Privacy Policy

Last updated: 12 April 2026

1. Who we are

OTA Media Ltd (“OTA Media”, “we”, “us”) is the data controller for personal data processed through The Fifty at fifty.otamediagroup.com and the wider OTA Media platform.

Registered office: Unit 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE
Contact: info@otamediagroup.com
ICO registration: Registered with the UK Information Commissioner's Office

2. What data we collect

Rankings data: The Fifty publishes the names, professional titles, organisations, and sector classifications of individuals featured in the rankings. This information is drawn from publicly available sources and our proprietary research methodology.

Assessment data: if you are a nominated participant and complete the OTA Media Leadership Index assessment, your responses, scores, and archetype are processed in accordance with the Leadership Index Privacy Policy. Individual assessment responses are never published.

Technical data: standard server logs including IP address, browser type, and pages viewed. These are retained for security purposes.

3. How we use your data

To publish the rankings: names, titles, and organisations of ranked individuals are displayed publicly on The Fifty. The lawful basis is legitimate interest — The Fifty serves a journalistic and public-interest purpose in identifying leadership across the UK economy.

To improve the platform: anonymised analytics help us understand how visitors use the site. We do not track individuals or use advertising cookies.

4. How we protect your data

The Fifty is hosted on Vercel with 256-bit TLS encryption. Our database infrastructure is provided by Supabase. Both providers hold SOC 2 Type II certification. All database tables enforce row-level security policies to isolate user data.

5. Your rights

Under UK GDPR, you have the right to access, rectify, or request erasure of your personal data. If you are featured in The Fifty and wish to discuss how your data is used, or if you wish to exercise any of your data protection rights, contact us at info@otamediagroup.com.

We aim to respond to all requests within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.

6. Changes to this policy

We may update this privacy policy from time to time. The “last updated” date at the top indicates when it was most recently revised.

For the full privacy policy covering the Leadership Index assessment platform, visit index.otamediagroup.com/privacy.

Enterprise-Grade Security

256-bit TLS encryptionSOC 2 Type II certified infrastructureGDPR compliant · ICO registeredRow-level data isolationIndependent security audits