Privacy Policy

1. Who is responsible for your data

The data controller is EdgePeak Media Ltd, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

For anything relating to this policy or to your personal data, contact privacy@edgepeak.co.uk. We handle data protection enquiries internally rather than through an outsourced service.

2. What we collect

When you simply read this website

Nothing that identifies you personally is required, and no account is needed. Our hosting infrastructure keeps standard server logs, which typically record your IP address, the date and time of the request, the page requested, the HTTP status returned, and your browser's user agent string. These logs exist for security, abuse prevention and diagnosing faults.

When you use the contact form

We ask for:

• Your name — so we can address a reply properly;
• Your email address — so we can send that reply;
• A topic (optional) — so the message reaches the right person;
• Your message — whatever you choose to tell us.

Please do not send us sensitive personal data — health information, financial details, account passwords, copies of identity documents or payment card numbers. We do not need any of it, and we cannot act on it. If you send it anyway, we will delete it.

Your cookie choice

Your accept or reject decision is stored locally in your own browser. It never reaches our servers. See the Cookie Policy for the detail.

What we never collect

• Payment or card details — we take no payments from readers, ever.
• Gambling account credentials, balances or transaction history.
• Behavioural advertising profiles, or data purchased from brokers.
• Special category data as defined by the UK GDPR.

3. Why we process it, and on what legal basis

Purpose	Data	Lawful basis
Replying to your enquiry	Name, email, topic, message	Legitimate interests — responding to someone who has deliberately contacted us
Keeping the website secure and available	Server logs including IP address	Legitimate interests — preventing abuse and diagnosing faults
Recording your cookie decision	Consent flag, held on your device	Legal obligation under PECR
Investigating a correction or reader report	Whatever you send us	Legitimate interests — accuracy of published editorial

Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights and freedoms, and concluded that it is not — the processing is minimal, expected in the circumstances, and carries no meaningful risk to you. You may object at any time (see section 7).

4. Who we share it with

We do not sell, rent or trade personal data. We share it only with:

• Our hosting provider, which processes server logs on our behalf under a written data processing agreement;
• Our email provider, which carries correspondence you send and we send;
• Professional advisers or authorities, where we are legally required to disclose, or where necessary to establish or defend a legal claim.

We do not pass your details to gambling operators. If you follow an outbound link and open an account with an operator, you form a direct relationship with them and they become an independent controller of your data under their own privacy policy — not ours. What we receive back is aggregate commercial reporting, not your identity. This is explained on the Disclosure page.

5. How long we keep it

• Contact form correspondence — up to 24 months from our last exchange with you, then deleted. Where a message relates to a published correction, we may keep a redacted note of the factual point indefinitely as part of our editorial record.
• Server logs — a rolling period of no more than 90 days, unless retained longer for an active security investigation.
• Cookie consent flag — held on your device until you clear it. We hold no copy.

6. How we protect it

This website is served over HTTPS with a strict Content Security Policy and standard hardening headers, and it loads no third-party scripts. Access to correspondence is limited to the small number of people who need it, over authenticated accounts with multi-factor authentication.

No transmission over the internet can be guaranteed completely secure, and we would rather say so than imply otherwise. If a breach occurs that is likely to risk your rights and freedoms, we will report it to the Information Commissioner's Office within 72 hours and tell you directly where required.

7. Your rights

Under the UK GDPR you have the right to:

• Be informed — which is what this page is for;
• Access a copy of the personal data we hold about you;
• Rectification of anything inaccurate or incomplete;
• Erasure of your data in the circumstances the law provides for;
• Restrict processing while a dispute about accuracy or legitimate interests is resolved;
• Data portability, where processing is by consent or contract and carried out by automated means;
• Object to processing carried out on the basis of legitimate interests;
• Withdraw consent at any time, where consent is the basis we rely on;
• Not be subject to automated decision-making — we carry out none.

To exercise any of these, email privacy@edgepeak.co.uk. We respond within one month. There is no charge, unless a request is manifestly unfounded or excessive. We may ask you to confirm your identity — but only enough to be sure we are not disclosing your data to someone else.

8. Children

This website is strictly for adults aged 18 or over and is not directed at children in any respect. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact privacy@edgepeak.co.uk and we will delete it immediately.

Parents and guardians can find device-level filtering guidance on our Responsible Gaming page.

9. International transfers

We aim to keep personal data within the United Kingdom or the European Economic Area. Where a service provider processes data outside that area, we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum, together with appropriate supplementary safeguards.

10. Complaints

If you are unhappy with how we have handled your data, please tell us first at privacy@edgepeak.co.uk — most issues are resolved quickly and directly.

You also have the right to complain to the UK supervisory authority at any time: the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — helpline 0303 123 1113.

Changes to this policy

We review this policy at least annually and whenever our processing changes. The "last updated" date above shows the current version. Where a change materially affects you, we will make it prominent rather than quietly amending the page.