Information Matters
Privacy Policy
Last updated: 16 June 2026
This policy explains how Information Matters Ltd collects, uses and protects your personal data, and the rights you have over it. We keep the amount of personal data we hold deliberately small — we use it for two purposes only: to send our email newsletter, and to fulfil the reports we sell on our website.
Who we are
Information Matters Ltd is the “data controller” responsible for your personal data.
Information Matters Ltd
10 Thomas Street, Tunbridge Wells, TN4 9RN, United Kingdom
Registered with the UK Information Commissioner’s Office (ICO), registration reference ZB825422.
Data protection contact: info@informationmatters.net
The personal data we collect, and why
1. Newsletter subscribers
When you subscribe to our email newsletter, we collect your email address (and your name, if you choose to give it). We use this only to send you the newsletter and occasional related updates. Our newsletter is delivered through Substack, which stores and processes subscriber data on our behalf (see “Who we share your data with” below). You can unsubscribe at any time using the link in every email.
2. Report purchasers
When you buy a report from our website, we collect the information needed to complete the sale and deliver the report to you — typically your name, email address, and any billing or company details you provide. We use this to process your order, deliver the report, issue a receipt or invoice, and keep the sales records the law requires us to keep.
We do not collect, see or store your payment details. Card and bank payments are handled directly by our payment provider, SureCart, on its own secure systems. Information Matters Ltd has no access to, and does not retain, your card number or bank account information.
3. People who contact us
If you email us or send us an enquiry, we hold the contents of that correspondence so we can respond and keep a record of it.
4. Website data
Like most websites, our site and its hosting provider keep basic technical logs (such as IP address and browser type) for security and reliable operation, and use a small number of cookies. See “Cookies” below.
Our lawful bases for using your data
Under UK data protection law (the UK GDPR and the Data Protection Act 2018) we must have a lawful basis for using your personal data. Ours are:
| What | Lawful basis |
|---|---|
| Sending you the newsletter | Consent — you ask to receive it, and can withdraw at any time. |
| Processing and delivering a report you buy | Contract — we need your data to fulfil your order. |
| Keeping sales and tax records | Legal obligation — we are required to retain these. |
| Responding to enquiries, securing and improving our site | Legitimate interests — running the business responsibly, balanced against your rights. |
Who we share your data with
We do not sell your personal data, and we do not share it for anyone else’s marketing. We use a small number of trusted suppliers (“processors”) who handle data strictly on our instructions:
- Substack — to store subscriber details and deliver our email newsletter.
- SureCart — to take payment securely for report purchases.
- Hostinger and our website platform (WordPress) — to host and operate informationmatters.net.
- Google (Google Analytics) — to measure website traffic and usage, where you have consented.
We may also disclose personal data if the law requires us to, or to protect our legal rights.
Sending data outside the UK
Some of our suppliers — including Substack, SureCart and Google — are based in the United States, so using our newsletter, checkout or website may involve transferring some of your data outside the UK. Where that happens, we rely on the safeguards required by UK data protection law (such as the UK International Data Transfer Agreement or addendum to the EU Standard Contractual Clauses, or a UK adequacy decision) to keep your data protected to UK standards.
How long we keep your data
- Newsletter: until you unsubscribe or ask us to remove you, after which we delete or suppress your details.
- Report sales records: for six years after the relevant tax year, as required by UK tax law, then we delete them.
- Enquiries: for as long as needed to deal with the matter and a reasonable period afterwards.
Your rights
Under UK data protection law you have the right to:
- be told how your data is used (this policy);
- request a copy of the personal data we hold about you;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data, or restrict how we use it;
- object to our use of your data, or ask us to transfer it to another provider; and
- withdraw your consent at any time (for example, to the newsletter).
To exercise any of these rights, email us at info@informationmatters.net. We will respond within one month. There is normally no charge.
Cookies
Our website uses cookies that are strictly necessary for it to work, and Google Analytics cookies that help us understand how the site is used. Analytics cookies are only set with your consent, which you can give or withdraw through the cookie banner; you can also control or block cookies through your browser settings. Blocking strictly necessary cookies may affect how the site works.
How to complain
If you have a concern about how we handle your data, please contact us first so we can put it right. You also have the right to complain to the ICO, the UK’s data protection regulator:
Information Commissioner’s Office — ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
Changes to this policy
We may update this policy from time to time. When we do, we will change the “last updated” date at the top of this page. Significant changes will be made clear on this page.
