Privacy notice

Data collected on this site

Non-GamStop Fintech is a static public-information site. The site does not require a reader to create an account, does not run a login, does not host a comments layer, does not host a mailing list, and does not host any transactional flow that would take financial information. The site does not therefore collect direct personal data from readers in the ordinary course of a page visit. Where a reader emails the editor at [email protected], the email address of the sender and the content of the message are received by the editor and held as ordinary correspondence, in the same way that a letter to any editorial office is held. The site does not sell that correspondence to any third party and does not use it for marketing.

Indirect data is gathered in the form that any web server gathers, which includes the IP address of the requesting device, the requested URL, the timestamp of the request, the HTTP referrer where present, and the user-agent string of the browser. That information is used to serve the page, to keep the site available under normal load, and to identify and mitigate abusive traffic. It is not tied to a named individual by the site and is not enriched against third-party identifiers by the site. Where an aggregate analytics layer is in use, the layer is configured to record page views without setting persistent tracking identifiers where reasonably possible and without profiling readers across sessions.

Cookies and analytics

The site uses the smallest cookie footprint compatible with serving pages reliably. Strictly necessary cookies are set where required for the site's basic operation and for security-related purposes such as detecting automated abuse. These are exempt from the consent requirement under the Privacy and Electronic Communications Regulations 2003 (as amended). Any non-essential cookies, including analytics or preference cookies, are set only after the reader has provided consent through the site's consent banner, and the reader can withdraw consent at any time through the same banner. The default state of non-essential cookies is off.

Analytics on the site are aggregate rather than individual. The site does not run advertising networks, does not run remarketing pixels, does not host third-party tracking beacons associated with the gambling sector, and does not carry affiliate tracking tags. Where a reader clicks an outbound link to a whitelist source such as gamblingcommission.gov.uk, gamstop.co.uk, gamcare.org.uk, begambleaware.org, gov.uk or legislation.gov.uk, the destination site's own privacy notice applies to the reader's activity on that site.

How long we retain data

Server logs containing the indirect data set out above are retained for the shortest period compatible with the operational and security purposes for which they are used, typically a small number of weeks, after which they are deleted or aggregated. Email correspondence with the editor is retained for as long as is needed to handle the correspondence and any resulting editorial change, and thereafter for a limited period as part of the site's records of corrections and reader responses. Where a correction has been made against the site's content on the basis of a piece of correspondence, the fact of the correction is retained even after the underlying correspondence has been deleted.

Where a reader wishes their correspondence to be deleted before the ordinary retention period ends, they may write to the editor and request deletion. The request will be actioned within a reasonable period unless there is a specific reason to retain the correspondence, such as an unresolved complaint or a legal obligation to retain records. In that case the reader will be informed of the reason and the expected date on which deletion will follow.

Your rights under UK GDPR and Data Protection Act 2018

Under the UK GDPR and the Data Protection Act 2018, data subjects have a set of rights against a data controller processing their personal data. These include the right of access to a copy of the personal data, the right to rectification of inaccurate personal data, the right to erasure of personal data where the grounds are met, the right to restrict processing, the right to data portability where it applies, the right to object to processing on certain grounds, and rights relating to automated decision-making and profiling. Non-GamStop Fintech does not run automated decision-making or profiling; the site is a static publication and does not personalise its content.

To exercise any of these rights, a reader can write to [email protected] with a description of the request. The site will respond within one month of receipt of the request, in line with the UK GDPR default timescale, and will extend that period only where the request is complex and where the extension itself is notified to the reader within the first month. The site will not charge a fee for exercising these rights except where the request is manifestly unfounded or excessive, in which case the fee reflects the administrative cost of responding.

How to reach us and the ICO

Contact for privacy matters is [email protected]. The same address handles corrections and reader responses set out on the About page. Where a reader is not satisfied with the site's handling of a data-protection matter, the reader can raise the concern with the Information Commissioner's Office, which is the UK's independent supervisory authority for data protection. The ICO can be reached at ico.org.uk, by telephone on 0303 123 1113, or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. A reader is entitled to raise a concern with the ICO at any time and is not required to have contacted the site first, though most matters are resolved more quickly through direct contact with the site.

This notice may be updated from time to time to reflect changes in the site's operation or in the surrounding legal framework. Material updates are reflected in the last-updated date in the footer. Where an update is substantive, the change is noted in a short reviewer log alongside the change itself, on the same basis that content changes elsewhere on the site are logged.

UK GDPR and Data Protection Act 2018 apply. Contact the editor, [email protected].