Privacy Policy

Last updated: 22 September 2026

Identity and Role of the Data Controller

journalrayo acts as the data controller for the purposes of this privacy policy. We are responsible for determining how and why your personal data is processed in connection with our Course A journalism production platform, which supports editorial planning, newsroom reports, studio coordination, camera setup and related workflows. Our registered address is The Interchange, Oval Road, Camden Lock, London, NW1 7DZ, United Kingdom and you may contact us at [email protected].

Scope of This Notice

This policy applies to all visitors, registered users, subscribers and other individuals who interact with our platform or services from the United Kingdom. It covers personal data collected through the website, platform accounts, contact forms and any other means directly related to the operation of the journalism production tools we provide.

Categories of Personal Data and Sources

We collect identification data such as names and account credentials, contact information, professional details relevant to journalism workflows, usage data generated while using editorial planning and studio coordination features, and technical data including IP addresses and device information. Data is obtained directly from you when you register or use the platform, from your interactions with our services, and in limited cases from third-party integrations you choose to connect.

Purposes of Processing and Legal Basis

We process data to provide and improve the platform for editorial planning, newsroom reporting and studio coordination. The legal basis for this is performance of a contract. We also process data to ensure security and prevent misuse, based on our legitimate interests. Where required by law we process data to comply with legal obligations. Marketing communications are sent only with your consent.

Requirement to Provide Data

Providing certain personal data is necessary to create an account and access platform features. If you do not supply required information we may be unable to deliver the service or respond to your enquiries. Optional data fields may be left blank without affecting core functionality.

Cookies and Similar Technologies

We use cookies and similar technologies to operate the platform, remember preferences and analyse usage. Full details are set out in our separate Cookie Policy, which is accessible via the site-wide cookie banner and explains how to manage your preferences.

Processors, Recipients and Disclosures

We engage service providers such as hosting companies, analytics providers and payment processors who act as our processors under contract. Personal data may be disclosed where required by law, regulation or court order, or to protect the rights and safety of journalrayo and its users.

International Transfers

Some processors may be located outside the United Kingdom. In such cases we rely on appropriate safeguards including UK-approved standard contractual clauses or adequacy decisions to ensure your data receives an adequate level of protection.

Retention Periods

Account data is retained for the duration of your active use of the platform plus a further six years to meet legal and accounting requirements. Usage logs are kept for twelve months. You may request earlier deletion where permitted by law.

Security and Data Minimisation

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls and regular security reviews. We collect only the data necessary for the stated purposes and do not retain it longer than needed.

Your Data Subject Rights

Under UK GDPR and the Data Protection Act you have the right to access, rectify, erase, restrict processing, port your data and object to certain processing. Requests should be sent to [email protected]. We will respond within one month, subject to any lawful extensions.

Withdrawing Consent and Objecting to Marketing

Where processing is based on consent you may withdraw it at any time by contacting [email protected] or using unsubscribe links in communications. You may also object to direct marketing or profiling at any time.

Right to Complain

If you are not satisfied with our response you may lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority, via their website or by post.

Children and Age Restrictions

Our platform is intended for professional and educational users aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that such data has been collected we will delete it promptly.

Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. Any analytics we perform are used only to improve platform performance and are not used for decisions about individuals.

Changes to This Policy

We may update this policy from time to time. The current version will always be available on our website with the last-updated date clearly displayed. Material changes will be notified via the platform or by email where appropriate.