1. Introduction

This privacy policy explains how we collect and use personal data about you when you interact with our websites, subscribe to our content and use our job service.

This website is not intended for children and we do not knowingly collect data relating to children.

It is important that you read this privacy policy together with any other privacy information we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data.


2. Who are we?

This website is provided by Rokman Media. Rokman Media is a trading name of Rokman Group Limited. Rokman Group Limited is a limited company registered in England Wales under company registration number 09097843 and with registered address 71-75 Shelton Street, London, WC2H 9JQ.

For the purpose of the Data Protection Act 1998 (the “Act”), EU General Data Protection Regulation (“GDPR”), PCI-DSS, and European data protection legislation, the data controller is Rokman Group Limited. We control the ways your personal data are collected and the purposes for which your personal data are used by us.

Our Privacy Notice applies to the personal data that Rokman Group collects and uses.

When you interact with our websites, sign up for our newsletters, buy our subscriptions and use our job service we are the “data controller”. This means that we are responsible for deciding how we hold and use personal data about you. We are required under the General Data Protection Regulation 2016 (the “GDPR”) to notify you of the information contained in this privacy policy.

You can contact us at: hello@xpats.io


Third party links

Our websites may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.


3. What kinds of personal data about you do we process?

We may collect, store, and use the following categories of personal data about you:

Categories of Data Include:


4. When do we collect your personal data?


5. How and why do we use your personal data?

We aim to provide you with the best news and content in the industry, keeping you up-to-date with the latest news, advice and trends in your sector. To do this we sometimes need to use your personal data in a number of ways depending on your interactions with us and any services you have requested. We will not process your personal data unless we have a legal basis to do so under data protection law. The tables below set this out in detail, showing what we do with your personal data, why we do it, and the legal basis on which we rely.

To provide you with our content or services, such as


Where it is in our legitimate business interests to do so, such as:


With your consent or explicit consent, such as:


To comply with our legal obligations, such as:


6. Do we process any sensitive personal data about you?

We will never ask you to provide sensitive personal data (known as special category personal data in the GDPR) about yourself such as details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. Nor do we collect any information about criminal convictions and offences.


7. Sharing your data

Trusted third parties

We sometimes share your personal data with trusted third parties such as third-party service providers. We have data processor contracts in place with such third parties which require them to respect the security of your data and to treat it in accordance with data protection legislation.

Examples of the kind of third parties we work with are:


Our industry partners

On some occasions we may provide your contact details to other companies in our industry for their own purposes, for example so they may contact you about services and events you may be interested in. However, we will only ever provide your details in these circumstances where we have your informed consent.

Subject to appropriate controls or anonymisation, we may also provide limited data to our advertisers to provide them with insight of our readers.


Our business

We may, from time to time, expand, reduce or sell our publications and this may involve the transfer of divisions or the whole business to new owners. If this happens, your personal data will, where relevant, be transferred to the new owner or controlling party, subject to data protection law.


8. Transferring your personal data outside the EEA

We are based in the UK but on occasion may transfer your personal data outside the European Economic Area (“EEA”). For example, where you are based outside the UK and place an order with us, we may need to provide your contact details to a courier outside the EEA.


9. What if you don’t want to share your personal data with us?

If you fail to provide certain information when requested, we may not be able to provide you with our content, products or job services.


10. What should you do if your personal data changes?

You should tell us, so we can update our records. The contact details for this purpose are in this privacy policy.


11. How do we keep your data secure?

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.


12. How long do we retain your personal data for?

We retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of providing you with our content, subscriptions and other services and products.

In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you. For example, we may collect demographic information from our readers, anonymise it and provide it to our advertisers.


13. Your rights

Your rights in connection with your personal data

Under certain circumstances, by law you have the right to:


No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.


What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.


14. Your right to withdraw consent

In circumstances where we rely on your consent to process personal data about you, you have the right to withdraw your consent for that specific processing at any time.

To withdraw your consent, please contact us at hello@xpats.io 

Where you have requested that we provide your personal data to one of our industry partners (for example to enable an industry partner who provided you with a free white paper on HR compliance to market directly to you) or a recruiter or employer, you will need to contact that third party directly to withdraw your consent to that third party processing your personal data.


15. Your right to opt out of direct marketing

There are several ways you can stop direct marketing communications from us:


Please note that you may continue to receive communications for a short period after changing your preferences while we update our systems.


16. Data Protection queries

If you have any questions about this privacy policy or how we handle your personal data, please contact us at hello@xpats.io or write to us at Rokman Group Limited, 71-75 Shelton Street, London, WC2H 9JQ, UK.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.


17. Changes to this Privacy Policy

We reserve the right to update this privacy policy at any time. We may also notify you in other ways from time to time about the processing of your personal data.

If you have any questions about this Privacy Policy, please contact us: hello@xpats.io.