Privacy

Controller

Nursing News UK is the controller for personal data processed in operating this publication.

Contact the controller at privacy@nursingnewsuk.co.uk.

Personal data and purposes

Vercel provides current hosting and security services. It may process network address, request time, requested page, browser and device information, and diagnostic data in infrastructure logs. This supports page delivery, fault diagnosis, service security and abuse prevention.

If you email an editorial, corrections or privacy address, Nursing News UK and its email service provider process your name, email address, message, attachments and message metadata. This is used to respond, assess editorial or correction material, handle privacy requests and keep a proportionate record of correspondence.

Once the comments service is active, a submission will include a display name, email address, comment text, article, submission time and moderation state. The email address is private to moderation and is not displayed with a published comment.

The comments application will derive an HMAC network identifier for rate limits and abuse controls. The application does not store the raw IP address in its comments tables. Vercel and other hosting or security providers may still process network data in infrastructure logs.

Lawful bases

Nursing News UK relies on legitimate interests to publish and secure the service, respond to relevant correspondence, protect against abuse and operate a premoderated public discussion. Those interests are balanced against the rights and expectations of readers and correspondents.

Nursing News UK relies on legal obligation where processing is needed to handle a data protection rights request, complaint or another duty under applicable law. If consent is used for a future optional purpose, it will be identified when the data is collected and can be withdrawn.

No solely automated decision produces a legal or similarly significant effect for readers or commenters.

Processors and recipients

Vercel processes hosting, delivery and security data. Supabase will process comment records when the comments service is active. An email service provider processes messages sent to publication addresses.

Personal data may also be shared with professional advisers, courts, regulators or public authorities where this is necessary and lawful. Nursing News UK does not sell personal data.

International transfers

Technology providers may process personal data outside the United Kingdom. Where a restricted transfer occurs, Nursing News UK uses UK adequacy regulations where applicable or appropriate contractual safeguards provided through the relevant service terms. Transfer checks are considered where required by law.

You can contact the controller for information about the safeguard relevant to your data.

Retention

Infrastructure and security log retention is controlled partly by the relevant provider. Nursing News UK limits those logs and their retention where provider controls are available and keeps them only for delivery, security and fault investigation needs.

Editorial, correction and privacy email is retained for a period proportionate to the correspondence, any follow up, and legal or complaint handling needs. Material that is no longer needed is intended to be deleted, subject to any legal hold.

When comments are active, approved comments may remain while they form part of the published discussion. Approved comments lose the private email address and HMAC identifiers within 48 hours of submission. Pending comments are deleted after 30 days. Rejected and spam comments are deleted after 90 days.

The service uses 15 minute and 24 hour rate windows and a 24 hour duplicate window. Duplicate records expire after 24 hours. Rate limit records are deleted after 48 hours. Deleted comment placeholders contain no submitted personal data and are purged after 30 days. These limits are enforced by a daily cleanup before the comments service can be active.

Your rights

Under the UK GDPR, depending on the circumstances, you may have the right to access personal data, correct inaccurate data, ask for erasure, restrict processing, receive portable data, and the right to object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it.

These rights can be subject to legal limits, including provisions that apply to journalism. Contact privacy@nursingnewsuk.co.uk and provide enough information to identify the relevant data.

Children and sensitive data

This publication is not directed at children. Children should not submit comments or send personal data without the involvement of a parent or guardian.

Do not send patient records, detailed health information or other sensitive personal data unless it is necessary for a clear editorial, correction or legal purpose. Unnecessary sensitive data may be minimised or deleted.

Complaints and contact

Raise a privacy request or data protection complaint with Nursing News UK at privacy@nursingnewsuk.co.uk.

You also have the right to complain to the Information Commissioner’s Office. Its guidance and complaint routes are available at ico.org.uk.