This notice explains what personal data Capital Times collects when you read the site, create an account, sign up for a newsletter or contact us, and what we do with it. We collect only what we need to run Capital Times, and we keep it no longer than we need it.

Who we are

Capital Times is published by [legal company name], [registered address]. [legal company name] is the controller of your personal data, which means it decides how and why your data is used and is responsible for protecting it.

For any question about this notice or your data, email privacy@capitaltimes.asia.

What we collect

• Account data. If you create a free reader account, we store your name, your email address, a securely hashed version of your password, your newsletter choices and the articles you save. We never store your password itself. Reader accounts are free, so we do not collect payment details from readers.
• Newsletter data. If you sign up for a newsletter, we store your email address, the newsletters you chose and a record of your sign-up and your confirmation, which is our proof of your consent.
• Messages you send us. When you use our contact, tip, correction or advertising forms, or email us, we receive your message, your contact details and anything else you choose to include.
• Technical logs. Like most websites, our servers record technical information when you visit, such as your IP address, browser type, the pages you request and the time of each request.
• Cookies and local storage. We use a session cookie for signed-in readers, a cookie that remembers your cookie choices, and local storage for your light or dark theme and text size. Analytics and advertising cookies are used only as described in our Cookie Policy.

Why we use it, and our legal bases

Some privacy laws require us to have a "legal basis" for each use of your data. In plain words, these are ours:

• To run your account and save your articles, because you asked us to provide that service and we need the data to do it.
• To send newsletters, because you consented. You confirm your sign-up by clicking a link in a confirmation email, and every newsletter has an unsubscribe link.
• To answer your messages and follow up on tips, correction requests and advertising inquiries, because you asked us to, and because responding to readers is a legitimate part of running a newsroom.
• To keep the site secure and working, prevent abuse and fix problems, because we have a legitimate interest in protecting the site and its readers.
• To measure how the site is used with Google Analytics, only if you consent.
• To show personalized ads through Google AdSense, only if you consent. If you do not consent, non-personalized ads may be shown where the law permits, because advertising funds our journalism.
• To meet legal obligations, when the law requires us to keep or disclose data.

We do not sell or rent your account or newsletter data.

How long we keep it

• Account data: until you delete your account.
• Messages sent through our forms: up to two years, then deleted.
• Newsletter records: until you unsubscribe. After that, we keep the record of your original consent so we can show that it was given.
• Technical logs: for a limited period for security and troubleshooting, then deleted.

Who we share it with

We share personal data only with service providers that help us run Capital Times, and only for that purpose:

• Our hosting provider, which stores the site and its data.
• Our email delivery provider, which sends confirmation emails and newsletters.
• Google, for analytics and personalized advertising, only if you consent. When ads appear on a page, Google receives technical information, such as your IP address and the page you are viewing, in order to serve them. How Google uses this information is explained in Google's own policy.

We may also disclose data when the law requires it.

International transfers

Our service providers, including Google, may process data in countries other than your own, including the United States. When personal data is transferred across borders, we take the steps the applicable law requires to protect it, such as contractual safeguards with our providers.

Security

Passwords are stored only as secure hashes. Connections to the site are encrypted. Access to personal data is limited to the people and providers who need it to do their work. No system is perfectly secure, but we take care to protect the data we hold.

Your rights

You can ask us to:

• Access the personal data we hold about you and give you a copy.
• Correct data that is wrong or incomplete.
• Delete your data. You can delete your account yourself at any time from the account page when you are signed in.
• Withdraw consent at any time. Use the unsubscribe link in any newsletter, or change your choices in Cookie Settings.
• Object to our use of your data, including use based on our legitimate interests.

Readers in the European Union and the U.K. (under the GDPR and its U.K. version), Hong Kong (under the Personal Data (Privacy) Ordinance), Singapore (under the Personal Data Protection Act) and Indonesia (under the Personal Data Protection Law) have legal rights to access and correct their personal data, and in some cases further rights.

To make a request, email privacy@capitaltimes.asia. We may need to confirm your identity before we act. We will respond within the time the law that applies to you requires. You may also have the right to complain to the data protection authority where you live.

Children

Capital Times is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

Contact us

Email privacy@capitaltimes.asia or write to [legal company name], [registered address].

Changes to this notice

We will update this notice when our practices change. If we make significant changes, we will make them clear on the site and, where appropriate, tell account holders by email. This notice was last updated on Oct. 27, 2026.