Legal
Privacy Policy
This Policy explains what personal data we process, for what purpose and on what legal basis, how long we keep it, and how you can exercise your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data controller
LINK & GROW, LDA. Privacy contact: privacy@portcasinoreview.com.
2. Data we collect
We collect only what is strictly necessary:
- Contact details you voluntarily provide through the contact form: name, email address, subject and message content;
- Technical data generated automatically by the server: IP address (truncated), browser type and version, operating system, referring page, date and time of the request;
- Usage data collected by analytics cookies, only if you have given consent in the cookie banner;
- Preferences stored in strictly necessary cookies, such as your cookie decision.
We do not collect special category data. We do not request payment details, identity documents or any information about your gambling activity. We have no access to accounts you open with operators.
3. Purposes and lawful bases
- Replying to your messages — basis: consent (Article 6(1)(a) UK GDPR), given when you submit the form;
- Ensuring the operation, security and integrity of the site, including abuse and attack prevention — basis: legitimate interests (Article 6(1)(f));
- Measuring audience and improving content through aggregated statistics — basis: consent (Article 6(1)(a));
- Complying with applicable legal obligations, including those relating to gambling advertising — basis: legal obligation (Article 6(1)(c)).
4. Cookies
We use strictly necessary cookies, which do not require consent under the Privacy and Electronic Communications Regulations (PECR), and analytics cookies, which are only set after you give consent through the banner shown on your first visit.
You can accept, reject or change your preferences at any time. The details of each cookie, its purpose and its retention period are set out in our Cookie Policy.
5. Sharing of data
We do not sell, rent or trade personal data to third parties for marketing purposes.
We may share data, strictly as necessary, with: our hosting provider, acting as a processor under a written contract meeting Article 28; statistics providers, only where consent has been given; and public authorities, where legally required.
When you leave this site through a link to an operator, that operator’s privacy policy applies. We do not transmit your personal data to them — the link carries only a campaign identifier, containing no data that identifies you.
6. International transfers
Personal data is processed in the UK or in countries the UK recognises as providing adequate protection for personal data. Should any other transfer become necessary, it will be made under approved contractual safeguards, such as the UK International Data Transfer Agreement or Addendum.
7. Retention periods
- Contact form messages: 24 months after the last interaction;
- Technical server logs: 12 months;
- Aggregated, anonymised statistical data: up to 26 months;
- Consent preference cookie: 6 months.
8. Your rights
Under data protection law you have the following rights:
- Access to the personal data concerning you;
- Rectification of inaccurate or incomplete data;
- Erasure (“right to be forgotten”), where applicable;
- Restriction of processing;
- Data portability;
- Objection to processing based on legitimate interests;
- Withdrawal of consent at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, write to privacy@portcasinoreview.com. We respond within one month. You also have the right to lodge a complaint with the UK data protection supervisory authority.
9. Security
We apply appropriate technical and organisational measures, including encrypted transmission (HTTPS/TLS), security headers, data minimisation, access control and rate limiting on forms.
No system is entirely impenetrable, but we review our protective measures periodically.
10. Children
This site is intended solely for adults aged 18 and over and does not knowingly collect data from anyone under 18. If you become aware that a child has provided us with personal data, please contact us and we will delete it immediately.
11. Changes to this Policy
We may update this Policy. The version in force is always the one published on this page, with its update date. Material changes will be signalled prominently on the site.