Privacy Policy

1. Introduction

This Privacy Policy explains how Morning (“we”, “us”, “our”) collects, uses, shares and protects personal data when you visit our website, subscribe to our newsletters, use our search features or otherwise interact with us. We are committed to handling your information lawfully, fairly and transparently.

We operate primarily for readers in the European Union and the wider European Economic Area, and we aim to comply with the EU General Data Protection Regulation (GDPR) as well as applicable national data-protection laws.

2. Information we collect

We collect the following categories of information:

• Information you provide directly. For example, your name and email address when you subscribe to a newsletter, submit a contact form, respond to a survey or enter a competition.
• Content of your messages. When you email our editorial or advertising desks, we process the content of your correspondence so that we can respond.
• Usage data. Information about how you use our site, such as pages viewed, articles read, search terms you enter and the links you click.
• Technical data. Your IP address, browser type and version, device type, operating system and approximate location derived from your IP address.
• Cookies and similar technologies. We and our partners use cookies and comparable technologies; these are described in our Cookie Policy.

3. How we use your information

We use your personal data for the following purposes:

• To provide our journalism, newsletters and other content, and to operate our website.
• To send you editorial updates and newsletters where you have opted in.
• To respond to your enquiries, story tips, corrections and support requests.
• To understand and improve how our readers use the site, and to develop new features.
• To measure the reach of our journalism and to support advertising and sponsorship.
• To detect, prevent and address technical issues, abuse, spam and security incidents.
• To comply with legal obligations to which we are subject.

4. Legal bases for processing

Under the GDPR we rely on the following legal bases:

• Consent — for marketing emails, certain analytics and non-essential cookies, which you may withdraw at any time.
• Legitimate interests — to run and secure our website, improve our journalism and understand our audience, balanced against your rights.
• Contract — to provide services you have requested, such as a paid subscription.
• Legal obligation — where we must retain or disclose information to comply with the law.

5. Cookies and similar technologies

We use cookies to keep the site working, to remember your preferences, to measure readership and, with your consent, to support advertising. For a full explanation, including how to manage or refuse cookies, please read our Cookie Policy.

6. Sharing your information

We do not sell your personal data. We may share it with:

• Service providers — hosting, email delivery, analytics and payment processing partners who act on our instructions.
• Advertising and measurement partners — where you have consented, to display and measure advertising.
• Professional advisers — lawyers, auditors and insurers when necessary.
• Authorities — where we are required by law or by a valid legal request.

All partners are required to protect your information and to use it only for the purposes we specify.

7. International transfers

Some of our service providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to ensure your data receives an adequate level of protection.

8. Data retention

We keep personal data only for as long as necessary for the purposes described in this policy. Newsletter subscription data is retained until you unsubscribe. Correspondence is generally retained for up to 24 months. Usage and technical data is retained in aggregated or pseudonymised form as long as needed for analysis and security.

9. Your rights

Subject to certain conditions, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data (“the right to be forgotten”).
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting processing carried out before withdrawal.
• Lodge a complaint with your national data-protection authority.

To exercise any of these rights, please contact us using the details on our Contact Us page.

10. Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Children's privacy

Our services are intended for a general audience and are not directed at children. We do not knowingly collect personal data from children below the age required for valid consent in their country of residence.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The “last updated” date at the bottom of this page shows when it was most recently revised. Significant changes will be highlighted on the website.

13. How to contact us

If you have questions about this policy or about how we handle your personal data, please email our data-protection team or use the form on our Contact Us page.

Last updated: November 2026