Data Protection Policy
Last updated: 28 September 2026
Privacy Policy
Northants 1 and Peak Radio
Last updated: September 2026
This policy explains how Northants 1 and Peak Radio collect, use and protect your personal information, and the rights you have over it. It applies to our radio broadcasts, websites, apps, social media channels, competitions, events, advertising services and volunteer programmes.
We are committed to handling personal information lawfully, fairly and transparently, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Northants 1 and Peak Radio are joint controllers of your personal information. This means we decide together how and why it is used.
Northants 1 is owned and operated by NN Local Media & Training CIC, trading as NN Media. It is a community interest company registered in England and Wales under company number 15618473, with its registered office at 17 Station Road, Kettering, England, NN15 7HH. Website: northants1.co.uk
Peak Radio is operated by Andrew Haslam, trading as Peak Radio. Website: peakradio.co.uk
We share some systems, staff and services. We have agreed between us who is responsible for each of our data protection duties. In summary:
NN Media's Data Protection Officer is the single point of contact for both stations.
Each station is responsible for the information collected through its own broadcasts, website and competitions.
Both stations follow this policy and the same security standards.
You can exercise your rights against either station. Whichever one you contact will make sure your request is dealt with.
2. Contact details
Data Protection Officer: Charlie Stone
Email: [email protected]
Post: Data Protection Officer, NN Media, 17 Station Road, Kettering, NN15 7HH
3. What information we collect
Listeners and the public
your name, email address, phone number and postal address, when you enter a competition, send a request or message, or sign up to a newsletter
the content of messages, texts, emails, voice notes and calls you send to the studio
your voice and what you say, if you take part on air or in a recorded interview
photographs and video taken at our events and outside broadcasts
Advertisers, sponsors and clients
business contact details for the people we deal with
client portal account details
order, invoice and payment records
campaign materials and approvals
Volunteers, presenters and trainees
application details, including contact details, experience and availability
emergency contact details
training records and rota information
signed confidentiality agreements
where necessary, and only with your permission, health or accessibility information so we can support you
Website, stream and app users
IP address, device and browser information
pages visited and listening activity
cookie and analytics data
For details of the cookies we use, see the cookie policy on each station's website.
4. How we use your information and our lawful basis
Purpose | Lawful basis |
|---|---|
Running competitions and delivering prizes | Contract (the competition terms) |
Responding to requests, messages and enquiries | Legitimate interests |
Broadcasting contributions you send us or make on air | Consent or legitimate interests |
Sending newsletters and marketing emails | Consent (you can unsubscribe at any time) |
Delivering advertising campaigns and managing client accounts | Contract |
Invoicing, accounting and tax records | Legal obligation |
Managing volunteers, presenters and trainees | Legitimate interests, or contract where applicable |
Health or accessibility information for volunteers | Explicit consent |
Keeping recordings of our broadcasts | Legal obligation (Ofcom requirements) |
Website analytics and non-essential cookies | Consent |
Keeping our systems secure and preventing misuse | Legitimate interests |
Where we rely on consent, you can withdraw it at any time by contacting us. Withdrawing consent does not affect anything we did before you withdrew it.
5. Special category information
Special category information includes details about health, ethnicity, religion, political opinions, sexual orientation and similar sensitive matters. We only collect it where it is necessary, such as supporting a volunteer's accessibility needs. We only collect it with your explicit consent or where the law allows it, and we apply extra protection to it.
6. Who we share your information with
We never sell your personal information. We only share it where necessary with:
service providers who work on our behalf, such as website and stream hosting, email and cloud storage (including Microsoft 365), newsletter platforms, payment processors and analytics providers
prize suppliers, who receive only the details they need to deliver a prize
professional advisers, such as accountants and legal advisers
regulators, the police or other authorities, where the law requires it
Our service providers may only use your information on our instructions and must keep it secure.
We may use artificial intelligence tools, including third-party services, to help with research, drafting, editing and production. Any personal information processed this way is limited to what is necessary, and the work is overseen by our team.
7. International transfers
Some of our service providers may store or process information outside the UK. Where this happens, we make sure appropriate safeguards are in place. This means either a UK adequacy decision or the approved contract clauses required by UK data protection law.
8. How long we keep your information
We keep personal information only for as long as it is needed for the purpose we collected it for. We then securely delete or destroy it.
Information | How long we keep it |
|---|---|
Competition entries | 90 days after the competition closes |
Competition winners' details | 12 months after the prize is delivered |
Messages, requests and enquiries | 12 months |
Newsletter subscriptions | Until you unsubscribe |
Broadcast recordings | At least 42 days, as Ofcom requires |
Advertiser, invoice and financial records | 6 years after the end of the financial year they relate to |
Volunteer records | 2 years after you stop volunteering |
Website analytics data | As set out in each station's cookie policy |
9. Your rights
Under data protection law, you have the right to:
be informed about how your information is used
access the personal information we hold about you
rectification, meaning inaccurate or incomplete information is corrected
erasure, meaning your information is deleted in certain circumstances
restrict how we use your information
data portability, meaning you receive your information in a format you can take elsewhere
object to us using your information, including for direct marketing
not be subject to decisions made solely by automated means that significantly affect you (we do not make any such decisions)
10. Making a Subject Access Request
You can ask for a copy of the personal information either station holds about you. This is called a Subject Access Request.
To make a request, email [email protected] or write to the postal address in Section 2. It helps if you tell us:
your full name and contact details
which station or stations you have dealt with
any details that will help us find your information, such as the email address or phone number you used, or the competition you entered
What happens next:
We may ask you to confirm your identity before we release any information.
We will respond within one month of receiving your request, or of confirming your identity if we needed to.
If your request is complex, or you make several requests, we may extend this by up to two further months. We will tell you within the first month if that happens.
Requests are free of charge. We may charge a reasonable fee, or refuse, only if a request is clearly unfounded or excessive.
You can use the same contact details to exercise any of your other rights.
11. Keeping your information secure
We use appropriate technical and organisational measures to protect personal information, including:
limiting access to those who need it
requiring everyone with access to personal data, including volunteers and contractors, to sign a confidentiality agreement
carrying out Data Protection Impact Assessments (DPIAs) before starting new projects that involve personal information
training volunteers and staff on data protection
If a data breach occurs, it is reported promptly to our management team. Where required, we will report it to the Information Commissioner's Office within 72 hours. We will tell you without delay if a breach is likely to put your rights and freedoms at high risk.
12. Children
Our competitions are open only to people aged 18 or over. We do not knowingly collect personal information from children under 13 without the consent of a parent or guardian. If you believe we hold information about a child without appropriate consent, please contact us and we will delete it.
13. Complaints
If you have concerns about how we handle your information, please contact our Data Protection Officer first so we can try to put things right.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:
Website: ico.org.uk/make-a-complaint
Phone: 0303 123 1113
14. Changes to this policy
We review this policy regularly to keep it in line with the law and best practice. Feedback from our volunteers, listeners, clients and supporters helps shape it. The latest version will always be published on both station websites, with the date it was last updated.
Northants 1 is operated by NN Local Media & Training CIC. All Rights Reserved. Company Number 15618473. If you have questions about this policy, please contact us.
