🛡️ Data Protection & Privacy Policy

1. Introduction & Commitment

At Aevum News, your privacy is foundational to our journalistic integrity. We understand that trust is earned through transparency, and we are committed to protecting your personal data in accordance with GDPR, CCPA, and other applicable data protection regulations worldwide.

This policy outlines how we collect, use, store, and safeguard your information when you visit our website, subscribe to our newsletters, create an account, or interact with our digital services. We do not sell your personal data, and we never compromise editorial independence for commercial gain.

2. Information We Collect

We only collect data necessary to deliver our services and improve your experience. This includes:

• Account Information: Name, email address, and payment details (if subscribing) provided voluntarily during registration.
• Usage Data: Pages viewed, time spent, click patterns, and referral sources collected automatically via analytics.
• Device & Connection Info: IP address, browser type, operating system, and device identifiers to ensure platform compatibility and security.
• Communication Records: Content of emails, comments, or support tickets you send to us.
• Consent Records: Audit logs of your preferences regarding cookies, marketing communications, and data processing.

3. How We Use Your Information

Your data enables us to function as a modern, responsible news organization. We use it to:

• Deliver and manage premium subscriptions and digital access
• Personalize content recommendations and newsletter preferences
• Improve website performance, security, and user experience
• Communicate about account updates, policy changes, or service notices
• Conduct aggregate, anonymized research to understand reader trends
• Comply with legal obligations and prevent fraud or abuse

4. Cookies & Tracking Technologies

We use essential and non-essential cookies to ensure our platform functions correctly and to understand how you interact with our content.

• Strictly Necessary: Required for authentication, session management, and security. Always active.
• Performance & Analytics: Anonymous tracking to measure traffic and optimize site performance.
• Functional: Remember preferences like region, language, or theme selection.
• Advertising: Only used if you consent; never for behavioral profiling or cross-site tracking.

You can manage or withdraw consent at any time through our Cookie Preference Center. Disabling non-essential cookies may affect certain features.

5. Data Security & Storage

We implement industry-leading safeguards to protect your information:

• End-to-end encryption for all data in transit (TLS 1.3) and at rest (AES-256)
• Strict role-based access controls; only authorized personnel can access personal data
• Regular third-party penetration testing and compliance audits
• Automatic data minimization and retention policies (typically 12-24 months for inactive accounts)
• Immediate breach notification protocols within 72 hours if required by law

Your data is processed and stored on secure, GDPR-compliant infrastructure located within the EU and US, with strict transfer safeguards where applicable.

6. Your Rights & Choices

Depending on your jurisdiction, you have the right to:

• Access, correct, or delete your personal data
• Request data portability in a machine-readable format
• Object to processing for marketing or profiling purposes
• Restrict processing under certain legal conditions
• Withdraw consent at any time without affecting service quality
• Lodge a complaint with a supervisory authority

To exercise these rights, submit a request via our secure portal or contact our Data Protection Officer. We respond to all valid requests within 30 days.

7. Third-Party Sharing

We never sell, rent, or trade your personal information. We only share data with trusted service providers strictly necessary for our operations, including:

• Payment processors (PCI-DSS compliant, tokenized transactions)
• Email delivery & newsletter platforms (double opt-in enforced)
• Cloud hosting & CDN providers with strict data processing agreements
• Legal authorities when required by court order or law enforcement

All partners are bound by contractual obligations matching or exceeding this policy's standards. We regularly audit their compliance.

8. Policy Updates

As digital journalism and data regulations evolve, we may update this policy. Material changes will be communicated via email, website banner, or in-app notification at least 14 days before taking effect. Your continued use of our services after the effective date constitutes acceptance of the updated terms.

9. Contact & Data Protection Officer

For questions, concerns, or data requests, please reach out: