Privacy Policy
Privacy Policy
Last updated: 22 February 2026
This privacy policy explains how VPNews Ltd ("we", "us", "our") collects, uses, stores, and protects your personal information when you visit our website at vpnews.co.uk (the "Site"). We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller
VPNews Ltd is the data controller responsible for your personal data. We are registered in England and Wales.
Data Protection Officer contact: [email protected]
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
- Browsing data: pages visited, time spent on site, referral source, browser type, device information
- IP addresses: collected automatically when you access the Site
- Cookie data: information stored via cookies and similar technologies (see our Cookie Policy for details)
- Email address: if you subscribe to our newsletter or contact us
- Commenting data: name, email address, and comment content if you post comments on articles
- Correspondence data: any information you provide when contacting us via email or forms
3. Lawful Basis for Processing
We process your personal data on the following lawful bases under Article 6 of the UK GDPR:
- Legitimate interests (Article 6(1)(f)): for operating the Site, providing journalism in the public interest, analytics, and site security. We have conducted a legitimate interest assessment and determined that our interests do not override your fundamental rights and freedoms.
- Consent (Article 6(1)(a)): for setting non-essential cookies (analytics, preference, and marketing cookies). You may withdraw consent at any time.
- Contract (Article 6(1)(b)): where necessary to fulfil a contract with you, such as newsletter subscriptions.
- Legal obligation (Article 6(1)(c)): where we are required to process data to comply with applicable law.
4. How We Use Your Data
We use the personal data we collect for the following purposes:
- Providing and maintaining the Site and its functionality
- Analysing website traffic and usage patterns to improve our service
- Personalising content and recommendations
- Sending newsletters and editorial updates (where you have opted in)
- Responding to enquiries and correspondence
- Ensuring site security and preventing abuse
- Complying with legal obligations, including court orders and regulatory requirements
5. Cookies
Our Site uses cookies and similar tracking technologies. For comprehensive information about the cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.
6. Third-Party Services
We use the following third-party services that may process your personal data:
- Google Analytics: for website analytics and traffic analysis. Google may transfer data outside the UK — see Google's privacy policy for details.
- Social media embeds: content from X (Twitter), YouTube, and other platforms may be embedded in articles. These services may set their own cookies and collect data according to their own privacy policies.
- Hosting providers: our Site is hosted on infrastructure that processes data on our behalf under a data processing agreement.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Analytics data: retained for up to 26 months
- Newsletter subscriber data: retained until you unsubscribe
- Correspondence: retained for up to 3 years after your last contact
- Comment data: retained for as long as the article is published, or until you request deletion
- Server logs: retained for up to 90 days
8. Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access (Article 15): You have the right to request a copy of the personal data we hold about you.
- Right to rectification (Article 16): You have the right to request correction of inaccurate personal data.
- Right to erasure (Article 17): You have the right to request deletion of your personal data in certain circumstances.
- Right to restrict processing (Article 18): You have the right to request that we limit how we use your data.
- Right to data portability (Article 20): You have the right to receive your data in a structured, commonly used, machine-readable format.
- Right to object (Article 21): You have the right to object to processing based on legitimate interests, including profiling.
- Right to lodge a complaint: You have the right to lodge a complaint with the Information Commissioner's Office (ICO).
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, as required by the UK GDPR.
9. International Transfers
Some of our third-party service providers may process your data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the UK Government, or the service provider is based in a country deemed adequate by the UK Secretary of State.
10. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
11. Contact Us
For any data protection enquiries or to exercise your rights, please contact:
Data Protection Officer
VPNews Ltd
London, United Kingdom
Email: [email protected]
12. Information Commissioner's Office
If you are not satisfied with our response to your data protection enquiry, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Telephone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF