Website: http://www.risk-wire.com
Last updated: May 2026
Version: 1.0
1. Who We Are
Riskwire is a practitioner-led blog covering sanctions, financial crime compliance, and geopolitical risk. The website is operated by an individual based in the United Kingdom.
Website address: https://www.risk-wire.com
Data Controller contact: riskwire@outlook.com
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), the operator of this website is the data controller in respect of any personal data collected through it.
If you have any questions about this Privacy Policy or how your personal data is handled, please contact us at the email address above.
2. What This Policy Covers
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit and interact with http://www.risk-wire.com. It also explains your rights under UK data protection law and how to exercise them.
This policy applies to:
- Visitors who browse the website
- Individuals who submit comments on articles
- Individuals who use any contact form on the website
- Individuals who subscribe to any mailing list or newsletter, where offered
- Any individual whose personal data is otherwise processed in connection with this website
This policy does not cover third-party websites that may be linked to from our content. We encourage you to review the privacy policies of any external sites you visit.
3. Legal Basis for Processing Your Personal Data
Under the UK GDPR, we must have a lawful basis for processing your personal data. The lawful bases we rely on are:
- Legitimate interests (Article 6(1)(f)): Processing necessary for our legitimate interests in operating this website, preventing spam and abuse, and maintaining the security and integrity of the site, where those interests are not overridden by your rights and interests.
- Consent (Article 6(1)(a)): Where you have freely given clear consent for a specific processing purpose (for example, subscribing to a newsletter or opting into non-essential cookies).
- Legal obligation (Article 6(1)(c)): Where we are required to process data to comply with a legal obligation.
- Contract (Article 6(1)(b)): Where processing is necessary for the performance of a contract with you or to take steps at your request before entering a contract.
We will identify the specific lawful basis applicable to each category of processing set out in this policy.
4. Personal Data We Collect and How We Use It
4.1 Browsing the Website
When you visit http://www.risk-wire.com, our web server and hosting provider may automatically collect certain technical data, including:
- Your IP address
- Browser type and version
- Operating system
- Referring URL (the page you came from)
- Pages visited and time spent on them
- Date and time of access
This data is collected automatically as part of standard web server logging. It is used to maintain the security and operation of the website and to diagnose technical problems.
Lawful basis: Legitimate interests (maintaining website security and performance).
4.2 Comments
When you choose to leave a comment on an article, we collect:
- Your name (as entered)
- Your email address
- Your website URL (if provided)
- The content of your comment
- Your IP address
- Your browser user agent string
Your name and comment content will be published publicly on the website if the comment is approved. Your email address and IP address will not be published publicly.
An anonymised string (hash) derived from your email address may be sent to the Gravatar service to check whether you have a profile picture associated with that address. Gravatar is operated by Automattic, Inc. You can review Gravatar’s privacy practices at: https://automattic.com/privacy/. If you use Gravatar, your profile picture may be displayed publicly alongside your approved comment.
If you opt in, a cookie may be saved in your browser containing your name, email address, and website URL so that you do not need to re-enter these details when you next leave a comment. This cookie will last for one year. See Section 6 (Cookies) for further details.
Comments and associated metadata may be retained indefinitely to enable ongoing moderation, spam prevention, and the ability to recognise and approve follow-up comments without holding them in a moderation queue.
Lawful basis: Legitimate interests (operating a public comments feature and preventing spam); consent (where a cookie is set for your convenience).
4.3 Contact Forms
If a contact form is made available on this website and you choose to use it, we will collect the information you submit, which may include:
- Your name
- Your email address
- The subject and content of your message
- Your IP address and submission timestamp (collected automatically)
This data is used solely to respond to your enquiry. We will not use it for any other purpose without your consent, and we will not add you to any mailing list as a result of a contact form submission.
Data submitted via contact forms is retained for as long as necessary to handle and close your enquiry, typically no longer than 12 months, unless a longer retention period is legally required or justified.
Lawful basis: Legitimate interests (responding to enquiries); consent (where applicable).
4.4 Newsletter and Mailing List Subscriptions
If we offer a newsletter or subscription service and you choose to sign up, we will collect:
- Your email address
- The date and time of your subscription
This data is used solely to send you updates, new articles, or other communications you have subscribed to. You may unsubscribe at any time by using the unsubscribe link included in every communication, or by contacting us directly.
We will not pass your email address to any third party for their own marketing purposes.
Lawful basis: Consent.
4.5 Analytics
This website may use web analytics tools to understand how visitors interact with the site. Where analytics are used, data collected may include:
- Anonymised IP addresses
- Pages visited and navigation paths
- Time spent on pages
- Referral sources
- Device and browser type
- Geographic location (at country or city level)
Where analytics tools use cookies or similar tracking technologies, this will be disclosed in Section 6 (Cookies). We will seek your consent before placing any non-essential analytics cookies.
If analytics tools transfer data outside the UK, appropriate safeguards will be in place as described in Section 9 (International Data Transfers).
Lawful basis: Consent (for non-essential analytics cookies); legitimate interests (for any server-side analytics not relying on cookies).
4.6 Embedded Content from Third Parties
Articles and pages on this website may include embedded content such as videos, social media posts, or other media from third-party platforms (for example, YouTube, X/Twitter, LinkedIn, or similar services).
Embedded content from third-party websites behaves as if you have visited those websites directly. Those platforms may:
- Collect data about you
- Use cookies or similar tracking technologies
- Embed additional third-party trackers
- Monitor your interaction with the embedded content
- Associate your interaction with any account you hold on that platform, if you are logged in
We do not control how third-party platforms process your data. Please refer to the privacy policies of the relevant platforms for details of their data practices. Where possible, we will use privacy-enhanced embed options that limit data collection until you actively choose to interact with the content.
Lawful basis: Legitimate interests (providing informative content); consent (where interaction with embedded content triggers third-party data collection).
4.7 Spam Detection
Comments submitted on this website may be checked through an automated spam detection service before approval. This may involve transmitting limited data about the comment and submitter (including IP address and comment content) to a third-party spam filtering service. Where such a service is used, we will ensure appropriate data processing agreements are in place.
Lawful basis: Legitimate interests (preventing spam and maintaining the quality and integrity of the website).
5. Media Uploads
This website is operated by a single author and does not currently permit visitors to upload images or files. If you submit images to us by email or another channel for potential publication, please ensure any images do not contain embedded metadata (such as EXIF GPS location data) that you would not wish to be disclosed. We will not intentionally publish personally identifying metadata.
6. Cookies
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function efficiently and to provide information to website operators.
6.1 Essential Cookies
The following cookies are necessary for the website to function correctly. They do not require your consent:
| Cookie Name | Purpose | Duration |
|---|---|---|
| WordPress session cookie | Maintains your browser session on the site | Session (deleted when browser closes) |
| WordPress login cookies (if applicable) | Saves login state for any authenticated users | 2 days (up to 2 weeks if “Remember Me” selected) |
| Comment author cookies | Saves your name, email, and website if you opt in after commenting | 1 year |
| Screen options cookies (if applicable) | Saves display preferences for authenticated users | 1 year |
| Post edit cookie (if applicable) | Records the post ID of an article you have just edited (for authenticated users only; contains no personal data) | 1 day |
6.2 Analytics Cookies
Where analytics cookies are used, we will request your consent before placing them. Details of any analytics cookies in use will be listed here when they are active, including their provider, purpose, and duration.
If you do not consent to analytics cookies, your visit will not be tracked by any analytics tool beyond standard server logs.
6.3 Third-Party and Embedded Content Cookies
Third-party platforms whose content is embedded on this site may place their own cookies if you interact with that content. These are outside our direct control. You can manage third-party cookies through your browser settings or by using a browser extension that blocks third-party tracking.
6.4 Managing Cookies
You can control and delete cookies through your browser settings. Instructions for common browsers are available at:
- Chrome: https://support.google.com/chrome/answer/95647
- Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
- Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
- Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
Please note that disabling or deleting certain cookies may affect the functionality of this website.
7. How Long We Retain Your Data
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Type | Retention Period |
|---|---|
| Comment content and metadata | Indefinitely, unless you request deletion (see Section 8) |
| Contact form submissions | Up to 12 months following resolution of the enquiry |
| Newsletter subscriber data | Until you unsubscribe, plus a reasonable administrative period |
| Server access logs | Typically up to 90 days, subject to the hosting provider’s practices |
| Analytics data (if used) | As specified by the analytics provider; we will configure retention settings to reasonable periods |
| Spam detection data | As determined by the spam filtering service provider |
Where personal data is no longer required, we will securely delete or anonymise it.
8. Your Rights Under UK GDPR
Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:
Right of access: You have the right to request a copy of the personal data we hold about you.
Right to rectification: You have the right to ask us to correct any inaccurate personal data we hold about you.
Right to erasure (“right to be forgotten”): You have the right to request that we delete your personal data. This right applies in certain circumstances and does not extend to data we are required to retain for legal, administrative, or security purposes.
Right to restriction of processing: You have the right to ask us to restrict how we process your personal data in certain circumstances.
Right to data portability: Where we process your data by automated means on the basis of your consent or a contract, you have the right to receive that data in a structured, commonly used, and machine-readable format.
Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless processing is necessary for the establishment, exercise, or defence of legal claims.
Right to withdraw consent: Where we rely on your consent as the lawful basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew it.
Rights in relation to automated decision-making: This website does not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.
To exercise any of these rights, please contact us at: [your contact email address].
We will respond to your request within one calendar month. In complex or multiple cases, we may extend this by up to two further months and will notify you accordingly. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.
We may need to verify your identity before processing your request.
9. International Data Transfers
Some of the third-party services we use may transfer or store data outside the United Kingdom. Where such transfers occur, we take steps to ensure appropriate safeguards are in place in accordance with UK GDPR requirements. These may include:
- Transfers to countries benefiting from a UK adequacy decision issued by the Secretary of State
- Use of the UK’s International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses
- Reliance on the provider’s Binding Corporate Rules, where applicable
Where third-party providers handle international transfers under their own legal frameworks, we will reference their privacy documentation accordingly.
10. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:
- Use of HTTPS (TLS encryption) across all pages of this website
- Access controls limiting who can access the website backend
- Keeping website software, themes, and plugins updated to address security vulnerabilities
- Reliance on reputable hosting providers with appropriate security practices
No method of transmission or storage is completely secure. While we take these precautions, we cannot guarantee absolute security. If you become aware of any security vulnerability or incident related to this website, please notify us promptly.
11. Children’s Privacy
This website is not directed at children under the age of 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data without appropriate parental or guardian consent, please contact us and we will take steps to delete that information promptly.
12. Links to Third-Party Websites
As a blog covering sanctions, financial crime, and geopolitical risk, our articles may contain links to external sources including regulatory bodies, news publications, research institutions, and government websites. We are not responsible for the content or privacy practices of those websites. We encourage you to read the privacy policies of any external website you visit through a link from this site.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we use. We will publish any revised version on this page with an updated “Last updated” date at the top.
We encourage you to review this page periodically. Where changes are material, we will take reasonable steps to draw them to your attention.
Your continued use of this website following the posting of any changes constitutes your acceptance of the revised policy.
14. Complaints
If you are dissatisfied with how we have handled your personal data or responded to a request, you have the right to lodge a complaint with the UK’s supervisory authority:
Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: https://ico.org.uk
Helpline: 0303 123 1113
We would, however, appreciate the opportunity to address your concerns before you contact the ICO. Please reach out to us in the first instance at: [your contact email address].
This Privacy Policy was prepared in accordance with the UK General Data Protection Regulation (UK GDPR) as retained in UK law by the European Union (Withdrawal) Act 2018, and the Data Protection Act 2018.