Who is responsible for your data?
Windmill Hill Media Ltd., a private company limited by shares registered in Gibraltar (company number 130642), is the data controller for MorningTimes.uk. Our registered office is Suite 12, Neptune House, Marina Bay, Gibraltar GX11 1AA. All personal data collected through our publication is controlled by this entity under UK GDPR.
As the operator of MorningTimes.uk, Windmill Hill Media Ltd. determines the purposes and means of processing your personal information. Our editorial team, led by Editor-in-Chief Edward Sterling, operates independently of commercial interests. For any data protection enquiries, you may contact us at privacy@morningtimes.uk or via our main phone +350 200 66010.
What personal data do we collect?
We collect personal data you provide directly, such as your email address when you subscribe to our newsletter or contact us, and technical data automatically through cookies and analytics tools. This includes browsing behaviour, device information, and advertising or affiliate tracking identifiers. Full details are in our Cookie Policy.
Specifically, we collect: email correspondence sent to any @morningtimes.uk address; newsletter subscription data (name and email); technical data such as IP address, browser type, operating system, and pages visited; and data from cookies used for analytics, advertising, and affiliate link tracking. We do not collect sensitive categories of personal data unless voluntarily provided in correspondence. Our Newsletter page explains how you can manage your subscription preferences.
How do we use your data and what is our lawful basis?
We use your data to deliver editorial content, process newsletter subscriptions, respond to enquiries, improve our website through analytics, and support our advertising and affiliate revenue model. Our lawful bases are consent (for cookies and marketing), legitimate interests (for analytics, security, and editorial correspondence), and contractual necessity (for newsletter delivery).
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal. Our legitimate interests include maintaining editorial standards, protecting our journalism, understanding our readership, and funding public-interest reporting. We never use personal data for automated decision-making that produces legal effects concerning you. Commercial relationships, as detailed in our Advertising & Affiliate Disclosure, never determine editorial conclusions.
How long do we keep your data?
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Newsletter subscriber data is kept until you unsubscribe or after two years of inactivity. Correspondence is retained for six years for editorial accountability and compliance purposes. Analytics data is anonymised after 26 months.
We regularly review our retention schedules and delete or anonymise data when it is no longer needed. Where you have exercised your right to erasure, we will remove your data promptly unless we have a legal obligation to retain it. Our Editorial Policy outlines our commitment to responsible data stewardship.
Do we share your personal data?
We never sell your personal data to third parties. We share data only with trusted processors who provide services such as email delivery, hosting, analytics, and advertising technology under strict contractual obligations. These processors are bound by data processing agreements that comply with UK GDPR requirements.
Processors may include newsletter platforms, analytics providers, and ad-serving networks. They are permitted to process your data only on our instructions and for no other purpose. We may also disclose data if required by law, to protect the rights or safety of MorningTimes.uk or others, or in connection with a corporate transaction such as a merger. Our Sources & Standards page provides further detail on how we handle confidential data.
What are your rights under UK GDPR?
You have the right to access, rectify, erase, restrict processing of, and port your personal data. You may also object to processing based on legitimate interests, including profiling for direct marketing. These rights apply to the personal data we hold about you as a reader, subscriber, or correspondent.
To exercise any of these rights, please contact us at privacy@morningtimes.uk with sufficient information to identify you and your request. We will respond within one month. If you have a complaint about our handling of your data, you may lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection, at https://ico.org.uk/. We encourage you to contact us first so we can resolve your concern directly.
How do we handle confidential tips from sources?
We treat all confidential tips submitted through our secure channels with the utmost respect for source anonymity and data minimisation. When you use our Tip Us page, we collect only the information you choose to provide and do not log IP addresses or metadata unless necessary for verification. Source confidentiality is a cornerstone of our editorial standards.
Editor-in-Chief Edward Sterling and Managing Editor Catherine Lowe oversee the secure handling of tip data. We do not share source-identifying information with any third party, including law enforcement, unless compelled by a valid UK court order. Our Fact-Checking Policy and Complaints Procedure further detail our commitment to protecting those who come to us with information in the public interest.
How can you contact us about privacy?
For any privacy-related enquiries, requests, or complaints, please email privacy@morningtimes.uk. You may also write to Windmill Hill Media Ltd., Suite 12, Neptune House, Marina Bay, Gibraltar GX11 1AA, or call +350 200 66010. Our UK editorial line is +44 20 4587 9470. We aim to acknowledge all privacy enquiries within five working days.
Our full contact details, including our registered address and editorial team, are available on our Contact page. We review this Privacy Policy periodically and will notify subscribers of material changes via email or a prominent notice on MorningTimes.uk. The current version was published in April 2025.
Our commitments
- We will never sell your personal data to any third party, and we will only share data with trusted processors under strict contractual safeguards.
- We will always provide clear, accessible information about what data we collect and why, including through our Cookie Policy and this Privacy Policy.
- We will respect your data protection rights and respond to every exercise of those rights within the statutory timeframe.
- We will protect source confidentiality at all times, ensuring that tipsters and whistleblowers can contact us securely without fear of exposure.
- We will keep our editorial and commercial operations transparent, with internal links to our Ownership & Funding and AI & Automation Policy pages for full accountability.