Privacy
Privacy Policy
This policy explains what personal data MediaSource collects, why, and what your rights are. It applies to visitors, registered users and anyone whose data appears on the platform.
Draft — legal review required
This page is provided as a working draft. It has not been reviewed by a solicitor. You must obtain professional legal advice before relying on it in production.
Last reviewed: July 2026
Who we are
MediaSource.uk is operated by MediaSource Ltd (the "controller"). To contact us about privacy, email privacy@mediasource.uk.
What we collect
- Account data — name, email, password hash, professional role, employer, job title, LinkedIn URL, phone (optional).
- Content you submit — press releases, expert commentary, media requests, responses, attachments and images.
- Profile data — biography, expertise, headshot.
- Preferences — followed sectors, followed companies, notification and email preferences.
- Usage data — pages viewed, searches, clicks, device, browser, approximate location derived from IP.
- Communications — messages sent via the platform, contact form submissions, complaint correspondence.
How we use it
- To operate the platform and deliver the service you have requested.
- To distribute press material and connect journalists with sources.
- To send transactional and operational emails.
- To send optional digests and alerts you have opted into.
- To moderate content, investigate complaints and enforce our policies.
- To improve the platform, including basic analytics.
- To meet legal and regulatory obligations.
Lawful bases
- Contract — operating your account and delivering the service.
- Legitimate interests — moderation, fraud prevention, product analytics, and journalism-support functions.
- Consent — optional marketing emails, non-essential cookies.
- Legal obligation — where we must retain records or respond to lawful requests.
Sharing
Personal data may be shared with:
- Users of the platform, where you have chosen to publish or send data to them (for example, a journalist reading your media request response).
- Our infrastructure providers (hosting, database, storage, email delivery).
- Professional advisers, regulators and law enforcement where legally required.
We do not sell personal data.
Retention
- Account data — for the life of the account, plus a reasonable period after closure for audit and legal purposes.
- Published content — retained as part of the public archive unless corrected or removed.
- Media request responses — retained for the life of the request and thereafter for evidential purposes.
- Support and complaint correspondence — up to six years.
Your rights
Under UK GDPR you can request access, correction, deletion, restriction, portability and objection. Email privacy@mediasource.uk. You can complain to the Information Commissioner's Office at ico.org.uk.
International transfers
Where personal data is transferred outside the UK, we use appropriate safeguards, such as UK/EU standard contractual clauses.
Security
We use industry-standard technical and organisational measures, including encryption in transit, access controls, and least-privilege design. No system is perfectly secure; report suspected breaches to security@mediasource.uk.
Cookies
See our Cookie Policy.
Changes
We will notify registered users of material changes to this policy by email and by a banner on the site.