Privacy Policy
Last updated: 1 June 2026
At Discovia, your privacy matters to us. This Privacy Policy explains what information we collect, how we use it, and what choices you have. By using Discovia, you agree to the practices described in this Policy.
1. Overview
This Privacy Policy applies to the website located at thediscovia.com and all associated services operated by Discovia (“Discovia”, “we”, “our”, or “us”). It describes how we collect, use, store, protect, and share personal information in connection with your use of our Service.
We are committed to protecting your personal information and handling it with transparency, care, and respect. We collect only the minimum information necessary to operate the Service and will never sell your personal data to third parties.
2. Information We Collect
We collect information in the following ways:
Information you provide directly
- Account registration: display name and email address when you create an account
- Newsletter subscription: your email address when you subscribe
- Comments: the text of comments you post and your display name
- Contact forms: your name, email address, and message content
- Profile settings: optional country and interest preferences you choose to set
Information collected automatically
- Usage data: pages visited, articles read, time spent, and navigation paths
- Device information: browser type, operating system, screen resolution, and device type
- IP address: used to derive approximate geographic location (country/region level only)
- Referrer data: the URL of the page that directed you to Discovia
- Cookies and local storage: as described in Section 4 below
Information we do NOT collect
- Payment card numbers or financial information (we do not currently offer paid services)
- Precise geolocation data
- Biometric or health data
- Information from children under 16 without verifiable parental consent
3. How We Use Your Information
We use the information we collect for the following purposes:
- Operating the Service: to deliver articles, enable account features (bookmarks, comments), and personalise your reading experience
- Newsletter delivery: to send our editorial newsletters to subscribers who have opted in
- Communication: to respond to your enquiries, support requests, or feedback
- Analytics: to understand how readers use the Service and to improve our editorial content, site performance, and user experience
- Security: to detect, prevent, and address fraud, abuse, and technical issues
- Legal compliance: to comply with applicable laws, regulations, and legal processes
We process your personal information on the following legal bases (as applicable under the General Data Protection Regulation and equivalent laws): (a) performance of a contract (to provide you with the Service you requested); (b) legitimate interests (to improve and secure the Service); (c) consent (for newsletters and optional personalisation); and (d) legal obligation (to comply with applicable law).
6. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, as outlined in this Policy, and to comply with our legal obligations. Specifically:
- Account data: retained for as long as your account is active, plus a reasonable period thereafter to address disputes or legal obligations
- Newsletter subscriptions: retained until you unsubscribe or withdraw consent
- Comments: retained unless you request removal or the comment violates our policies
- Analytics data: aggregated and anonymised; individual events are not retained beyond 24 months
- Contact enquiries: retained for up to 3 years for correspondence and support records
When personal data is no longer needed for any of the above purposes, we securely delete or anonymise it.
7. Data Security
We take the security of your personal information seriously. We implement industry-standard technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or alteration. These measures include:
- Encryption of data in transit using TLS (HTTPS)
- Encryption of sensitive data at rest
- Row-level security policies on our database infrastructure
- Restricted access controls: only authorised personnel can access personal data
- Regular security reviews and dependency auditing
However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. If you believe your account has been compromised, please contact us immediately at hello@thediscovia.com.
8. Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal information. We will respond to all legitimate requests within 30 days.
Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Ask us to correct inaccurate or incomplete personal data.
Right to erasure: Request deletion of your personal data, subject to our legal obligations and legitimate interests.
Right to restriction: Ask us to restrict processing of your personal data in certain circumstances.
Right to portability: Receive your personal data in a structured, machine-readable format and have it transferred to another controller.
Right to object: Object to processing based on legitimate interests, including profiling and direct marketing.
Right to withdraw consent: Withdraw consent at any time for processing based on consent (e.g., newsletter subscription), without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at hello@thediscovia.com with the subject line “Privacy Rights Request”. We may need to verify your identity before processing your request. You also have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
Opting out of newsletter emails: Every newsletter we send includes an unsubscribe link at the bottom. Clicking it will immediately remove you from our mailing list. Alternatively, you can manage your preferences in your account settings.
9. Children's Privacy
The Service is not directed to children under the age of 16. We do not knowingly collect personal information from anyone under 16 without verifiable parental consent. If we become aware that we have inadvertently collected personal information from a child under 16, we will take immediate steps to delete that information from our records.
If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at hello@thediscovia.com.
10. International Transfers
Discovia serves readers globally. Your personal information may be stored and processed in countries other than your own, including countries that may not have the same data protection laws as your country of residence.
When we transfer personal data outside the European Economic Area (EEA) or the United Kingdom, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your personal information in accordance with this Policy and applicable data protection law.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the “Last updated” date at the top of this page and, where appropriate, by sending an email to registered users.
We encourage you to review this Policy periodically. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Discovia Editorial Team
Email: hello@thediscovia.com
Website: thediscovia.com
For data protection enquiries relating to GDPR, please mark your email “Data Protection Enquiry” and we will respond within 30 days.