Privacy Policy

This notice explains how IoT Heart collects, uses and protects personal information when you visit iotheart.com, contact us or subscribe to the IoT Heart Briefing.

Information we collect

• Newsletter information: your email address, consent choice and status, confirmation and unsubscribe records, sign-up source and related technical metadata. We may also collect your name if a form asks for it.
• Messages and enquiries: the information you choose to provide when you contact us.
• Website and security information: information such as IP address, browser and device type, requested pages, timestamps and security events recorded by our hosting, security and website services.
• Comments or accounts: if these features are enabled, the information submitted and the technical data needed to operate and protect them.

How and why we use information

• IoT Heart Briefing and other requested email: with your consent. We use double opt-in so you confirm the subscription. You may withdraw consent at any time using the unsubscribe link in any email.
• Responding to enquiries: for our legitimate interest in communicating with readers, prospective partners and customers, or to take steps you request before entering a contract.
• Operating, securing and improving the site: for our legitimate interests in providing a reliable, relevant and secure publication, while respecting your privacy.
• Legal and administrative requirements: where necessary to meet a legal obligation, establish or defend legal claims, or prevent misuse.

We do not use solely automated decisions that produce legal or similarly significant effects.

Email subscriptions

Kit provides our subscription forms, consent records and email delivery. Subscribing is optional and is not required to browse the site. Each marketing email includes an unsubscribe link. We may keep a limited suppression record after you unsubscribe so that we can respect your choice and demonstrate compliance.

Cookies, measurement and affiliate links

We use storage and access technologies where needed to run and secure the site and may use proportionate measurement to understand aggregate readership. Where the law requires a choice for non-essential technology, it will not be enabled without the required permission. See our Cookie Policy for more detail.

Some future reviews and guides may contain clearly identified advertising or affiliate links. If you follow one, the destination provider may receive referral and device information and may set its own cookies under its policy. See our Editorial & Commercial Policy.

Service providers and sharing

We disclose information only where it is necessary to operate the site, deliver a service you requested, comply with law or protect legitimate interests. Our principal service providers are:

• IONOS, for website hosting, domain, caching, security and email infrastructure.
• Automattic / WordPress / Jetpack, for website, security, performance and aggregate site features.
• Kit, for subscription forms, consent management and email delivery.
• Professional advisers, authorities or counterparties, only where reasonably necessary for legal, security or business administration.

We do not sell personal information. If commercial tools or providers are added, this notice will be updated before they are used in a way that materially changes the processing described here.

International transfers

Some providers may process information outside the United Kingdom. Where required, we use providers that apply recognised transfer mechanisms and safeguards, such as adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, the UK International Data Transfer Agreement or approved contractual clauses. Kit states that its data-processing terms include UK transfer safeguards for subscriber data.

How long we keep information

• Active subscriber information is kept while you remain subscribed.
• Unsubscribe and consent records may be retained as needed to respect your choice and demonstrate compliance.
• Enquiries are normally retained only while relevant and are reviewed for deletion within 24 months, unless a longer period is needed for a contract, legal duty or dispute.
• Technical and security logs are retained for limited periods determined by operational and security needs and provider settings.

Your data-protection rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict your information; object to processing; receive portable data; and withdraw consent. These rights are not absolute. To make a request, email mark@iotheart.com. We may need to verify your identity and will respond within the applicable legal period.

If you are unhappy with how we use your information, please contact us first so we can try to resolve it. You may also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint/. People elsewhere may also contact their local data-protection authority.

Children

IoT Heart is written for adult readers and is not directed at children under 16. Please do not submit personal information if you are under 16.

Changes to this notice

We will review this notice as the site, law and our services develop. The date above shows the latest revision. Material changes affecting subscribers will be highlighted appropriately.