Privacy notice

1. Who is responsible

B.B.R. Finance OÜ, Karu tn 14-8, 10120 Tallinn, Harju County, Estonia. Registry code 17185601, VAT number EE102834569, represented by the management board member Sergei Beberin.
For anything to do with your data: privacy@thepowertodomore.com, telephone +41 78 214 61 04.

2. As little data as possible

Every article can be read in full without signing up. This website never asks for your National Insurance number, bank details, Government Gateway or GOV.UK One Login credentials, tax documents or health information, and it takes no applications. Fonts are served from our own server, so opening a page sends nothing to font providers or social networks. The one exception is the Outbrain pixel on content pages, described in section 5.

3. Server logs

When a page is requested, the web server processes technically necessary data: IP address, date and time, the address requested, the referring page, browser and operating system details and the status code. This happens before any cookie choice, because it is part of delivering and securing the site. The data is used to run the site securely and to analyse faults, and is kept for no more than 30 days unless it is needed to investigate a specific security incident. Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR).

4. Browser storage

The cookie banner stores your choice (“Accept all” or “Essential only”) in your browser’s local storage, so that the banner does not appear on every page. If you arrive from an advertisement, the campaign parameters in the link (such as click_id or utm_source) are kept in your browser’s session storage for the visit and added to a sign-up for the Money Diary, so that we can see which campaign it came from. Personal details such as your email address are never written into a web address. Legal basis: strictly necessary to remember the choice you made; for campaign parameters, our legitimate interest in knowing, in aggregate, which advertising brings in subscribers (Article 6(1)(f) GDPR). Details are in the cookie notice.

5. Advertising measurement: the Outbrain pixel

The Outbrain measurement pixel is active on this website. Outbrain is the advertising network we use to promote this site. The pixel loads on content pages, that is the homepage, the articles, the section pages (Pensions & payments, Tax, Banking & savings, Household), the About page and the newsletter page, and it loads as soon as the page opens, which is before you make a choice in the cookie banner. It never loads on this privacy notice, the imprint, the cookie notice, the terms of use, the contact page, the confirmation (thank-you) page or the error page.

The pixel tells Outbrain that a page was viewed. In doing so Outbrain receives technical data: your IP address, the address of the page, the referring page, browser and device information, the time of the visit and any Outbrain cookie identifiers. We use this to measure which advertisements bring readers to the site and to manage our campaigns. We receive only aggregated reports from Outbrain, nothing that identifies you personally. Outbrain may process data outside the UK and the European Economic Area; its safeguards, and how to opt out of personalised advertising, are described in Outbrain’s privacy policy.

Legal basis: our legitimate interest in measuring the performance of our advertising (Article 6(1)(f) GDPR). You can object at any time by writing to privacy@thepowertodomore.com and through Outbrain’s opt-out, and you can block the pixel with your browser settings or a content blocker; every article remains fully readable. No other advertising or analytics tag is active on this website.

6. The Money Diary (our weekly email)

If you sign up for the Money Diary, we process your email address, the date and time of sign-up and confirmation, your consent and any campaign parameters (see section 4). We use double opt-in: the address is only added to the mailing list once you click the link in our confirmation email. Unconfirmed sign-ups are deleted after 30 days at the latest. Every issue has an unsubscribe link; after you unsubscribe we delete the address, except for a minimal record we may need to show that you once consented and not to email you again. Legal basis: your consent (Article 6(1)(a) GDPR). We do not sell, rent or share your email address.

7. Contacting us by email or telephone

If you write to us or call, we use what you send to answer your enquiry and keep the correspondence only as long as needed for that and for legal obligations. Legal basis: our legitimate interest in responding to enquiries (Article 6(1)(f) GDPR). Please do not send us your National Insurance number, bank details, tax documents or health information.

8. Recipients and processors

We do not pass personal data to others for their own advertising and we do not sell it. Recipients are only service providers acting on our instructions, such as our hosting provider and, once connected, an email delivery provider. They are bound by contract to confidentiality and data protection. Where data is transferred to a country without an adequate level of protection, this happens only with appropriate safeguards, in particular the European Commission’s standard contractual clauses (with the UK addendum where relevant).

9. External links

Our articles link to official sources such as gov.uk, legislation.gov.uk, ofgem.gov.uk or psr.org.uk. When you follow a link, the privacy terms of that website apply.

10. Your rights

You have the right to access your personal data (Article 15), to rectification (Article 16), to erasure (Article 17), to restriction of processing (Article 18), to data portability (Article 20) and to object to processing based on legitimate interests (Article 21). Where we rely on consent, you can withdraw it at any time, through the unsubscribe link or by resetting your choice in the cookie notice; this does not affect processing already carried out. Write to privacy@thepowertodomore.com. We reply within one month.

11. Complaints

You are welcome to contact us first. You also have the right to complain to a supervisory authority:

• Lead authority in the EU: the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, AKI), Tatari 39, 10134 Tallinn, Estonia, www.aki.ee.
• For readers in the United Kingdom: the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, ico.org.uk.

Readers in another EU or EEA country can also contact the authority in their country of residence.

12. Security and changes

The website is delivered over an encrypted connection (HTTPS). We update this notice when the website or the law changes; the version published here, with the date shown, applies.