Privacy Policy

Controller

The controller of personal data handled through internetgamblingdirectory.org is Harbourleigh Publishing Limited, Grand Ocean Plaza, Ocean Village, Gibraltar GX11 1AA. Data protection questions go to [email protected].

What is recorded

• Request data. Each request is written to the server’s access log with the IP address, time, address requested, referring page and the browser’s own description of itself.
• Two first-party cookies. mz_vid stores an arbitrary identifier for the browser; mz_src records the route of arrival — straight in, via Google or Bing, or from another website. Lifetimes are on the cookie policy.
• Redirect cookies. A click on any /go/ button brings in mozbiz_session and XSRF-TOKEN while the redirect runs.
• Your messages. If you email the desk, we hold your address and whatever the message contains.

We do not run accounts, newsletters, comment forms or push notifications, and the pages load no analytics, heat-map or advertising-network scripts.

Purposes and legal basis

Logs and the two visitor cookies let us deliver the pages, keep them secure, see which entries are read and which routes bring readers in, and reconcile commission reports from operators against our own records of outbound clicks. We rely on legitimate interests (UK GDPR Article 6(1)(f)): a register has to be served, secured and paid for. Setting cookies that are not strictly necessary is covered by the Privacy and Electronic Communications Regulations, and you can block them in the browser at any time. Emails are handled to reply to you, on the same basis.

Processors and recipients

The hosting company and Cloudflare (which caches and guards the pages) handle request data under contract with us. Operators receive from us no more than a random reference attached to the click — never your IP address or name; after the jump to an operator, that operator’s notice decides what it gathers. Police or regulators receive data only under a legal duty. Where a provider works outside the UK, the transfer uses the protections UK data law requires.

Retention

Access logs roll over and are wiped once operation and security no longer call for them. Cookie lifetimes are fixed and listed on the cookie page. Emails are erased once the question in them has been dealt with, unless a legal obligation means holding them for longer.

Requests you can make

You are entitled to see the data we keep on you, to correct or erase it, to restrict or object to its use, and to receive it in a portable format. Send the request to [email protected], naming the right; we reply within a month. Unhappy with our reply? The Information Commissioner’s Office handles complaints at ico.org.uk.

Children

The register is for adults. We do not knowingly handle data about anyone under 18, and anything we learn has come from a child is deleted.

Revisions

When the site starts using a new service or the processing changes, this notice is revised first and the Updated line above changes to match.