Privacy Policy

1.Who We Are

The Compliance Gap is an independent editorial publication covering nuclear systems, aerospace, and regulatory law. For the purposes of GDPR, The Compliance Gap acts as the data controller for information collected through this site.

2.Information We Collect

We collect two categories of information:

• Email address. If you subscribe to our newsletter, we collect the email address you provide. We do not require your name or any other personal detail to subscribe.
• Usage data. Like most websites, we use analytics tools that automatically collect information about how visitors use the site — IP address, browser type and version, device type, pages viewed, time spent on page, referring website, and approximate location derived from IP address.

We do not collect payment information, government identifiers, or special categories of data (such as health or political information) through this site.

3.How We Use Your Information

• To send the newsletter to subscribers who have opted in.
• To understand which articles and sections are read, so we can prioritize future coverage.
• To maintain the security and performance of the site.
• To respond to editorial inquiries, tips, correction requests, or contributor applications sent to us directly by email.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.Legal Basis for Processing

Where GDPR applies, we rely on the following legal bases:

• Consent — for sending the newsletter, which you may withdraw at any time by unsubscribing.
• Legitimate interest — for basic analytics that help us understand and improve the site, balanced against your right to privacy.

5.Cookies and Similar Technologies

We use a limited number of cookies and similar technologies, categorized as follows:

• Strictly necessary cookies — required for the site to function and cannot be disabled.
• Analytics cookies — used to measure site traffic and usage patterns. These are only set with your consent where required by law.

Most browsers let you refuse or delete cookies through their settings. Doing so may affect how some parts of the site function.

6.Third-Party Services

We rely on a small number of third-party service providers to operate the site and newsletter, including an email delivery provider (to send the newsletter) and a web analytics provider (to measure site usage). These providers process data on our behalf under their own privacy and security terms and are not permitted to use your information for their own purposes.

7.Data Retention

We retain your email address for as long as you remain subscribed to the newsletter, and delete it within 30 days of unsubscribing. Aggregated, anonymized analytics data may be retained longer, as it is no longer linked to an identifiable individual.

8.Your Rights Under GDPR

If you are located in the European Economic Area, the United Kingdom, or a jurisdiction with comparable protections, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting prior processing.
• Lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us using the details in Section 11. We will respond within one month, as required by law.

9.International Data Transfers

Some of our service providers may process data outside your country of residence, including in the United States. Where this occurs, we take steps to ensure appropriate safeguards are in place, consistent with GDPR requirements for international transfers.

10.Children's Privacy

This site is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

11.Contact Us

For questions about this policy or to exercise your data rights, contact:

12.Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The "Effective" date at the top of this page reflects the most recent revision. Material changes will be noted here.