Privacy Policy
A plain-English explanation of how UK Sister Sites handles contact details, technical logs, cookies, analytics choices and data-rights requests.
1. Who We Are
The controller responsible for this website is [full legal entity name], of [registered address]. The privacy contact is privacy@example.co.uk. Replace these placeholders before launch.
This policy applies to UK Sister Sites. It does not apply to casino operators or other external websites reached through our links; those organisations control their own data processing.
2. Information We May Collect
- Contact and correspondence data: your name, email address and the content of a message when you contact us.
- Technical and security data: IP address, browser type, device information, requested pages, timestamps, error logs and security events generated by hosting or firewall services.
- Usage data: page views, navigation patterns and interaction data if privacy-respecting analytics are enabled with the required controls.
- Preference and consent data: cookie choices, consent status and the date or method by which a preference was recorded.
- Outbound-link data: the page and link selected, a timestamp and a non-identifying campaign or click reference where this is configured.
We do not offer gambling accounts and should not ask for casino passwords, payment card details, identity documents or medical information. Please do not send sensitive information through the editorial contact route.
3. How We Receive Information
We receive information directly when you contact us or choose a preference, and automatically when the website, hosting provider or security service processes a request. We may also receive limited, aggregated reporting from service providers. The final WordPress build must list every live source accurately.
4. Purposes, Lawful Bases and Retention
| Purpose | Typical information | Lawful basis | Proposed retention |
|---|---|---|---|
| Answer questions and correction requests | Contact details and message | Legitimate interests in responding and maintaining accurate content | Up to 24 months after the matter closes, unless needed longer for a legal claim |
| Operate and secure the website | Technical logs, IP address, security events | Legitimate interests in availability, fraud prevention and security | Normally 30 to 180 days, subject to the final hosting and security setup |
| Remember required choices | Preference or consent record | Legal obligation and legitimate interests | Until the choice expires, is withdrawn or requires renewal |
| Measure optional site performance | Usage and device data | Consent where required | Set before activation and state the exact analytics period here |
| Establish or defend legal claims | Relevant correspondence and logs | Legitimate interests or legal obligation | For the applicable limitation period |
Lawful bases and periods must be confirmed against the services actually installed. We do not keep personal information indefinitely simply because storage is available.
5. Cookies and Similar Technologies
Strictly necessary technologies may be used to deliver pages, protect the website, balance traffic or remember a choice requested by you. Optional analytics, advertising or personalisation technologies require clear information and a valid choice before they are activated where the law requires consent.
The current static MVP does not include optional analytics or marketing scripts. If WordPress plugins, embeds, analytics or advertising tags are added, complete a cookie audit, name each provider and purpose, publish the duration and provide an equally easy way to accept, reject or change optional choices.
6. Who May Receive Information
Information may be processed by carefully selected providers that support hosting, security, content delivery, email, backups, analytics or website maintenance. They should receive only what is necessary, act under appropriate terms and protect the data. We may also disclose information where required by law, to protect legal rights or as part of a lawful business sale or reorganisation.
Before launch, list the actual providers here or in a linked processor table. We do not sell personal information.
7. International Transfers
Some providers may process information outside the United Kingdom. Where that happens, we will use a lawful transfer mechanism and appropriate safeguards, and explain how to obtain further information. Replace this paragraph with the exact countries and safeguards used by the final service stack.
8. Security
We use proportionate technical and organisational measures designed to protect personal information, including access controls, updates, backups and monitoring. No internet service can promise absolute security. If you believe information sent through this website has been exposed, contact the privacy address above.
9. Your Data Protection Rights
Depending on the circumstances, you may have the right to:
- ask for access to your personal information;
- ask us to correct inaccurate or incomplete information;
- ask for deletion or restriction;
- object to processing based on legitimate interests;
- receive certain information in a portable format;
- withdraw consent at any time where consent is the basis used;
- complain to the UK Information Commissioner’s Office.
These rights are not absolute and exemptions may apply. We may need enough information to verify your identity and locate the relevant records. Start a request by emailing the privacy contact above. You can also read current guidance at the Information Commissioner’s Office.
10. Children
This website is intended for adults aged 18 or over. We do not knowingly collect personal information from children. If you believe a child has sent information to us, contact the privacy address so it can be reviewed and removed where appropriate.
11. Automated Decisions
UK Sister Sites does not currently make decisions about visitors that produce legal or similarly significant effects through solely automated processing. Update this section before introducing any such system.
12. Third-Party Links and Embeds
External links and embedded services may allow another organisation to collect information under its own privacy notice. Check the destination and your browser choices before interacting with it. The final build should load privacy-sensitive embeds only after the required choice.
13. Changes and Contact
We will review this policy when the website, providers or law changes and will update the date at the top. Send privacy questions or requests to privacy@example.co.uk. Replace the controller and contact details before launch.