About This Privacy Policy
This privacy policy applies to Guardian News & Media Limited (referred to as “Guardian”, “we”, “us” or “our”) and its sites such as theguardian.com and associated apps. It explains how we collect, use, share, transfer, and (for California residents) sell your personal data when you use our services or interact with us. The policy also incorporates specific data privacy rights granted to individuals under Californian and Australian privacy law, reflecting our relationship with readers in those locations where we provide localised editions.
Who We Are
Guardian News & Media Limited, Kings Place, 90 York Way, London N1 9GU, is the data controller responsible for your personal data. Our values guide everything we do, including our editorial approach and how we use personal data. We are strongly committed to keeping your personal data safe throughout its lifecycle, from design to deletion. As a media organisation, data privacy law includes certain exemptions when personal data is processed for journalism purposes.
What Personal Data We Collect
We collect personal data when you visit our sites, subscribe, make contributions, or interact with us. This includes your name, email address, phone number, billing address, username, photograph, and social media profile data if you sign in using social media. We also generate data such as a unique ID number, IP address, geolocation, browsing history, device details, and identifiers derived from cookies or similar technologies. When you use our apps, we collect data on viewed content, bugs, crashes, and cached reading history. We do not knowingly collect data from children under 13, and comply with California law prohibiting sale of data of consumers aged 13-16 without guardian authorisation.
How We Collect Personal Data
We collect personal data directly from you (e.g., when you register, purchase products, sign up for newsletters, or browse our sites), from third parties (e.g., social media accounts, payment service providers), and through cookies and similar technologies. We also receive data from event partners, survey partners, and other organisations to better understand our audience and build segments. For example, we may combine your data with region information to show local currency prices or improve delivery addresses.
Why and How We Use Personal Data
We use personal data only when we have a valid legal ground: consent (e.g., for non-essential cookies, personalised advertising), performance of a contract (e.g., processing subscriptions), compliance with law (e.g., retaining transaction records), or legitimate interests (e.g., understanding readers, promoting services, operating sites efficiently). We also use data for service communications, editorial newsletters, market research, and responding to queries. The Guardian may use generative AI functionalities in software and systems, guided by our generative AI principles.
How We Share Personal Data
We may share your personal data within the Guardian group of companies in the UK, US, or Australia for administrative purposes or legitimate interests. We also share with external organisations such as service providers (e.g., payment processors, cloud hosting, email platforms), advertising partners (e.g., Google Ad Manager, LiveRamp, ID5), affiliate marketing partners (e.g., Skimlinks), law enforcement agencies when required by law, event sponsors, prize draw partners, social media organisations, and entities that buy our business. These transfers may constitute “sale” under California law; California residents can opt out via the “California resident - Do not sell” link on every page.
International Data Transfers
Personal data may be transferred to, stored, and processed in any country where Guardian group companies or service providers are based. We ensure similar protection through adequate country determinations or Standard Contractual Clauses. If you are in the UK or EEA, you may contact us for a copy of these safeguards.
Data Retention and Security
We keep personal data only as long as needed for the purposes set out in this policy, considering amount, nature, sensitivity, and risk. We delete or anonymise data when no longer needed. We have implemented technical and organisational controls to protect against unauthorised processing, loss, damage, or destruction. You should keep your password confidential and not share it.
Your Data Privacy Rights
You have rights to access, correct, delete, restrict processing, object, and withdraw consent. To exercise these, email dataprotection@theguardian.com or write to the Data Protection Officer at the address above. We respond within one month, but complex requests may take longer. We may need to verify your identity. No fee is charged for standard requests.
California Privacy Rights
Under the CCPA and CPRA, California residents have rights to know, access, correct, opt-out of sale, delete, limit use of sensitive data, and non-discrimination. You can opt out of sale via the “California resident - Do not sell” link. We honour Global Privacy Control signals. Requests are responded to within 45 days. You may designate an authorized agent. We keep a record of CCPA requests.
Australian Privacy Rights
Under the Australian Privacy Act, you have rights of access and correction. You can opt out of personalised advertising via the “Privacy settings” link. For complaints, contact the Office of the Australian Information Commissioner.
Contact Us
For questions or complaints, contact the Data Protection Officer at dataprotection@theguardian.com or Guardian News & Media Limited, Kings Place, 90 York Way, London N1 9GU. Complaints are responded to within 30 days. EU individuals can contact our representative at theguardian@mcf.ie or MCF Legal Technology Solutions Limited, Riverside One, Sir John Rogerson’s Quay, Dublin 2, Ireland.
Changes to This Policy
Updated policies are posted on this page. Significant changes may be emailed to registered users. The most recent changes were made on 2 February 2026, 1 July 2025, 5 March 2025, 1 July 2024, 9 February 2024, 8 December 2023, and 13 July 2023.
