This notice says what is held about an account, why it is held, where it is kept and what deletion removes.

The product is operated under UK GDPR and the Data Protection Act 2018. Avanti Mind Limited is the controller for personal data held by the product. Avanti Mind Limited, trading as NewsEnough, is registered in England and Wales, company number 16049394. Registered office: The Venture Centre, Sir William Lyons Road, University of Warwick Science Park, Coventry, England, CV4 7EZ.

Avanti Mind Limited is registered with the Information Commissioner's Office, registration number ZC172544. A request about personal data, including a subject access request, goes through our contact form. Until an account exists, that form is the only route.

Personal data is stored in the United Kingdom or the EEA, and nowhere else. A processor that cannot meet that condition is not used, which is a decision taken when the processor is chosen rather than a term negotiated afterwards.

Anyone may complain to the Information Commissioner's Office about how their data has been handled. Complaining to us first is not a condition of doing so.

The lawful basis for holding the item corpus is legitimate interest. A legitimate interests assessment will be published in full before the product opens, and this page will link to it, because a legitimate interest nobody can read is an assertion rather than a basis.

The lawful basis for location, for calendar access, for marketing and for non-essential cookies is consent. Each of those four is asked for separately, none of them is bundled into signing in, and any one of them can be withdrawn without withdrawing the others.

Once accounts exist, deleting one will be a request the reader makes in the product, and it will complete inside 24 hours. It will be a cascade over every table that holds anything about the account.

• The identity record, including the email address and any sign-in identifier.
• The place set and its radius.
• The chips.
• The standing instructions.
• The follows, and the alert history attached to them.
• The seen state.
• The questions asked and the answers given.
• The recaps created.
• The delivery records.
• The push tokens.
• The audio assemblies.
• The subscription identifiers, beyond the period financial law requires them to be retained.
• The business workspace memberships.

One thing is not removed. The item corpus is not the personal data of a reader, so deleting an account does not delete a published item, and a correction already issued stays on the public record. The deletion screen will say that plainly, on the screen, before the deletion is confirmed.

Everything held about an account will be exportable as a JSON file, without asking anyone for it.

The Line will be offered on Telegram and in a small capped trial on WhatsApp. Neither is switched on, so nothing of this kind is held about anyone today.

When a reader chooses one, the product will hold the identifier that channel needs to deliver the Line: the Telegram chat id, or the WhatsApp number. It will also hold a delivery record of each message sent to it. The identifier will be used to send the Line and for nothing else, and it will be removed with the account, as the delivery records are.

This marketing site is not the product and holds no personal data. It stores nothing about a visitor, sets two strictly necessary cookies that are named in the cookie notice, runs no analytics of any kind, and loads no script from a third party.

An email address given here for the Line is passed to the product and held there for one purpose, which is sending the Line. It is not passed to anyone else, it is not used for anything else, and it is removed by replying to any Line.

What the product publishes about a named person is governed by the editorial standards rather than by this notice, because that material is a record rather than an account.

A postcode has one purpose, which is setting Near you. It is asked for when starting on the web or in the app, and in settings. It is used to find the reader's area and to set the default distance Near you covers. It is not used for anything else.

The postcode itself is not stored. It is sent once, from our server and over an encrypted connection, to a public postcode lookup service, which returns the council, the ward and a map point. The postcode is not written to any table, log, cache or queue, and the app does not keep it on the phone.

What is kept is the area found from it: the council, the ward and council name shown back to the reader, the map cells around the postcode's point, the centre of the smallest of those cells, and the distance chosen. The smallest cell is about 170 metres across. In a rural area a cell that size can hold only a few homes, or one, so the kept area is treated as personal data.

On the web the area is kept in the browser's session record on our server, and it stops being used when that session ends after a period without use. Expired session records are then removed by the server's routine clear-out. In the app it is kept on our server against the device's record. No time limit is applied to it there: it is kept until the reader changes it, clears it or deletes the account, and deletion removes it with everything else.

The Line signup in the product asks for a region, not a postcode. Whatever is typed in that box is kept with the email address.

The contact forms, on this site and in the product, ask for an email address, a message and, if you choose, a name. That covers support, deleting your data and a business enquiry. They are used for one purpose, which is replying to you.

Avanti Mind Limited holds them on its own support desk, on servers in France, in the EEA. This site keeps no copy.

A message is deleted 365 days after its conversation is closed. You can ask for it to be deleted sooner through our contact form.

4 October 2026: a section added, now section 6, stating what happens to a postcode, as the product's code handles it.

15 October 2026: the company particulars and the ICO registration number are stated from one source. The address for a data request is given. Messaging identifiers are described, in the future tense because no channel is switched on. Statements that a right is exercised inside the product are removed, because no account exists.

24 October 2026: a request about personal data goes through our contact form. No email address is given.

25 October 2026: a section added, now section 7, stating what happens to a message sent through a contact form.