Last Updated: August 12, 2025 Effective Date: August 12, 2025
IMPORTANT NOTICE
The Oklahoma Post (“The OK Post,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (theokpost.com), mobile applications, newsletters, and related services (collectively, the “Services”).
By using our Services, you acknowledge that you have read, understood, and agree to this Privacy Policy and our Terms of Service.
1. INFORMATION WE COLLECT
1.1 Information You Provide Directly
Account Registration:
- Name and email address for newsletter subscriptions
- Username and password for registered accounts
- Billing information for premium subscriptions
- Profile information you choose to provide
User-Generated Content:
- Comments and responses to articles
- Letters to the editor and submissions
- Survey responses and feedback
- Tips and story suggestions (with enhanced protection for journalistic sources)
Communications:
- Email correspondence with our staff
- Phone calls to our newsroom (may be recorded for quality purposes)
- Social media interactions with our accounts
Newsletter and Subscription Management:
- Email preferences and subscription settings
- Payment information for premium services
- Delivery preferences and format choices
1.2 Information We Collect Automatically
Usage and Analytics Data:
- Pages visited and articles read
- Time spent on our site and reading patterns
- Device information (type, operating system, browser)
- IP address and general location (city/state level)
- Referral sources (how you found our site)
Technical Information:
- Browser type and version
- Screen resolution and device characteristics
- Enabled plugins and software versions
- Network connection information
Cookies and Similar Technologies:
- Essential cookies for site functionality
- Analytics cookies to understand user behavior
- Preference cookies to remember your settings
- Marketing cookies (with your consent) for personalized content
1.3 Information from Third Parties
Social Media Platforms:
- Public profile information when you interact with our social accounts
- Information when you share our content on social platforms
Google Services Integration:
- Google Account information if you subscribe through Google Reader Revenue Manager
- Google Analytics data (anonymized and aggregated)
- Google Ad Manager information for advertising
News and Public Records:
- Publicly available information for news reporting
- Government records and court documents
- Press releases and official statements
2. HOW WE USE YOUR INFORMATION
2.1 Core News Operations
Content Delivery and Personalization:
- Delivering articles and newsletters to subscribers
- Personalizing content recommendations based on reading history
- Providing premium content to paying subscribers
- Managing user accounts and preferences
Editorial and Journalism Functions:
- Processing news tips and story suggestions
- Conducting interviews and fact-checking
- Maintaining source confidentiality when promised
- Publishing user-submitted content (with attribution as appropriate)
Community Engagement:
- Moderating comments and discussions
- Responding to reader feedback and inquiries
- Conducting surveys and polls
- Managing community events and subscriber meetups
2.2 Business Operations
Subscription and Payment Processing:
- Processing subscription payments and renewals
- Managing billing and customer service inquiries
- Preventing fraud and unauthorized access
- Providing receipts and tax documentation
Marketing and Communications:
- Sending newsletters and content alerts
- Promoting special offers and events
- Conducting reader satisfaction surveys
- Improving our content and services
Legal and Compliance:
- Complying with legal obligations and court orders
- Protecting our rights and investigating violations
- Responding to government requests (with notice when legally permitted)
- Maintaining records for accounting and tax purposes
2.3 Analytics and Improvement
Service Enhancement:
- Analyzing usage patterns to improve our website
- Testing new features and content formats
- Optimizing page load times and user experience
- Understanding audience demographics (in aggregate)
Journalism Quality:
- Measuring article engagement and reader interest
- Understanding which topics resonate with our audience
- Improving our editorial decision-making
- Tracking newsletter open rates and click-through rates
3. INFORMATION SHARING AND DISCLOSURE
3.1 When We Share Information
Service Providers and Vendors:
- Payment processors (for subscription billing)
- Email service providers (for newsletters)
- Analytics providers (Google Analytics, etc.)
- Technical service providers (hosting, security, etc.)
- Legal and accounting professionals
Google Reader Revenue Manager:
- Subscription information for users who subscribe through Google
- Reading preferences to display content in Google’s “From Your Subscriptions” panel
- Analytics data to measure subscription performance
- Payment processing information (handled by Google)
Legal Requirements:
- Court orders and legal process
- Law enforcement requests (with notice when legally permitted)
- Government investigations related to national security
- Compliance with tax and financial reporting obligations
Business Transfers:
- Mergers, acquisitions, or sales of business assets
- Bankruptcy or insolvency proceedings
- Corporate restructuring or reorganization
3.2 When We Do NOT Share Information
Never Sold for Marketing:
- We do not sell your personal information to advertisers
- We do not rent email lists to third parties
- We do not share individual user profiles for marketing purposes
Journalistic Source Protection:
- Confidential source information is never disclosed without explicit consent
- Whistleblower and tip information receives enhanced protection
- Attorney-client and journalist-source privileges are respected
Aggregate Data Only:
- Demographic information is only shared in anonymized, aggregate form
- Individual reading patterns are not shared with advertisers
- User behavior data is anonymized before any external sharing
4. COOKIES AND TRACKING TECHNOLOGIES
4.1 Types of Cookies We Use
Essential Cookies (Always Active):
- Authentication and login status
- Shopping cart and subscription management
- Security and fraud prevention
- Basic site functionality
Analytics Cookies (Consent Required):
- Google Analytics (anonymized IP addresses)
- Page view and engagement tracking
- Performance monitoring and optimization
- A/B testing for site improvements
Preference Cookies (Consent Required):
- Language and region settings
- Newsletter subscription preferences
- Article bookmarking and reading lists
- Comment notification settings
Marketing Cookies (Explicit Consent Required):
- Personalized content recommendations
- Social media integration
- Targeted advertising (if implemented)
- Cross-device tracking for subscription access
4.2 Cookie Management
Your Choices:
- Accept or decline non-essential cookies through our consent banner
- Modify your preferences through our Cookie Settings page
- Clear cookies through your browser settings
- Opt out of Google Analytics tracking
Browser Controls:
- Most browsers allow you to refuse cookies
- You can delete existing cookies through browser settings
- Some features may not work properly without essential cookies
- Private/incognito browsing limits cookie storage
Third-Party Opt-Outs:
- Google Analytics Opt-out: [Google’s opt-out tool]
- Facebook Pixel Opt-out: [Facebook’s opt-out tool]
- General advertising opt-out: [NAI Opt-Out Tool]
5. DATA SECURITY AND PROTECTION
5.1 Security Measures
Technical Safeguards:
- SSL/TLS encryption for all data transmission
- Secure hosting infrastructure with regular security updates
- Multi-factor authentication for staff accounts
- Regular security audits and vulnerability assessments
Administrative Safeguards:
- Staff training on privacy and security protocols
- Limited access to personal information on a need-to-know basis
- Regular review and updating of security procedures
- Incident response plan for potential data breaches
Physical Safeguards:
- Secure office access and equipment storage
- Locked filing cabinets for physical documents
- Secure disposal of documents containing personal information
- Protection of mobile devices and remote work equipment
5.2 Data Breach Notification
Our Commitment:
- Immediate investigation of suspected breaches
- Notification to affected users within 72 hours when required by law
- Cooperation with law enforcement and regulatory authorities
- Implementation of additional safeguards following any incident
Your Rights:
- Right to notification of breaches affecting your information
- Right to information about the nature and scope of any breach
- Right to free credit monitoring services if financial information is compromised
6. YOUR PRIVACY RIGHTS
6.1 General Rights (All Users)
Access and Portability:
- Request a copy of your personal information
- Download your data in machine-readable format
- Understand what information we have about you
Correction and Updates:
- Correct inaccurate personal information
- Update your account and preference settings
- Modify your newsletter subscriptions
Deletion Rights:
- Request deletion of your personal information (subject to legal exceptions)
- Close your account and remove profile information
- Unsubscribe from all communications
6.2 California Residents (CCPA/CPRA Rights)
Enhanced Rights under California Law:
- Right to Know: Detailed information about data collection and use
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: Refuse the sale or sharing of personal information
- Right to Non-Discrimination: Equal service regardless of privacy choices
- Right to Correct: Fix inaccurate personal information
- Right to Limit: Restrict use of sensitive personal information
How to Exercise Your Rights:
- Email: privacy@theokpost.com
- Phone: Private
- Mail: Private Address
- We will respond within 45 days (may extend to 90 days for complex requests)
6.3 European Residents (GDPR Rights)
Rights under EU/UK Law:
- Right of Access: Obtain copies of your data
- Right to Rectification: Correct inaccurate data
- Right to Erasure: Request deletion of your data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Transfer your data to another service
- Right to Object: Refuse certain uses of your data
- Right to Withdraw Consent: Revoke consent for processing
Legal Basis for Processing:
- Consent for marketing communications and non-essential cookies
- Legitimate interest for journalism, analytics, and business operations
- Contractual necessity for subscription and payment processing
- Legal obligation for compliance with laws and regulations
7. CHILDREN’S PRIVACY (COPPA COMPLIANCE)
7.1 Age Restrictions
Under 13 Years Old:
- We do not knowingly collect personal information from children under 18
- If we discover we have collected such information, we will delete it promptly
- Parents may contact us to review, modify, or delete their child’s information
13-17 Years Old:
- Parental consent required for account creation
- Limited data collection focused on educational content
- Enhanced privacy protections and restricted sharing
- Parents retain control over their child’s account settings
7.2 Parental Rights
Control and Oversight:
- Review all information collected from your child
- Refuse to permit further collection of your child’s information
- Request deletion of your child’s personal information
- Receive notification before any material changes to our privacy practices
How to Contact Us:
- Email: privacy@theokpost.com with subject line “COPPA Request”
- Include your child’s name, your relationship, and specific request
- We may require verification of parental identity
8. INTERNATIONAL DATA TRANSFERS
8.1 Cross-Border Transfers
Data Location:
- Primary data storage in the United States
- Some service providers may store data in other countries
- EU data may be transferred to the US under appropriate safeguards
Safeguards for International Transfers:
- Standard Contractual Clauses for EU data transfers
- Privacy Shield successor frameworks when available
- Country-specific adequacy decisions where applicable
8.2 Jurisdiction-Specific Considerations
European Economic Area:
- GDPR compliance for all EU/UK visitors
- Local representative appointed where required
- Right to lodge complaints with data protection authorities
Other Jurisdictions:
- Compliance with local privacy laws where we operate
- Cooperation with local regulatory authorities
- Adherence to cross-border data transfer restrictions
9. RETENTION AND DELETION
9.1 How Long We Keep Your Information
Account Information:
- Active accounts: Retained while account is active plus 7 years
- Closed accounts: Deleted within 30 days unless legal retention required
- Newsletter subscriptions: Retained until you unsubscribe
Content and Communications:
- Published comments: Retained indefinitely for historical record
- Private communications: Deleted after 2 years unless ongoing matter
- News tips: Confidential tips deleted immediately after verification or investigation
Technical Data:
- Analytics data: Anonymized after 26 months
- Server logs: Deleted after 12 months
- Security logs: Retained for 7 years for legal protection
9.2 Deletion Process
Automated Deletion:
- Routine deletion based on retention schedules
- Anonymization of data when deletion is not possible
- Secure erasure using industry-standard methods
Manual Deletion Requests:
- Response within 30 days for most requests
- Verification of identity before processing deletion
- Notification of completion or any limitations
10. THIRD-PARTY SERVICES
10.1 Service Integrations
Google Services:
- Google Analytics (privacy-enhanced mode)
- Google Reader Revenue Manager
- Google Ad Manager (if applicable)
- Google Search Console
Social Media Platforms:
- Facebook, Twitter, LinkedIn sharing buttons
- Social media login options
- Embedded social media content
Payment Processors:
- Stripe or similar payment processing
- PayPal integration
- Apple Pay and Google Pay
10.2 Third-Party Privacy Policies
Your Responsibility:
- Review privacy policies of third-party services you use
- Understand how social media platforms handle shared content
- Manage your privacy settings on external platforms
Our Commitment:
- Select vendors with strong privacy practices
- Include privacy requirements in vendor contracts
- Monitor third-party compliance with our standards
11. UPDATES TO THIS PRIVACY POLICY
11.1 Policy Changes
Material Changes:
- Email notification to subscribers at least 30 days before effective date
- Prominent notice on our website
- Opportunity to review changes and modify your preferences
Minor Updates:
- Updated “Last Modified” date
- Notice on our website for 30 days
- Continued use of Services constitutes acceptance
11.2 Your Options
If You Disagree with Changes:
- Delete your account before changes take effect
- Opt out of new uses of your information
- Contact us to discuss specific concerns
12. CONTACT INFORMATION
12.1 Privacy Questions and Requests
Primary Contact:
- Name: Robbie Robertson, Privacy Officer
- Email: privacy@theokpost.com
- Phone: Private
- Mail: The Oklahoma Post – Privacy Officer Private Address
Response Times:
- General inquiries: 5 business days
- Privacy rights requests: 30 days (may extend to 60 days for complex requests)
- Urgent security matters: 24 hours
12.2 Data Protection Officer
For EU/UK Residents:
- Name: Robbie Robertson, Data Protection Officer
- Email: privacy@theokpost.com
12.3 Regulatory Complaints
California Residents:
- California Privacy Protection Agency
EU/UK Residents:
- Your local data protection authority
13. JOURNALISM-SPECIFIC PRIVACY PROTECTIONS
13.1 Source Protection
Confidential Sources:
- Strict protocols for handling confidential source information
- Enhanced security measures for sensitive communications
- Legal protections under journalist shield laws
- Secure communication channels available upon request
Whistleblower Protection:
- Anonymous tip submission systems
- Encrypted communication options
- No tracking or logging of anonymous submissions
- Legal support for protecting source identity
13.2 Editorial Independence
Newsroom Privacy:
- Editorial decisions remain independent from business operations
- Reader data does not influence news coverage decisions
- Separation between advertising and editorial functions
- Transparent disclosure of any potential conflicts of interest
EFFECTIVE DATE
This Privacy Policy is effective as of August 12, 2025 and was last updated on August 12, 2025.
By using our Services, you acknowledge that you have read, understood, and agree to this Privacy Policy.
The Oklahoma Post is committed to transparency in journalism and privacy protection. If you have questions about this Privacy Policy or our privacy practices, please contact us at privacy@theokpost.com.
