[This needs a real legal review before publication. The structure and the substance below are right; the wording needs checking against UK GDPR by someone qualified.]
Who we are. SAMIEI, [legal entity and registered address, or a statement of who the controller is]. Data protection contact: privacy@samiei.co.uk.
What we collect.
- Contact form and email: what you send us, kept 12 months unless it’s part of an ongoing story, then kept as long as editorially necessary.
- Newsletter: your email address, until you unsubscribe. [Name the provider.]
- Server logs: IP address and request data, retained [X] days for security.
- Analytics: [If you use any, name it. Use something privacy-preserving — Plausible or Matomo self-hosted — not Google Analytics. On this site, your readers’ browsing history is not something you should be handing to anyone.]
- Comments: [If you enable them. Recommendation: don’t. Comment sections on Iran content are unmoderatable at your scale and become a liability.]
Cookies. [List them. If you use none beyond the WordPress session cookie, say so — it’s a real advantage and worth stating.]
What we don’t do. We don’t sell or share your data. We don’t use advertising trackers. We don’t attempt to identify readers.
Sources. Material from confidential sources is handled outside these systems and is not stored on this website.
Your rights. Access, correction, erasure, restriction, objection, portability, and complaint to the ICO at ico.org.uk.
Changes. Dated at the bottom, with a note of what changed.
Last updated: 06/09/2026