Picture of Kate and William at farm shop
This policy explains the way that we collect, use and protect your data as well as your choices with regard to your data.
We’ve tried to be as clear as we can be and to avoid unnecessary jargon, while including all the relevant information - but please do [email protected] if anything doesn’t make sense or needs expanding on. Because by necessity this is a long document and because we’re all pressed for time, we've summarised the key points - you can click on each one to get more detailed information. Please do read the whole thing if you can.
We recognise our duty of care with regards to your data and will always endeavour do the right thing with the personal data you choose to share with us, including: not compromising your anonymity; protecting your privacy; storing your data securely; and giving you control over your own data. Read more...
We store, or may in future store, IP address, cookies, your device’s unique ID, page browsing history, ads you’ve viewed and clicked, searches you’ve made on site, approximate location, and any enquiries you’ve made. For registered members we also store username, password and email address; discussions you may have with Gransnet site moderators; and a summary of decisions we’ve taken about you if we’ve reviewed your use of the Gransnet forums for any reason. Registered members may also have given us more data on sign up, such as the age of their grandchildren.
We store your email address to register you and contact you (if you have asked for email newsletters) and we store things such as IP address, cookies and device ID so that our systems recognise you if you return to Gransnet. We store things such as your device’s reading habits to show you things we think may be of interest to you (e.g. content or ads). When we look at this information across large numbers of users, it helps us see which parts of Gransnet are well-used and which aren’t, and this helps us to decide what sort of content and features might be useful to develop. Read more...
Of your registration data, only your Gransnet username is displayed on screen for other Gransnet users to see - but posts on the Gransnet forums are visible to anyone on the Internet. So when posting, you should bear in mind that any personally identifying details you include in the text or pictures you post could be seen by anyone.
We may also provide an anonymised copy of all Talk posts to a handful of carefully chosen organisations so that they can analyse social trends. None of your personal information is ever shared and we remove Gransnet usernames before sharing this information. Read more...
You can change your registration data and your email preferences on Gransnet at any time on your My Gransnet page. You can also manage your cookie preferences - click on this section for how to do this, but remember it may affect how well this site works. You can delete your account by going to My Gransnet. Read more...
Any personal data you give us, or that we collect when you use Gransnet, will be retained by us for as long as it’s needed to perform its function. Registration data is held permanently unless you deregister. There’s no one-size-fits-all time limit, but we regularly review the data we hold to ensure it is still necessary. Read more...
You can choose to log in to Gransnet using Facebook or Google. When you do this, Facebook or Google will know you’ve logged in to Gransnet. By logging in via Facebook or Google you grant us access to your Facebook or Google registered email address. We do not use (and cannot obtain) your Friends list and we do not ask for or receive any data that Facebook holds on you. Read more...
Your data is stored by our web hosting company DSC, and by Amazon Web Services. Unless you have turned cookies off, some data technology companies (such as Google and Lotame) store your cookies; they do not have access to any personal information about you beyond your browsing habits. Read more...
If there are obvious safeguarding reasons, or if we are contacted by the police about a possible breach of the law, we may share your personal information with public authorities without your permission. If we are compelled to do so by a court order, we will share your personal data to the extent specified in the order. Read more...
The way we store and process data is compliant with the UK 1998 Data Protection Act, the 2018 EU General Data Protection Regulation (GDPR), and other relevant pieces of legislation. We always aim to comply both with the spirit as well as the letter of the law and to be responsible with your data. Read more...
If our security is breached, our data is compromised or if we fail to comply with the law, we will tell affected users as soon as we become aware of the failure. We will report any data breach to the Information Commissioner and, if appropriate, the police, in a timely fashion. Read more...
Our mission at Gransnet is to help make life easier. We believe that securing your data, preserving your anonymity, protecting your privacy, and giving you control over your data are an important aspect of that mission.
We believe that employing data and data analytics appropriately can improve the user experience on Gransnet. Data you give us when filling in forms (when joining, for example, or when using the site or our apps) helps us show you more relevant things. It also allows us to see which aspects of the site are popular and well-used, meaning we can improve Gransnet for everyone.
We don’t require your name or address when you view Gransnet content or register with the site, and you can use Gransnet fully without providing it.
Subject to your permissions and choices (as explained later) we collect, store and process the data listed in this section. We believe we provide a useful service, and therefore have a legitimate interest in processing your data which benefits both Gransnet and you as a Gransnet user.
We store the following data for all users, whether registered or not:
- Within our user database, we assign your internet browser and device a unique “Gransnet Identity Number”. Against this identity number we record the topic of the content that your device is viewing or creating - in other words, your device’s “reading habits”. This helps us understand what you may be interested in so that we can show you things we think may be relevant to you (such as ads or other Gransnet content). When we look at this information from all users, we can see what is popular and less popular, helping us to develop Gransnet over time.
- We also use Google Analytics to report on page views in aggregate to help us understand usage trends. We do not pass your personal data to Google and your IP address is anonymised before we share this information with Google Analytics. Google uses cookies and can learn about your browsing on Gransnet to inform Google ads and other Google services, as explained here: https://policies.google.com/privacy/partners
We store the following information for registered members:
We also store the following optional data for registered members:
Registered members of Gransnet can start discussions and add comments, pictures and videos to existing discussions within the Gransnet forums under Gransnet’s Terms of Use. This is optional in the sense that it’s up to you whether you post on Gransnet or not; if you do post we always store the contents of those posts. These posts are public, but of your registration data, only your Gransnet username is displayed on screen. Your Gransnet username is picked by you when you join Gransnet; you can change it in My Gransnet.
Gransnet’s forums are visible to search engines. This means that any personal information users choose to share in their posts on Gransnet can be seen widely. We cannot control who sees these posts. However, wherever appropriate we remind users that Gransnet’s forums are highly visible and can be read by anyone, anywhere.
In all your posts on the Gransnet forums, in personal messages to other users, and in choosing your username, you should be mindful about the possibility that information you choose to disclose could lead to someone working out who you are in ‘real life’. For example, anything that references your real life name, your children/grandchildren’s real names, where you live or your date of birth could make it easy for someone to work out who you are. Other personal information in your posts - how many children/grandchildren you have, what job you do, that you work from home on Thursdays, that your spouse is a mountain bike enthusiast - might also allow people reading Gransnet to work out who you are (through ‘jigsaw identification’).
Gransnet is a site for grown-ups and we believe that our users are adults who can decide for themselves what information they choose to share on the Gransnet forums. That said, if you’re ever worried that you’ve said too much, hit ‘report’ on one of your posts and explain the problem to our site moderation team; they will be happy to help if they can.
You should be aware that the moderation team and a small number of other members of staff at Gransnet have access to your forum posts and can see that content in combination with your registration data. We restrict to the minimum the number of staff who have access to this data and we constantly review this. You can check your registration data in My Gransnet.
We provide a copy of all forum posts to a small number of organisations for analysis or to create software analysis tools to analyse brands and sentiment towards topics. Your personal data and username is not included in the copies of posts that we provide to these organisations.
You can change your registration data and your email preferences on Gransnet at any time on your My Gransnet page. You can also manage your cookie preferences, but remember it may affect how well this site works. You can delete your account by going to My Gransnet.
Your registration data
You can change the information that you provided when you registered, including your email address and Gransnet username, on your My Gransnet page.
If you have signed in using Facebook or Google, you can stop access at any time via your Facebook or Google account settings. If you still wish to post on Gransnet you would then need to register a Gransnet username and password via our Registration page.
Your email preferences
You can change which newsletters you receive, or ensure that you do not receive any newsletters from Gransnet, by going to My Gransnet.
Your forum posts
If you’re ever worried that you’ve said too much, hit ‘report’ on one of your posts and explain the problem to our site Moderation team; they will be happy to help if they can.
Your cookies
Most web browsers automatically accept cookies. A cookie is a small, temporary file which a web server sends to your web browser to be stored. Cookies allow Gransnet to identify your web browser and device if we see it again.
Cookies do not contain your name or other personal details and there are some benefits to you and Gransnet:
There are 5 ways for you to manage your cookie preferences:
Analytics cookies. Details of how to decline Google Analytics cookies are here.
Advertising cookies. There are three main associations that allow you to visit their websites to opt out of all cookies served by their advertising members. Typically, they will scan your device for a few seconds to see what cookies are currently set and then provide you with the facility to opt out on an individual basis or completely from all cookies. In opting out, a cookie will be set to let advertisers know not to use your cookies for targeted advertising purposes. You will still see adverts; they just won't be tailored to your interests or browsing habits. If you clear your cookies via your browser you will need to go through the opt-out process again.
Digital Advertising Alliance (DAA)
European Digital Advertising Alliance (EDDA)
Network Advertising Initiative (NAI)
Turning off all cookies. You can usually modify your browser settings to decline all cookies if you prefer. Each browser is different, so check the "Help" menu of your browser to learn how to change your cookie preferences. Instructions for the most common browsers are provided here. If you choose to do this, please bear in mind that the Gransnet website may not function properly or you may not be able to log in, depending on your browser. Changes that you make in your web browser may apply across all the websites you visit.
Deleting your Gransnet Account
You can delete your account by going to My Gransnet. Your Gransnet posts won’t be deleted, but there will no longer be any personal information associated with them.
Data requests
If you’d like you can ask us to provide details of the personal information we hold about you, under the 2018 EU General Data Protection Regulation (GDPR).
To request this information, please email us at [email protected] or write to Gransnet Limited, Studios 13-16, Deane House Studios, 27 Greenwood Place, London NW5 1LB.
Any personal data that you give us will be retained by us for as long as it's needed to perform its function.
There's no one-size-fits-all time limit, but to give some examples: data provided by members of our Insight panel for that specific purpose is retained for as long as the user remains a member of the panel. Information provided when entering competitions is held for a maximum of three months. Information you give us when you sign up is stored permanently unless you choose to delete it or unless you delete your Gransnet account.
Private Messages are stored until you delete them. If you delete your account, your messages will also be deleted.
We regularly review the data held by Gransnet’s different teams and delete information that is no longer needed. All the data we hold is stored securely and only accessible to authorised staff members, who have regular data training.
If you choose to join Gransnet you are asked to create a username and password. If you prefer, you can log in using Facebook or Google instead, meaning you don’t have to create and remember another password.
If you log in via Facebook or Google you will grant us access to your Facebook or Google registered email address only. We do not use (and cannot obtain) your Friends list and we do not ask for or receive other Facebook data. By default, the Facebook login process says it requires access to your Public Profile, but we do not store or use that data. However, if you choose this option, Facebook and Google will know that you have logged into Gransnet. We do not know whether Facebook or Google use this data (for example to make ads more relevant).
You may stop access at any time via your Facebook or Google account settings. If you want to carry on being able to post on Gransnet you will then need to register a Gransnet username and password.
Your data is stored by our web server hosting providers: DSC Limited , Amazon Web Services, and our email service providers: Campaign Monitor and Email Center UK.
The following companies store your cookies on our behalf. We do not share personal data (such as your name or email address) with these companies.
Tag Management
Tags are lines of code that run in sites and apps. Gransnet uses tag management software to run code that connects to third party technology company, Google Tag Manager. This third party technology company delivers Social Log-In, Advertising and Analytics.
Social Log-In
These companies allow you to use your social media account to log in to Gransnet. This is optional when you join Gransnet. If you choose to log in via Google or Facebook, those companies will know that you have logged in to Gransnet.
Facebook Connect
Google
Advertising
These companies deliver advertising on Gransnet.
Lotame
DoubleClick
Rubicon
AppNexus
PubMatic
SkimLinks
Captify
Google Publisher Tags
Analytics
These companies help Gransnet understand our users
Google Analytics
GA Audience
SnowPlow
SnowFlake
This company helps Gransnet understand how our site and apps are performing (for example, reporting on the speed that pages take to load).
New Relic
If there are compelling safeguarding considerations, we may share your data with public authorities without your permission. We understand ‘compelling safeguarding considerations’ to mean credible evidence of imminent risk of serious harm, especially to a child or vulnerable person.
In such circumstances, on the judgement of a senior person within Gransnet and in consultation with the Data Protection Officer, we may proactively contact relevant authorities (the police or ambulance service, for example) and share any relevant data we have, such as location data, relevant posts, Private Messages, details of any children who might be at risk, and descriptions of the situation.
If contacted by the police about possible breaches of the law disclosed in posts, we may sometimes - on the judgement of a senior person within Gransnet and in consultation with the Data Protection Officer - share your personal information with them. We will share your personal information if compelled to do so by a court order, for example under Section 5 of the 2013 Defamation Act.
The way that we store and process data is compliant with the following legislation:
UK Data Protection Act 1988 (DPA)
EU Data Protection Directive 1995 (DPD)
EU General Data Protection Regulation 2018 (GDPR)
ePrivacy Directive 2002 (amended 2009)
As well as keeping up-to-date with laws about data, we aim to take sensible decisions based on common sense, listening to users’ views and industry best practices.
If via human error, or via a breach of our security or we fail to comply with the law, we will let affected users know as soon as we are aware of it. We will report any data breach to the Information Commissioner in UK and, depending on the circumstances, the Police.
Gransnet uses best practice, multi-tier web application security for our servers including Denial of Service protection and Web Application Firewall at the network edge. For staff access to all administrative systems, we enforce 2 step verification and IP based access restrictions. Regular security updates keep Gransnet staff informed of the latest security threats.
This Privacy Policy was last updated on 2 October 2018. Further updates will be noted here as and when they are made.
2 October 2018: cookie explanations updated to reflect new consent process.
22 May 2018: deletion policy on Private Messages updated.