This Data Policy provides detailed information about how The Street International Journal collects, processes, stores, and shares your personal data. This policy supplements our Privacy Policy and is designed to meet requirements under applicable data protection regulations, including the GDPR and CCPA.

1. Data We Collect

Account Data: Name, email address, and password when you create an account.

Subscription Data: Newsletter preferences, subscription tier, and payment information processed through our secure payment providers.

Usage Data: Pages visited, articles read, time on page, search queries, click events, device type, browser, operating system, and IP address.

Communication Data: Messages sent through our contact forms, responses to surveys, and email correspondence.

2. Legal Basis for Processing (GDPR)

• Consent: Newsletter subscriptions, marketing communications, and non-essential cookies.
• Contract: Processing necessary to deliver our subscription services.
• Legitimate Interest: Analytics, fraud detection, service improvement, and personalized content.
• Legal Obligation: Compliance with tax, accounting, and regulatory requirements.

3. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account data: Retained while your account is active, deleted within 30 days of account closure.
• Usage/analytics data: Retained for up to 26 months in aggregated form.
• Communication data: Retained for up to 12 months after the last interaction.
• Financial data: Retained for 7 years as required by tax and accounting regulations.

4. Data Sharing

We share data only with:

• Service Providers: Hosting (Vercel), database (Supabase), email delivery (Resend), analytics (Google Analytics), and advertising partners (Google AdSense).
• Legal Authorities: When required by law, court order, or to protect our rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets.

We do not sell your personal data to third parties.

5. International Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. We ensure appropriate safeguards are in place through Standard Contractual Clauses (SCCs) and data processing agreements with our service providers.

6. Your Rights

Depending on your jurisdiction, you have the right to:

• Access your personal data and obtain a copy
• Rectify inaccurate or incomplete data
• Request erasure (“right to be forgotten”)
• Restrict or object to processing
• Data portability (receive data in a structured, machine-readable format)
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

California residents (CCPA): You have the right to know what personal information is collected, request deletion, opt out of the sale of personal information, and not be discriminated against for exercising your rights.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS 1.3), encryption at rest, access controls, regular security audits, and incident response procedures.

8. Contact Our Data Protection Officer

For questions about this Data Policy or to exercise your data rights, contact our Data Protection Officer at dpo@streetinternationaljournal.com or through our Contact page.