Privacy Policy

1. Data controller

Index Casino Review, 27 Kingsway, Holborn, London, WC2B 6UN, United Kingdom, is the data controller for personal data processed here. Contact us about anything in this policy at hello@indexcasinoreview.co.uk. We handle personal data in line with the UK GDPR and the Data Protection Act 2018.

2. What we collect

• Information you give us. If you use the contact form: your name, email address, chosen subject, your message, and your confirmation that you are 18 or over.
• Technical information. Standard server logs: IP address, browser and device type, referring URL, pages requested and timestamps. These are generated automatically by any web server.
• Cookie data. A strictly necessary record of your cookie choice, plus optional analytics data only where you have accepted it. See our Cookie Policy.

We do not knowingly collect data from anyone under 18. We do not ask for and do not want financial details, payment card numbers, identity documents or any special category data. Never send those to us.

3. Why we process it, and our lawful basis

• To answer your enquiry — legitimate interests (responding to someone who contacted us).
• To keep our pages secure and available — legitimate interests (security, fraud prevention, debugging).
• Optional analytics — your consent, given through the cookie banner and withdrawable at any time.
• To meet legal obligations — legal obligation, where we must retain or disclose information.

4. Who we share it with

We do not sell personal data, and we never pass your contact details to a gambling operator. We share data only with service providers acting on our instructions — our hosting provider, our email provider and, where you have consented, our analytics provider — all bound by written processing terms. We may disclose data where required by law or to protect our rights.

5. International transfers

Our infrastructure is located in the UK and the EEA. Where any provider processes data outside the UK, we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

6. How long we keep it

• Contact form messages: 24 months from your last correspondence, then deleted.
• Server logs: 90 days.
• Cookie consent record: 12 months, after which you are asked again.

7. Your rights

Under UK GDPR you have the right to access your data; to have inaccurate data corrected; to erasure; to restrict or object to processing; to data portability; and to withdraw consent at any time without affecting processing already carried out. To exercise any of these, email hello@indexcasinoreview.co.uk. We respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put it right first.

8. Security

Traffic is served over HTTPS. Access to submitted messages is limited to editorial staff who need it. No transmission over the internet is completely secure, so please do not send sensitive information through the contact form.

9. Changes

We may update this policy. The date at the top always reflects the current version, and material changes are highlighted on the cookie banner where consent is affected.