Last updated: 20 September 2026
The Railway Weekly (“TRW”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains what information we may collect when you visit The Railway Weekly website, subscribe to our publication, contact us, or otherwise interact with our services; why we collect it; how it is used; and the rights available to you under applicable UK data protection law.
The Railway Weekly is an independent railway publication operating in the United Kingdom and is a trading name of XGEN LTD.
For the purposes of UK data protection law, XGEN LTD is the data controller responsible for the personal information described in this Privacy Policy.
Website: therailwayweekly.co.uk
Contact: editor@therailwayweekly.co.uk
1. Information we collect
We may collect personal information that you provide directly to us, including when you:
- subscribe to The Railway Weekly;
- contact us by email or through the website;
- respond to a survey, reader questionnaire or other request for feedback;
- enquire about advertising, sponsorship or other commercial opportunities; or
- otherwise communicate with us.
This information may include your name, email address and any information you choose to provide in your communications with us.
When you use our website, certain technical information may also be collected automatically. This may include information such as your IP address, browser or device type, pages visited, referring source and information about how the website is used. The information collected will depend on the website analytics and cookie technologies in use at the time.
2. How we use your information
We may use personal information to:
- provide and deliver The Railway Weekly to subscribers;
- manage subscriptions and subscriber preferences;
- respond to enquiries and correspondence;
- operate, maintain and improve our website and publication;
- understand how readers discover and use The Railway Weekly;
- measure readership and the performance of our content;
- administer advertising, sponsorship or other business enquiries;
- maintain the security and integrity of our website and services; and
- comply with applicable legal and regulatory obligations.
We do not sell your personal information to advertisers or other third parties.
3. Our lawful basis for processing
We only use personal information where we have a lawful basis to do so. Depending on the circumstances, our lawful bases may include:
- Consent — where you have actively chosen to subscribe to The Railway Weekly or receive communications from us. You may withdraw your consent at any time.
- Contract — where processing is necessary to provide a service you have requested or to take steps at your request before entering into an agreement.
- Legitimate interests — where it is necessary for our legitimate interests in operating, securing, understanding and improving The Railway Weekly, provided those interests are not overridden by your rights and interests.
- Legal obligation — where we need to process information to comply with a legal requirement.
Where we rely on legitimate interests, we consider the purpose of the processing, whether it is necessary and the potential impact on your privacy.
4. Email subscriptions and communications
If you subscribe to The Railway Weekly, we will use the information you provide to manage your subscription and send you the publication and related communications you have requested.
We intend to use Brevo as our email service provider. Brevo may process subscriber information on our behalf for purposes such as maintaining our subscriber list and delivering emails. Further information about relevant service providers will be included in the Third-party service providers section of this policy.
Where consent is required for marketing communications, we will only send such communications where you have actively agreed to receive them. We will keep appropriate records of consent.
You can unsubscribe from email communications at any time by using the unsubscribe link included in our emails or by contacting us at editor@therailwayweekly.co.uk
We will not sell our subscriber mailing list or provide it to third parties for their own marketing purposes.
5. Cookies and website analytics
Our website may use cookies and similar technologies to operate correctly, remember preferences, maintain security and help us understand how the website is used.
Some cookies or similar technologies may be necessary for the operation and security of the website. Where required by law, we will ask for your consent before using non-essential cookies or similar technologies.
We may use website analytics to understand information such as the number of visitors to the website, how visitors arrive at the site and which pages or publications are viewed. We aim to use analytics in a privacy-conscious way and to collect only the information reasonably necessary to understand and improve The Railway Weekly.
Where analytics or other technologies require consent, they will not be activated until that consent has been provided. Where an applicable legal exemption allows statistical measurement without consent, we will ensure that its requirements are met, including providing appropriate information and a means to object where required.
You will be provided with information about the cookies and similar technologies in use and, where applicable, a way to manage your preferences.
6. Third-party service providers
We may use trusted third-party service providers to help us operate The Railway Weekly and provide our services. These providers may process personal information on our behalf only where necessary to provide their services and subject to appropriate data protection arrangements.
These services may include website hosting and infrastructure, email and newsletter delivery, website analytics, security, technical support and other services necessary to operate the publication.
Our current or intended service providers include Brevo for email subscription management and newsletter delivery, and service providers supporting the hosting and operation of our WordPress website.
We remain responsible for ensuring that personal information is handled appropriately when we use organisations that process information on our behalf.
7. How long we keep your information
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to meet legal, accounting or regulatory requirements.
If you subscribe to The Railway Weekly, we will normally retain the information needed to manage your subscription while you remain subscribed. If you unsubscribe, we may retain limited information where necessary to record your opt-out and ensure that we respect your communication preferences.
Information relating to enquiries, correspondence, advertising or other business relationships will be retained only for as long as reasonably necessary for the relevant purpose and any applicable legal requirements.
We will periodically review the personal information we hold and delete or anonymise information that is no longer required.
8. How we protect your information
We take appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.
These measures may include appropriate access controls, secure account credentials, software and security updates, secure hosting arrangements and limiting access to personal information to those who reasonably need it.
Where we use third-party service providers, we take reasonable steps to ensure that appropriate data protection and security arrangements are in place.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
9. Your data protection rights
Under UK data protection law, you may have a number of rights in relation to your personal information. Depending on the circumstances, these may include:
- The right to be informed — to receive clear information about how we collect and use your personal information.
- The right of access — to request a copy of the personal information we hold about you.
- The right to rectification — to ask us to correct inaccurate or incomplete personal information.
- The right to erasure — to ask us to delete your personal information in certain circumstances.
- The right to restrict processing — to ask us to limit the way we use your personal information in certain circumstances.
- The right to data portability — in certain circumstances, to receive personal information you have provided to us in a structured, commonly used and machine-readable format.
- The right to object — to object to certain uses of your personal information.
- Rights relating to automated decision-making — where applicable, rights relating to decisions made solely by automated means that have legal or similarly significant effects.
You have an absolute right to object to the use of your personal information for direct marketing. If you unsubscribe from The Railway Weekly’s marketing communications, we will stop using your information for that purpose. We may retain limited information on a suppression list where necessary to ensure that your preference continues to be respected.
To exercise any of your data protection rights, please contact us at editor@therailwayweekly.co.uk.
We will respond to valid requests in accordance with applicable data protection law. We may need to ask for information necessary to confirm your identity before acting on a request.
10. International transfers
Some of the service providers we use may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.
11. Children’s privacy
The Railway Weekly is intended for a general audience and is not specifically directed at children. We do not knowingly seek to collect personal information from children through our subscription services.
If we become aware that personal information relating to a child has been collected in circumstances where it should not have been, we will take appropriate steps to address the matter.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, the technologies we use, our business practices or applicable legal requirements.
When we make changes, we will update the “Last updated” date at the top of this page. Where appropriate, we may also bring significant changes to the attention of our subscribers or website users.
13. How to contact us
If you have any questions about this Privacy Policy, how we use your personal information, or if you wish to exercise your data protection rights, please contact:
The Railway Weekly
Email: editor@therailwayweekly.co.uk
Website: therailwayweekly.co.uk
You can also use this email address to make a complaint about how we have handled your personal information. We will consider data protection complaints promptly, take appropriate steps to investigate them and respond in accordance with applicable data protection law.
The Railway Weekly is a trading name of XGEN LTD.
XGEN LTD is registered in England and Wales.
Company number: 16366154
Registered office:Studio I1c Witan Studios, Witan Gate, Milton Keynes, Buckinghamshire, United Kingdom, MK9 1EF
14. Complaints
If you have concerns about how we have handled your personal information, we encourage you to contact us first so that we have an opportunity to investigate and address your concerns.
If you remain dissatisfied, you have the right to raise your concern with the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection.
Information Commissioner’s Office (ICO)
Website: ico.org.uk