Privacy policy

1. Who is responsible

The controller of any personal data collected here is TO BE COMPLETED: registered company name, company number TO BE COMPLETED: company registration number, registered at TO BE COMPLETED: registered address. Data protection enquiries: TO BE COMPLETED: data-protection e-mail.

2. What we collect

Data	When	Why
Server log entries — IP address, time, page requested, browser and device string, referring page	Every request, automatically	Serving the page, security, abuse and fraud prevention, diagnosing faults
Essential cookies — a session identifier and a CSRF token	On first visit	Making forms work and protecting them from cross-site request forgery. See the cookie policy
Search terms typed into the licence check tool	Only when you use that tool	Answering the query. The term travels in the page address and appears in server logs; it is not tied to a profile
Outbound click records — which operator link, when, coarse country, device type	When you follow a link to an operator	Attribution of commission, and knowing which pages are useful
Anything you write to us	When you e-mail	Answering you, and keeping a record of corrections

We do not collect names, addresses, dates of birth or payment details, because nothing here needs them. We do not operate a login, sell data, or run advertising or profiling. We never receive your gambling account, balance or play history from an operator — only whether a sign-up happened.

3. Lawful basis

• Legitimate interests — keeping the site available and secure, preventing abuse, and attributing commission that pays for the site. Balanced against your interests: the data is minimal, not used to profile you and not sold.
• Consent — for any non-essential cookie or analytics tool. None is set until you agree, and consent can be withdrawn at any time.
• Legal obligation — where we must keep records, for example accounting records of commission.

4. Who else sees it

• Our hosting and infrastructure providers, who process server logs on our behalf under contract.
• Affiliate networks and operators, which receive the click reference needed to attribute a sign-up.
• Authorities, where the law requires it.

The named processor list is TO BE COMPLETED: hosting and affiliate networks not yet contracted. Where a processor is outside the UK or EEA, transfers rely on adequacy regulations or the UK International Data Transfer Addendum to the EU standard contractual clauses.

5. How long we keep it

• Server logs — up to 90 days, then deleted.
• Click attribution records — up to 24 months, the outer limit of a revenue-share reconciliation.
• E-mail correspondence — up to 24 months from the last message, longer where it documents a published correction.
• Accounting records — as long as tax law requires.

6. Your rights

Under UK and EU data protection law you can ask us for a copy of your data, ask for it to be corrected or erased, ask us to restrict or stop processing it, object to processing based on legitimate interests, and ask for portability where it applies. Write to TO BE COMPLETED: data-protection e-mail; we answer within one month. To find records at all we usually need the IP address and approximate time of the visit, since nothing here is attached to a name.

Your browser's "Do Not Track" and Global Privacy Control signals are honoured: no non-essential cookie is set when either is on.

7. Complaints

If we have not resolved something, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority in your own country. We would rather hear from you first, at TO BE COMPLETED: data-protection e-mail.