicable: [NUMBER].
2. Scope
This notice explains how we handle personal data relating to website visitors, newsletter subscribers, professional contacts, contributors, job users, advertisers, partners and people who interact with our content, social channels or applications.
3. Data we may collect
4. Purposes and lawful bases
Providing the service
To operate the site, app, accounts, subscriptions and requested services. Basis: contract and/or legitimate interests, depending on context.
Newsletter and requested marketing
To send The Weekly Brief and other communications users request. Basis: consent where required and applicable electronic-marketing rules.
B2B professional outreach
To introduce The Digital Chief to relevant professional contacts where lawful. Basis: legitimate interests for personal-data processing where appropriate, together with applicable PECR and e-privacy rules. We maintain suppression records for objections.
Analytics and product improvement
To understand service performance and improve content. Basis depends on technology used; non-essential device storage and access is controlled through the consent mechanism where required.
Advertising and commercial partnerships
To sell, deliver, measure and report advertising, sponsorship and Partner Content. Advertising and tracking technologies are used only in accordance with applicable consent requirements.
Affiliate commerce
To attribute qualifying referrals and commissions. Affiliate links are disclosed and relevant tracking technologies are controlled as required.
Security and legal
To prevent abuse, protect systems, enforce terms and comply with legal obligations. Basis: legitimate interests and/or legal obligation.
5. Sources of data
We collect information directly from you and may obtain professional contact information from business data providers, professional directories, company websites and other lawful public or business sources. Where UK GDPR transparency rules require it, we provide privacy information within the applicable period.
6. Sharing
We do not sell personal data as a standalone data-broker product.
7. International transfers
Some service providers may process data outside the UK and EEA. Where required, we use recognised transfer mechanisms and safeguards. [INSERT ACTUAL PROVIDERS AND TRANSFER MECHANISMS BEFORE LAUNCH]
8. Retention
We retain data only as long as necessary for the purpose collected, legal and accounting obligations, dispute handling and suppression requirements. [INSERT RETENTION SCHEDULE] Suppression records may be retained to ensure a person who opted out is not contacted again.
9. Your rights
Depending on applicable law, rights may include access, correction, erasure, restriction, portability, objection and withdrawal of consent. You have an absolute right to object to processing for direct marketing. Contact [PRIVACY EMAIL]. You may also complain to the UK Information Commissioner's Office or the relevant supervisory authority.
10. Children
The Digital Chief is a professional publication and is not directed at children. We do not knowingly use children's data for targeted marketing.
11. Changes
We may update this notice. Material changes will be reflected by the effective date and, where appropriate, additional notice.
12. Community and user-generated content
If the native Digital Chief Community is enabled, we process account and professional-profile information together with community activity such as threads, replies, topic selections, reactions, follows, bookmarks, reports, moderation records and notification preferences. We use this data to provide the community, authenticate and protect accounts, enforce participation rules, personalise relevant experiences, route questions to appropriate experts where enabled, operate moderation and safety controls, analyse aggregate community health and identify potential editorial or research signals. We do not sell identifiable member data to advertisers or sponsors.
Community contributions may be visible to other users and, where a thread is deliberately made public and approved for indexing, may be visible on the public web and in search engines. Private or restricted areas remain subject to access controls. Profile visibility and attribution settings are separate from newsletter marketing consent.
Automated systems, including approved Claude Routines, may assist with classification, spam and abuse detection, moderation triage, duplicate detection, summarisation and expert matching. Consequential account sanctions and ambiguous moderation decisions remain subject to the governance and human-review controls described in the Community Participation, Moderation and UGC Policy.
If content is removed or an account is closed, we may retain limited moderation, security, suppression and audit records where necessary to enforce rules, prevent repeat abuse, meet legal obligations or resolve disputes.
13. Effective date
Effective: [DATE]. Last updated: [DATE].
