[This is a working template. Have it reviewed against GDPR, UK GDPR and any US state privacy laws that apply to you before launch, and replace the bracketed sections with your real details.]
Last updated: [date]. This policy explains how IOI Journal handles personal data.
Who we are
The data controller is [registered company name, company number, registered address]. For any privacy question, contact [email protected].
What we collect
- Information you give us. Your email address if you subscribe to our newsletter; your name, email and message if you contact us.
- Information collected automatically. Standard server logs (IP address, browser and device type, pages requested, referring page, timestamp) and analytics data about how the site is used.
- Cookies and similar technologies. See our cookie policy.
Why we use it
- To deliver the website and keep it secure and available — our legitimate interest in operating the service.
- To send the newsletter you asked for — your consent, withdrawable at any time.
- To understand which articles are read, in aggregate, so we can decide what to publish — legitimate interest, or consent where required by law.
- To sell and measure advertising — consent where the law requires it for the technologies involved.
Who we share it with
We do not sell personal data. We share it only with service providers who process it on our behalf: [hosting provider, email/newsletter provider, analytics provider, advertising partners]. Each is bound by contract to process data only on our instructions.
International transfers
Some providers may process data outside your country. Where that happens, we rely on appropriate safeguards such as standard contractual clauses.
How long we keep it
- Newsletter subscriptions: until you unsubscribe, then deleted within [30] days.
- Contact correspondence: [24] months.
- Server logs: [90] days.
- Analytics: [14] months.
Your rights
Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, restrict or object to processing, receive it in portable form, and withdraw consent. To exercise any of these, email [email protected]. You also have the right to complain to your national data protection authority.
Children
This site is not directed at children under 16, and we do not knowingly collect their personal data.
Changes
We will post any change to this policy on this page and update the date at the top.