Privacy

Privacy notice

We handle personal information carefully because the people who contact us are often vulnerable, and because the people we write about have rights too.

Last updated

Who we are

The data controller is UK Scam Bursters, Rear Of, 62 Spital St, Dartford DA1 2DT, UK. Contact us about privacy at [email protected].

If you visit this website

We do not use advertising, tracking cookies or third-party analytics that follow you around the web. Our hosting provider keeps short-lived technical logs (such as IP addresses) to keep the site secure and working. If we measure visits, we use privacy-friendly, cookie-free counts that do not identify you.

If you contact us or send evidence

We collect what you choose to send: your contact details, your account of what happened, and documents such as receipts, bank records and messages. We use it to investigate, to decide what to publish, and to help you reach the right authorities.

  • We never publish your name or anything that identifies you without your informed consent.
  • We share your information with police or regulators only with your consent, or where the law requires it.
  • We never sell or trade personal information.
  • You can report without giving your name or contact details. When you submit a form we store only a one-way hash of your IP address, never the address itself, and only to prevent spam and abuse.
  • We keep it securely, with access limited to the people working on your case.
  • We keep it for as long as the investigation and any related legal proceedings need it, and review it at least once a year.

Our lawful basis is our legitimate interest in investigating and reporting fraud in the public interest. Where information concerns alleged criminal conduct, we rely on the conditions for journalism and for preventing fraud in the Data Protection Act 2018.

If we write about you

We process information about people and organisations we investigate for the purposes of journalism: names, public roles, public records, and evidence about the conduct we report. We do this because we reasonably believe publication is in the public interest. Some of your data protection rights may be limited where they would be incompatible with journalism, as the Data Protection Act 2018 allows. You can still ask us to correct anything inaccurate, and you can always respond: contact us.

Your rights

Subject to the law, you can ask for a copy of your personal information, ask us to correct or delete it, or object to how we use it. Email [email protected]. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.