How the truth files handles personal data
This Privacy Policy explains how The Truth Files collects, uses, stores, and protects personal data through this website. It sets out the site’s general data-handling position in relation to visitors, subscribers, tip submitters, account holders, and anyone who contacts the publication directly.
The policy is written to reflect a UK GDPR and Data Protection Act 2018 framework. It is intended to show clearly what data may be collected, why it may be processed, how long it may be retained, and what rights users have in relation to that processing.
The Truth Files acts as the data controller for this site
For the purposes of applicable UK data protection law, The Truth Files is the data controller in relation to personal data collected through this website. That means the site determines why certain data is collected and how it is processed in the normal operation of the platform.
Controller contact
Questions about this policy or about the handling of personal data can be directed to info@thetruthfiles.com.
This page is a general privacy notice for the site. Where specific services, forms, platforms, or integrations collect additional data, those workflows may also include their own service-level notices or consent prompts.
Only the categories needed to run the platform are intended to be processed
Depending on how a visitor uses the site, The Truth Files may collect different categories of personal data. Some of this data is provided directly by the user. Some is collected automatically through standard technical operation.
| Category | Examples | Source |
|---|---|---|
| Identity Data | Name, username, or similar identifier where an account, form, or submission requires it. | Provided by user |
| Contact Data | Email address and related contact details used for newsletters, accounts, or direct communication. | Provided by user |
| Usage Data | Pages viewed, time on site, navigation behaviour, referral source, browser, and device type. | Collected automatically |
| Technical Data | IP address, cookie identifiers, session details, and related system-level data. | Collected automatically |
| Communications Data | Messages, tip submissions, leaked material, or contact-form content sent to the publication. | Provided by user |
The site does not intentionally seek sensitive personal data unless a user chooses to include it in a communication or submission. Where that occurs, it should be handled with heightened caution and confidentiality.
Processing is tied to site operation, communication, security, and editorial administration
Personal data is processed only for defined operational purposes connected to running the site, communicating with users, receiving submissions, protecting the platform, and meeting legal responsibilities.
| Purpose | Data Used |
|---|---|
| Delivering newsletters and editorial updates | Name and email address where supplied for subscription. |
| Managing site accounts | Identity and contact data relevant to registration or account support. |
| Receiving and reviewing tip submissions | Contact details and communications content submitted to the site. |
| Improving site performance | Usage and technical data used for analytics, diagnostics, and usability review. |
| Maintaining security | Technical and usage data relevant to fraud prevention, abuse control, and access monitoring. |
| Complying with law | Any category of data relevant to a lawful obligation or legal request. |
The policy position states that user data is not used for automated decision-making or profiling.
Processing should rest on an identified lawful basis under UK gdpr
The Truth Files may rely on different legal bases depending on the type of data involved and the reason for processing.
| Legal Basis | Typical Use |
|---|---|
| Consent | Newsletter subscriptions and non-essential cookies, with withdrawal available at any time. |
| Legitimate Interests | Site analytics, platform security, operational improvement, and similar uses where rights are not overridden. |
| Legal Obligation | Retention or disclosure where required under applicable law. |
| Vital Interests | Rare circumstances involving the protection of life or serious harm prevention. |
Cookies may be used for function, analytics, and preference handling
Cookies are small text files stored on a device to help websites function and remember information. The site may use different categories of cookies depending on configuration and user consent choices.
| Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Core site operation, session handling, and security functions. | No |
| Analytics | Traffic measurement, usage review, and understanding how visitors move through the site. | Yes |
| Preference | Remembering settings or returning user choices where enabled. | Yes |
Users can manage cookie preferences through browser controls and any site-level cookie tools provided. Restricting certain cookies may affect some site functions.
Data is not sold, rented, or traded as a product
The Truth Files states that it does not sell, rent, or trade personal data. Limited sharing may occur where a third party is necessary to operate the platform or where disclosure is required by law.
| Third Party | Purpose |
|---|---|
| Hosting Provider | Website storage, server infrastructure, and site delivery. |
| Email or Newsletter Platform | Subscriber management and sending editorial updates. |
| Analytics Provider | Aggregated performance measurement and site usage review. |
| Legal or Regulatory Authorities | Disclosure where legally compelled through valid process. |
Where a processor operates outside the UK, the stated position is that appropriate safeguards should be in place before international transfers occur.
Data should be kept only as long as necessary
Retention periods vary according to the kind of data involved and the reason it was collected. The stated policy is that data should not be retained indefinitely without operational or legal justification.
| Data Type | Retention Position |
|---|---|
| Newsletter Subscriber Data | Retained until unsubscribe or deletion request. |
| Registered Account Data | Retained for the life of the account and up to 12 months after deletion request. |
| Tip or Submission Data | Reviewed and deleted within 90 days unless needed for an active investigation. |
| Analytics Data | Up to 26 months in aggregated form. |
| Server or Access Logs | Up to 90 days for security purposes. |
Reasonable technical and organisational measures are expected
The site states that it uses appropriate technical and organisational safeguards to protect personal data from unauthorised access, loss, destruction, misuse, or disclosure. That may include encrypted connections, controlled internal access, and periodic security review.
Transport security
HTTPS and similar encrypted connections are used to reduce interception risk during normal site use.
Access limitation
Internal access to personal data should be limited to those who need it for operational or editorial handling.
Security review
Platform configuration and handling practices should be reviewed periodically rather than assumed safe by default.
No internet-connected system is completely risk-free. If a user believes personal data has been compromised, they should contact the site as quickly as possible.
Sensitive submissions
Anyone intending to send a tip, leak, or highly sensitive material should contact info@thetruthfiles.com first for guidance on secure submission routes.
Users have defined rights over their personal data
Under UK GDPR, users may exercise a number of rights in relation to personal data processed by the site. Requests can be made by contacting info@thetruthfiles.com.
Access
Request a copy of the personal data held about you.
Rectification
Request correction of inaccurate or incomplete personal data.
Erasure
Request deletion where there is no continuing basis to retain the data.
Restriction
Ask for processing to be limited in specific circumstances.
Portability
Receive relevant data in a structured, machine-readable form where applicable.
Objection
Object to certain processing, including direct marketing or processing based on legitimate interests.
Where processing is based on consent, consent can be withdrawn without invalidating processing that occurred before withdrawal.
The site is not intended for children under 18
The stated position is that the website is not directed at children under the age of 18 and does not knowingly seek to collect personal data from minors.
Removal position
If it is believed that a child has submitted personal data without appropriate consent, the site should be contacted so the matter can be reviewed and the data removed where appropriate.
This notice may change as law, tools, or site practices change
Privacy notices are not static documents. This page may be updated to reflect changes in law, site functionality, data-handling practice, integrations, or operational needs.
Concerns should be raised directly first, with ico escalation available
If a user is unhappy with how personal data has been handled, the preferred first route is direct contact with The Truth Files so the matter can be reviewed and, where possible, resolved.
UK supervisory authority
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Web: ico.org.uk
How to raise a privacy query or exercise your rights
For questions about this policy, for rights requests, or to report a data concern, contact the publication directly using the address below.
The stated response target is within 30 days for rights-related requests, subject to the scope and complexity of the request.