Privacy Notice

This notice explains what personal data Insurance Asset News (“IAN”, “we”, “us”) collects when you use insuranceassetnews.com, and how it is used. We keep it deliberately specific to what the site actually does.

Data we collect

• Registration data. If you create an account we collect your name, work email address, firm, industry and role. Your name and email are stored in our content-management and subscription system and used to operate your account and access level; your firm, industry and role are stored alongside your registration record and tell us who the publication is being read by.
• Your weather location. If you choose a town for the forecast on the Lunchtime page, we store that town against your account so the forecast can show it. You can change or remove it on your account page.
• The registration prompt. Your browser stores when the site last showed you the prompt to register, and whether this browser has registered or signed in, so the prompt appears at most once a week and never once you have registered or signed in. Both stay in your browser and are not sent to us.
• The weekly news summary. When a new reader verifies their registration, IAN Weekly is included as stated on the registration form. We record when you joined the mailing list and your subscription preference. You can unsubscribe on your account page or from any edition; unsubscribing does not close your website account.
• Login state. When you log in, a signed, HttpOnly cookie (ian_member) records that your browser is authenticated so that member content displays. It contains your account email, an account ID, your access level and an expiry time, and is cryptographically signed to prevent tampering.
• Anonymous personalisation. The “Your News” feature stores a randomly generated identifier in your browser’s local storage and saves your topic preferences against that identifier in our database. It is not linked to your name, email or account, and you can clear it at any time by clearing your browser’s site data.
• Audience statistics. We use Vercel Web Analytics to count public page views and aggregate clicks on IAN articles and research-paper links, tool use and sponsor impressions and clicks. Account, sign-in and registration pages are excluded from this measurement. A click event identifies the article or paper, where its link appeared, and — for an external paper — its publisher and destination domain. We do not put your name, email address, account ID or IP address into these analytics events. Vercel describes its reports as aggregated and uses a request-derived visitor hash that expires after 24 hours. It also receives page addresses, referrers, coarse location and browser/device information. We remove query parameters and fragments from the page address before sending it. It does not set an analytics cookie or build a cross-site profile. You can exclude this browser through the settings in our Terms.
• Google Analytics measurement. Google Analytics 4 runs automatically to produce aggregate statistics about public page views, article views, paths between content, article-link clicks and completed registrations, so we can improve IAN. Google receives sanitised page addresses, content type, link placement and registration method, with limited campaign tags and referring domains. We do not send names, email addresses, IAN account IDs or our named member reading histories. Analytics cookies use browser identifiers; these are separate from your IAN account. Google also processes technical browser, device and network information to provide the service. Advertising personalisation and Google Signals are disabled in our tag. ReframeMe uses aggregate reports from this GA4 property to report on IAN’s content and registrations. Measurement settings are available in the Terms and Conditions without affecting access to IAN. We preserve previous choices to decline it. A preference in this browser and a first-party rejection cookie remember your opt-out; clearing site data removes these settings.
• Technical logs. Our hosting and infrastructure providers (Vercel, SiteGround and Supabase) generate standard server logs — such as IP address, user agent and pages requested — which we use only for security and operations. We also keep our own record of page requests (IP address, path, browser type, country and time) for 90 days, for security and abuse prevention.
• Refused competitor registrations. If an address from a blocked competitor domain attempts to register, we retain the submitted email address, its domain, the IP address, the reason for refusal and the time of the attempt. We use this record only for security review, abuse prevention and blocklist administration.

Article readership

IAN uses aggregate article readership statistics to improve the service. The audience statistics and Google Analytics described above help us understand which articles readers use, how they arrive and which content leads to registrations. These reports do not identify a named member’s reading history.

Signed-in member activity

When you access an article while signed in, IAN automatically records the article and time against your member account, linked to your name, email address and firm. Account details reflect the latest known details when you access an article, rather than a separate identity snapshot for each visit. This records article access, not how much you read. We use these records to understand member use of the publication and improve our coverage and subscription service. The record is made on our servers using your existing authenticated session; it does not add a tracking cookie or record activity on other websites.

Access is restricted to authorised IAN staff and the infrastructure providers operating the service. Named activity is not sent to Google Analytics or ReframeMe, shared with advertisers or used for automated decisions about you. Our basis for this processing is our legitimate interest in understanding and improving the publication. You can object to future recording and request deletion of retained activity on your member settings in the Terms, without losing article access. You can also download your recorded activity there.

Our normal review period is 365 days, supporting a full year of readership analysis. Records are then reviewed by IAN before deletion or any justified extension; they do not expire automatically. We retain them only while needed for these purposes. An erasure request can require earlier deletion and is assessed separately from the annual review. Closing your account stops further recording and submits the retained activity for erasure review. We keep a minimal suppression record to prevent further collection. Contact us below about an objection or request.

Privacy and measurement choices

Google Analytics starts automatically unless you have turned it off or excluded this browser. Measurement settings are available in the Terms and Conditions. Previous choices are respected. Your IAN account and access remain available when measurement is turned off.

What we do not do

• We do not sell personal data or use cross-site advertising tracking.
• We count aggregate sponsor impressions and clicks on IAN; these are not linked to your account or used to build an advertising profile.
• IAN Weekly is included with new verified registrations and continues for legacy recipients who previously opted in. Every edition includes an unsubscribe link; unsubscribing does not close your website account.

Legal basis and retention

We process account data to perform our contract with you (providing the service you registered for) and technical/security data in our legitimate interest in running the site safely. IAN Weekly is included when a new reader verifies registration, as stated on the registration form, and can be stopped at any time from the account page or an edition. Aggregate audience measurement supports our legitimate interest in understanding and improving the publication. Google Analytics is used for statistical reporting, with the free objection controls above. It is separate from named member activity. GA4 event-level data is set to expire after two months. Google’s user-level data retention is set to 14 months and resets with new activity; aggregate reports have a separate lifecycle. These settings are separate from the 365-day IAN member-activity review. Account data is kept while your account is active; retained member activity is reviewed as described above. You can ask us to delete it at any time. Refused registration records are kept only while needed for security review, abuse prevention and blocklist administration.

Your rights

Under UK data protection law you can ask for a copy of the personal data we hold about you, ask us to correct or delete it, and object to or restrict our processing of it. You can delete your account yourself at any time, which removes your login and your registration record, including your firm, industry, role and weekly-summary preference, and your saved weather location. For anything else, email admin@insuranceassetnews.com, or see the Contact page. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Changes

We will update this notice when the site’s data handling changes, and the date above will always reflect the current version.