Privacy Policy

This policy explains what personal data Piccadilly Circus (piccadillycircuswa.com) collects, how and why we use it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read it alongside our Cookie Policy.

1. Who we are

Piccadilly Circus is an independent information and review website about non GamStop casinos and betting sites for UK readers. For the purposes of UK data protection law, Piccadilly Circus is the "data controller" for the personal data described in this policy. [Company registration to be confirmed.] If you have any questions about this policy or about how we handle your data, contact us at hello@piccadillycircuswa.com.

2. What personal data we collect

We keep data collection to a minimum. We collect:

• Contact-form data — if you email us or use a contact form, we collect the information you choose to provide, such as your name, email address and the content of your message.
• Analytics and technical data — when you visit the site, we may collect limited technical information through analytics tools, such as your device and browser type, approximate (city-level) location derived from your IP address, the pages you view, referring URLs and how you interact with the site. Where possible this data is aggregated or pseudonymised.

We do not operate gambling accounts, take deposits or process payments, so we never collect financial, payment or gambling-account data from you. We also do not knowingly collect data from anyone under 18.

3. Lawful basis for processing

Under UK GDPR we must have a lawful basis to process your personal data. We rely on:

• Consent (Article 6(1)(a)) — for non-essential analytics and similar cookies, which we only set after you agree. You can withdraw consent at any time.
• Legitimate interests (Article 6(1)(f)) — for responding to enquiries you send us, and for maintaining the security and basic performance of the website. We balance these interests against your rights and freedoms.
• Legal obligation (Article 6(1)(c)) — where we must retain or disclose data to comply with the law.

4. How we use your data

We use the personal data we collect to:

• reply to your messages and enquiries;
• understand how visitors use the site so we can improve our content and layout;
• maintain the security, stability and integrity of the website; and
• meet our legal and regulatory obligations.

We do not sell your personal data, and we do not use it for automated decision-making or profiling that produces legal or similarly significant effects.

5. Third parties

We share personal data only where necessary and only with trusted providers who act on our instructions. These include:

• Analytics providers — who process usage data so we can measure and improve site performance;
• Hosting and infrastructure providers — who store and serve the website; and
• Regulators, law enforcement or advisers — where we are legally required to disclose data.

Please note that when you follow an outbound link to a third-party gambling operator, you leave our site and that operator becomes responsible for your data under its own privacy policy. We are not responsible for the privacy practices of third-party websites. If any provider transfers data outside the UK, we take steps to ensure appropriate safeguards (such as an adequacy decision or the International Data Transfer Agreement) are in place.

6. Cookies

We use cookies and similar technologies for essential functionality, analytics and affiliate tracking. Full details — including how to control or disable cookies — are set out in our Cookie Policy.

7. Data retention

We keep personal data only for as long as we need it for the purposes described above. Contact-form correspondence is generally kept for up to 24 months after your enquiry is resolved, unless we need to keep it longer to meet a legal obligation. Analytics data is retained for a limited period in line with our analytics provider's settings and is then deleted or fully anonymised. When data is no longer needed, we securely delete or anonymise it.

8. Your rights under UK GDPR

You have the following rights in relation to your personal data:

• Right to be informed — to know how your data is used (this policy).
• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to have inaccurate or incomplete data corrected.
• Right to erasure — to ask us to delete your data ("right to be forgotten") where there is no overriding reason to keep it.
• Right to restrict processing — to ask us to pause how we use your data in certain circumstances.
• Right to data portability — to receive your data in a portable format.
• Right to object — to object to processing based on legitimate interests.
• Rights relating to automated decision-making — we do not carry out such decision-making, but you have the right to object if we ever did.
• Right to withdraw consent — where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, email hello@piccadillycircuswa.com. We will respond within one month, as required by law. Exercising your rights is free of charge in most cases.

9. How to complain

If you have a concern about how we handle your data, please contact us first at hello@piccadillycircuswa.com so we can try to put things right. You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113.

10. Changes to this policy

We may update this policy from time to time. The current version, with its "last updated" date, will always appear on this page. Please check back periodically.