Privacy Policy

This Privacy Policy describes how DocumentFlow Desk handles information about the people who read our journalism. It applies to every visitor and is reviewed whenever our site features or data practices change.

1. Introduction

DocumentFlow Desk takes reader privacy seriously. This policy sets out what information may be gathered when you visit or use DocumentFlow Desk, the purposes it serves, and the options available to you. DocumentFlow Desk operates as a news and information publication covering world affairs, business, technology, science, culture, explainers and analysis.

1.1 Data Controller & DPO Contact Information

DocumentFlow Desk is the data controller for this website. For any privacy-related question, request or complaint, you can contact our Data Protection Officer at privacy@DocumentFlow Desk.

2. Information We May Collect

DocumentFlow Desk does not currently operate reader accounts, paid memberships, comment sections, downloadable material or ecommerce features. Because the publication is primarily editorial, the data we handle is generally limited to the technical records needed to deliver pages and keep the site secure.

Depending on our hosting, security and measurement arrangements, this may include browser and device type, pages requested, referring site, approximate location inferred from IP address, timestamps and standard server logs that help us keep the site available.

If newsletters, contact forms, commenting, subscriptions or comparable features are introduced later, this policy will be revised before or at the time those features are enabled.

3. Legal Basis for Processing

Where the GDPR applies, personal data is processed on these grounds: (1) our legitimate interests in running a secure, stable and improving news service, including traffic measurement and abuse prevention, provided those interests do not override your rights; (2) compliance with legal obligations that apply to us; and (3) your consent, where you choose to supply personal data through interactive features such as a contact form or newsletter sign-up.

4. How We May Use Information

Information may be used to run and maintain DocumentFlow Desk, understand which stories and pages are useful, improve our reporting and navigation, measure performance, detect abuse or technical faults, and defend the site against spam, intrusion and misuse.

If official contact channels are opened later, anything you voluntarily send through them may be used to reply to your message, manage your request, or investigate a problem you have reported.

4.1 Data Retention Periods

Server logs, access metadata and security records are kept no longer than reasonably necessary for security, troubleshooting and hosting requirements — typically 30 to 90 days — unless a longer period is required by law. Where personal data is submitted through a contact or subscription feature, it is retained for as long as needed to handle the request plus any statutory retention period, then deleted once the purpose is met.

DocumentFlow Desk may use analytics or comparable measurement tools, now or in future, to understand readership, page usage and performance. Depending on how they are implemented, those tools may rely on cookies or similar technologies.

DocumentFlow Desk does not currently treat display advertising, affiliate links, sponsorships, paid placements or ecommerce as enabled features. Should advertising, affiliate relationships, sponsorships or comparable third-party services be introduced, this policy and the related disclosures will be updated to explain those services, how they track users, and the choices available.

DocumentFlow Desk may link to third-party websites, publishers, sources, tools, platforms, videos or other resources. Those sites are governed by their own privacy policies. DocumentFlow Desk is not responsible for the privacy practices, content, claims, pricing, availability or conduct of third parties.

7. How Information May Be Shared

Information may be shared with service providers that host, secure, measure or maintain the site. If analytics, advertising, affiliate or security services are enabled, those providers may process information under their own terms and privacy policies.

Information may also be disclosed where reasonably necessary for legal, safety, security, fraud-prevention, compliance reasons, or in connection with a change in site ownership. DocumentFlow Desk does not describe itself as selling readers' personal information.

8. User Rights

Where the GDPR or comparable privacy legislation applies, you have the right to access your personal data; to have inaccurate data rectified; to request erasure ("right to be forgotten"); to request restriction of processing; to data portability; to object to processing based on legitimate interests; and to withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand. You may also lodge a complaint with your local data-protection supervisory authority.

To exercise any of these rights, contact the Data Protection Officer using the address in section 1.1. We respond within the timeframes required by applicable law.

9. User Choices

You can configure your browser to block or delete cookies, though some parts of the site may not function as intended if cookies or similar technologies are disabled. You may also decline to provide optional information if contact or subscription features are introduced later.

Official contact details will be published once contact channels are enabled for this site.

10. Children's Privacy

DocumentFlow Desk is a general-audience news publication and does not knowingly collect personal information from children. If the site is ever adapted for children or for use in schools, this policy will be rewritten for that purpose before launch.

11. Data Security and Retention

No website can promise absolute security. Technical, analytics, hosting and security information is retained only as long as reasonably necessary for operating the site, meeting legal obligations, protecting the service, performing analytics, troubleshooting, or satisfying service-provider requirements.

12. International Visitors

DocumentFlow Desk can be read from many regions, and information may be processed in the locations where our hosting, analytics, security or other providers operate. This policy is an operational privacy notice for the current site and should not be read as a claim of full compliance with every regional privacy regime unless it has been separately reviewed for that purpose.

13. Changes to This Policy

DocumentFlow Desk may revise this Privacy Policy when site features, services, analytics, advertising, affiliate relationships, contact channels or operating practices change. The updated version replaces the previous one at this address.

14. Contact

Official contact information will be published once contact channels are enabled for this site. In the meantime, privacy enquiries can be directed to privacy@DocumentFlow Desk.