Mill respects your privacy and aims to collect as little personal information as reasonably possible.

This privacy policy explains what information may be collected when you visit mill.org.uk or contact us, how it may be used, and the choices available to you.

Who we are

Mill is an independent local news service operated by the HARG Association.

For the purposes of UK data protection law, the HARG Association is responsible for the personal information processed directly through Mill.

Information you send to us

We receive personal information when you choose to contact us.

For example, if you send us an email, we will receive your email address, your name if provided, the contents of your message, and any files or other information you include.

We may use this information to:

• Read and respond to your message
• Consider a correction, complaint, tip or story submission
• Verify information provided to us
• Maintain necessary records of editorial correspondence
• Protect Mill, its contributors and other people from misuse, fraud or legal claims
• Comply with legal obligations

Please do not send sensitive personal information unless it is necessary. Sending information to Mill does not guarantee that it will be published, investigated or treated as confidential. Journalistic sources should make any confidentiality requirements clear before providing sensitive material.

Website analytics

Mill uses Jetpack Stats to understand general website activity, such as how many people visit the site, which pages are viewed and how visitors find us.

Jetpack and its operator, Automattic, may process technical information such as:

• IP addresses
• Browser and device information
• Referring and visited pages
• Approximate location or country
• The date and time of a visit
• WordPress.com account information where a visitor is logged in

Mill generally uses analytics in an aggregated form. We do not use Jetpack Stats to create individual visitor profiles or attempt to identify ordinary readers.

Technical information may still be processed or retained by Jetpack, Automattic, our web host, WordPress plugins or other service providers according to their own privacy policies and technical requirements.

Cookies and similar technologies

Mill, WordPress, Jetpack and other services used by the website may place cookies or use similar technologies.

Some technologies are required for the website to operate correctly or securely. Others may support analytics, embedded content or additional features.

Where consent is legally required, visitors should be given an appropriate choice before non-essential cookies or similar technologies are used. You can also control or delete cookies through your browser settings, although doing so may affect some website features.

Other services

We may occasionally use other reputable services, plugins or embedded content to operate, secure, maintain or improve Mill.

For example, an article may include content from a video platform, social network, mapping provider or document service. When you interact with embedded third-party content, that provider may receive technical information about your visit and may place its own cookies.

We aim to use only services that have a legitimate purpose. This policy may be updated when the services used by Mill change.

Personal information held by Mill

Mill does not maintain a database of personally identifiable information about ordinary website visitors.

We may hold personal information where:

• You have emailed or otherwise contacted us
• You have submitted information for editorial purposes
• You are a contributor, contractor or representative of an organisation
• Information must be retained for security, administrative or legal reasons
• Personal information appears in published journalism

Information processed for journalistic purposes may be subject to special rules and exemptions under data protection law. Nothing in this policy requires Mill to disclose confidential sources, unpublished journalistic material or information protected by law.

Our lawful reasons for processing information

Depending on the circumstances, we may process personal information because:

• It is necessary for our legitimate interests in operating a news service, corresponding with readers, maintaining security and producing journalism
• You have given consent
• It is necessary to comply with a legal obligation
• It is necessary in connection with a contract
• The information is processed for journalistic purposes in the public interest

We will not sell mailing lists or personal contact information to advertisers.

How long information is kept

We keep personal information only for as long as it is reasonably needed for the purpose for which it was received.

Routine emails may be deleted when they are no longer needed. Some editorial correspondence, correction requests, source material and legal or administrative records may be retained for longer where there is a legitimate reason to preserve them.

Information contained in published journalism may remain available as part of Mill’s public archive.

Sharing information

We may share information with service providers that help us host, secure, maintain or operate the website and its communications.

We may also disclose information where required by law, necessary to protect someone’s rights or safety, or needed to establish, exercise or defend a legal claim.

We do not disclose confidential journalistic sources unless required by law or authorised by the source.

Your rights

Depending on the circumstances, UK data protection law may give you rights concerning your personal information, including rights to:

• Ask what personal information we hold about you
• Request correction of inaccurate information
• Request deletion of information
• Object to or restrict certain uses of information
• Withdraw consent where processing is based on consent
• Complain about how your information has been handled

These rights are not absolute. Legal exemptions may apply, particularly where information is processed for journalism, freedom of expression, legal obligations or the protection of other people’s rights.

To make a privacy request, email corrections@mill.org.uk and clearly explain what you are requesting.

We may need to ask for enough information to verify your identity and locate the relevant records.

Security

We take reasonable measures to protect information under our control. However, no website, email system or online service can be guaranteed to be completely secure.

Email should not be treated as a perfectly secure method of communication. Anyone wishing to provide highly sensitive information should first contact Mill to discuss an appropriate method.

Complaints

Please contact us first if you have concerns about how Mill has handled your personal information.

You may also have the right to complain to the Information Commissioner’s Office, the independent UK authority responsible for data protection.

Changes to this policy

We may update this privacy policy when our website, services, practices or legal obligations change.

The latest version published on mill.org.uk will apply.