1.Information you provide
You give us personal data directly when you:
- Create an account in the OMN backoffice or one of our editorial products (name, work email, role, organization, password).
- Subscribe to a newsletter or alert (email address and preferences).
- Contact us by email, form, press request, or tip — including any content you choose to share.
- Apply for a job or request press accreditation (CV, contact details and any documents you submit).
- Comment, submit a fact-check request, or file a correction or complaint.
2.Information collected automatically
When you visit omngroup.com or one of our titles, we and our service providers may collect:
- Device and connection data — IP address, browser type and version, operating system, screen size, referring URL, time-stamps.
- Usage data — pages viewed, articles read, time on page, search terms within the site, links clicked.
- Approximate location — derived from your IP address (country / region level) for regional editions, rights enforcement, and analytics. We do not collect precise GPS location from the website.
- Cookies, local storage and similar technologies — see Section 5 below.
3.Information from third parties
We may receive limited information about you from:
- Identity providers when you sign into the backoffice via single sign-on (only the data you authorize them to share).
- Payment or subscription processors, where a paid product applies (transaction confirmation, not full card data).
- Public sources and our journalistic research, where this is necessary for newsgathering in the public interest.
- Service providers we engage for analytics, security, and delivery (see Section 6).
4.Why we use your data — and our legal basis
We use personal data for the purposes set out below. For visitors in the EU / EEA / UK, the GDPR legal basis is shown in brackets:
- Run the site and our products. Authenticate users, deliver content, remember preferences, secure the service. (Contract; legitimate interest in operating and securing OMN.)
- Communicate with you. Respond to your messages, send newsletters or alerts you have requested, notify you of material policy changes. (Contract; consent for marketing-style newsletters; legitimate interest for service messages.)
- Editorial work. Research, verify, and report on matters of public interest, including processing personal data of public figures, sources, and subjects. (Legitimate interest in journalism; processing for journalistic purposes under Article 85 GDPR and the Irish Data Protection Act 2018, with the safeguards required by law.)
- Analytics and product improvement. Understand which stories and tools work, measure performance, fix bugs. (Consent where required for non-essential cookies; legitimate interest for aggregated analysis.)
- Security and abuse prevention. Detect attacks, fraud, and abuse of the service; protect users and sources. (Legitimate interest; legal obligation where applicable.)
- Legal & compliance. Comply with applicable law, respond to lawful requests, exercise and defend legal claims. (Legal obligation; legitimate interest.)
We do not sell personal information for money, and we do not use your data for automated decision-making that produces legal or similarly significant effects on you.
5.Cookies & similar technologies
We use cookies and similar technologies in three broad categories:
- Strictly necessary — sign-in sessions, security, load balancing, remembering your cookie choice. These cannot be switched off.
- Functional — preferences (language, dark mode), saved articles, recently read.
- Analytics & performance — aggregated traffic measurement and product analytics.
In the EU / EEA / UK, non-essential cookies are set only after you give consent through our cookie banner. You can change your choice at any time from the "Cookie settings" link in the footer (where available) or by clearing cookies in your browser. Our platform honors recognized opt-out signals such as Global Privacy Control (GPC) where required by law.
Specific cookies and their providers are listed in our cookie notice: [ link to live cookie list / consent management platform ].
6.Who we share data with
We share personal data only with parties that need it and only for the purposes described above:
- Service providers (processors) who host the site, send email, process subscriptions, run analytics, and provide security tools. They act on our instructions under written data-processing agreements. Categories currently in use: [ hosting / email / analytics / payments / security — to be itemised in the cookie & vendor list ].
- Our group companies — OMN Group LLC and OMN Media Management LTD share data internally only where necessary to deliver a service or comply with law.
- Legal & safety — courts, regulators, and law enforcement where we are required by law to disclose, or where disclosure is necessary to protect the rights, safety or property of OMN, our users, or the public. We resist overbroad demands and notify affected users where lawful.
- Business transfers — in connection with a merger, acquisition, financing, or sale of all or part of OMN, personal data may be transferred subject to the same protections set out here.
We do not "sell" personal information for monetary consideration. We do not knowingly "share" personal information for cross-context behavioral advertising. If this changes, we will update this policy and provide a clear opt-out.
7.International transfers
OMN operates across the United States, the European Union and other regions. Personal data may therefore be transferred to and processed in jurisdictions other than your own — including transfers from the EU / EEA / UK to the United States.
For transfers out of the EU / EEA / UK, we rely on appropriate safeguards under Articles 45 – 49 GDPR, including the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum where applicable, and the EU–U.S. Data Privacy Framework for certified recipients. A copy of the relevant transfer mechanism is available on request to privacy@omngroup.com.
8.How long we keep it
We keep personal data only as long as necessary for the purposes for which it was collected and to meet legal obligations. Indicative periods:
- Account data — for the life of the account, plus a short window after closure for reconciliation and dispute resolution.
- Newsletter subscriptions — until you unsubscribe, with periodic confirmation of interest.
- Server and security logs — short retention, then deletion or aggregation. [ exact retention period to be confirmed ]
- Editorial source material — retained as long as needed to substantiate published reporting, in line with journalistic duty.
- Records required by law (e.g. tax, accounting) — kept for the period required by the applicable jurisdiction.
9.Security
We protect personal data with administrative, technical, and physical safeguards appropriate to the risk — including encryption in transit, access controls, least-privilege provisioning for staff, audit logging, and regular review of our processors. No system is perfectly secure; if a breach affects you, we will notify you and the relevant authorities as required by law.
10.Children
Our services are intended for adults and professionals. We do not knowingly collect personal data from children under 16 in the EU / EEA / UK or under 13 in the United States. If you believe a child has provided us with personal data, contact privacy@omngroup.com and we will delete it.