Privacy notice
Page Updated: October 2023 Version 2.0
What data we collect
Our website address is: https://www.aray2.co.uk.
The personal data we collect from you includes:
- questions, queries or feedback you leave, including your email address if you contact ARAY2.CO.UK
- your email address and registration information when you register to make comments.
- Comments you make.
- your Internet Protocol (IP) address, location, device ID, devices (e.g. desktop or mobile) and details of which version of web browser you used
- information on how you use the site, using cookies and page tagging techniques
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
We use Website analytics software to collect information about how you use ARAY2.CO.UK.
Website analytics stores information about:
- the pages you visit on ARAY2.CO.UK
- how long you spend on each ARAY2.CO.UK page
- how you got to the site
- what you click on while you’re visiting the site
We do not collect or store your personal information through Website analytics (for example your name or address) so this information cannot be used to identify who you are.
Why we need your data
We collect information through Website analytics to monitor how you use the site. We do this to help:
- make sure the site is meeting the needs of its users
- make improvements, for example improving site search.
- To improve security against malicious Proxy & VPN access.
We also collect data in order to:
- gather feedback to improve our services, for example our email alerts
- respond to any feedback you send us, if you’ve asked us to
- send email alerts to users who request them
- allow you to access Aray2 services and make transactions
- provide you with information about local services if you want it
- monitor use of the site to identify security threats
The legal basis for processing personal data in relation to site security is our legitimate interests, and the legitimate interests of our users, in ensuring the security and integrity of ARAY2.CO.UK.
The legal basis for processing all other personal data is that it’s necessary to perform a task in the public interest.
What we do with your data
The data we collect may be shared with other Aray2 departments and associates. It may also be shared with our technology suppliers, for example our hosting provider, to prevent spamming or malicious use of our website. Your IP addresses are sent to an API to be checked for malicious Proxy & VPN access. No other user identifiable information is transmitted to them.
We will not:
- sell or rent your data to third parties
- share your data with third parties for marketing purposes
We will share your data if we are required to do so by law – for example, by court order, or to prevent fraud or other crime.
Visitor comments may be checked through an automated spam detection service.
How long we keep your data
We will only retain your personal data for as long as:
- it is needed for the purposes set out in this document
- the law requires us to
We will delete access log data after 90 days.
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
Children’s privacy protection
Our services are not designed for, or intentionally targeted at, children 13 years of age or younger. We do not intentionally collect or maintain data about anyone under the age of 13.
Where your data is processed and stored
We design, build and run our systems to make sure that your data is as safe as possible at all stages, both while it’s processed and when it’s stored. Visitor comments may be checked through an automated spam detection service.
All personal data is stored in the United Kingdom (UK). Website analytics data may be transferred outside the EEA, but this cannot be used to personally identify you.
Some companies that provide services to us run their services from outside the UK and the European Economic Area. We only let that happen if we are satisfied with their levels of security. Keep in mind that when you give us personal information it could be being transferred, stored or processed in a location outside the UK and the EEA.
How we protect your data and keep it secure
We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data – for example, we protect your data using varying levels of encryption.
We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.
Your rights
Remember, you’re in control of your personal information.
You have the right to:
- request a copy of your information
- not let robots make big decisions about you
- to ask us to correct information that’s wrong, to delete it or to request that we only use it for certain purposes
- to change your mind, and ask us to stop using your information. For example, unsubscribing from any marketing emails or turning off personalisation
Bear in mind, sometimes we might not be able to help. Like if the law tells us we can’t or it forms part of our journalistic output.
You can also:
- raise an objection about how your personal data is processed
- request that your personal data is erased if there is no longer a justification for it
- ask that the processing of your personal data is restricted in certain circumstances
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
If you have any of these requests, get in contact with our Privacy Team.
Links to other websites
ARAY2.CO.UK contains links to other websites.
This privacy policy only applies to ARAY2.CO.UK, and does not cover other Aray2 services and transactions that we link to. Those services have their own terms and conditions and privacy policies.
Following a link to another website
If you go to another website from this one, read the privacy policy on that website to find out what it does with your information.
Following a link to ARAY2.CO.UK from another website
If you come to ARAY2.CO.UK from another website, we may receive information from the other website. We do not use this data. You should read the privacy policy of the website you came from to find out more about this.
Changes to this policy
We may change this privacy policy. In that case, the ‘last updated’ date at the top of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.
If these changes affect how your personal data is processed, Aray2 will take reasonable steps to let you know.
Contact us or make a complaint
Contact the Privacy Team if you:
- have a question about anything in this privacy notice
- think that your personal data has been misused or mishandled
You can also contact our Data Protection Officer (DPO) and Privacy Team at
The DPO provides independent advice and monitoring of our use of personal information.
You can also make a complaint to the Information Commissioner, who is an independent regulator.
casework@ico.org.uk Telephone: 0303 123 1113 Textphone: 01625 545860
Monday to Friday, 9am to 4:30pm
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF