Privacy Policy

Last updated: 15 June 2026

This policy explains how BristolGambit Editorial (“BristolGambit”, “we”, “us”, “our”) processes personal data when you visit this website or contact us. It is issued in compliance with Article 13 of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Identity and Contact Details of the Controller

The data controller for this website is BristolGambit Editorial, registered in England and Wales. Our registered address and ICO registration number are available on written request via our contact page. For all data-related enquiries you may write to us at the address provided on request, or use the contact form at pitch-in.php.

2. Data Protection Officer

BristolGambit does not currently meet the threshold requiring the formal designation of a Data Protection Officer under Article 37 UK GDPR. Data protection responsibilities are managed by our compliance reviewer. All data-related correspondence should be directed through the contact page and will be passed to the responsible person within two business days.

3. Purposes and Legal Basis for Processing

We process personal data for the following purposes, each with the indicated legal basis under Article 6 UK GDPR:

  • Enquiry handling (name, email, message content): Legal basis — performance of a contract or steps taken at your request prior to entering one (Article 6(1)(b)); alternatively, your consent (Article 6(1)(a)) where you have ticked the privacy-consent checkbox on our contact form.
  • Website analytics (anonymised traffic data via Google Analytics, if you have consented): Legal basis — consent (Article 6(1)(a)). Analytics are not activated until you accept cookies.
  • Affiliate conversion tracking (click-through identifiers, if you have consented to marketing cookies): Legal basis — consent (Article 6(1)(a)). No tracking data is transferred to third parties without your explicit consent via the cookie bar.
  • Security and fraud prevention (server access logs, IP addresses): Legal basis — legitimate interests (Article 6(1)(f)). We have assessed that our interest in preventing abuse and maintaining site availability outweighs the minimal privacy impact of temporary IP logging.
  • Legal compliance (retaining records required by HMRC, ICO, or a court order): Legal basis — compliance with a legal obligation (Article 6(1)(c)).

4. Legitimate Interests

Where we rely on legitimate interests (Article 6(1)(f)), our primary legitimate interest is the secure operation of this website and the protection of our editorial business from fraud, abuse, and unauthorised access. We retain server access logs — which may include IP addresses and user-agent strings — for a maximum of 30 days solely for this purpose. We have conducted a legitimate-interests assessment and are satisfied that this processing does not override your fundamental rights and freedoms, given the limited nature of the data, the brief retention period, and the absence of any profiling activity.

5. Recipients of Personal Data

We share personal data only in the following circumstances:

  • Hosting provider: Server access logs are held on our web-hosting infrastructure. Our host operates servers within the UK or EEA and is bound by appropriate data-processing terms.
  • Google Analytics (if consented): Anonymised browsing data is transmitted to Google Ireland Limited acting as data processor, subject to standard contractual clauses. Analytics are only activated after you grant consent.
  • Affiliate networks (if consented): If you click an operator link and have consented to marketing cookies, a conversion identifier may be shared with the relevant affiliate network. No personally identifiable financial data is transmitted by us.
  • Legal authorities: We may disclose personal data where required to do so by law, a court order, or a regulator with appropriate authority.

We do not sell personal data to any third party.

6. Transfers to Third Countries

Where personal data is transferred to a country outside the UK (for example, to Google servers located in the United States), we rely on appropriate safeguards including UK adequacy regulations or UK-approved Standard Contractual Clauses. Google Analytics data is subject to Google’s data-transfer mechanisms documented in their privacy policy. If you withdraw consent for analytics cookies, no further data is transferred.

7. Retention Periods

  • Contact enquiries (name, email, message): Retained for 24 months from the date of the enquiry, after which records are permanently deleted unless an ongoing legal dispute requires longer retention.
  • Server access logs (IP addresses, user-agent strings): Deleted automatically after 30 days.
  • Cookie consent records (stored locally in your browser via localStorage): Retained in your browser until you clear it or withdraw consent. No copy is held on our servers.
  • Analytics data (if consented): Governed by Google Analytics’ standard data-retention settings, set to 14 months.

8. Your Rights as a Data Subject

Under the UK GDPR you have the following rights in relation to your personal data. To exercise any of them, contact us via the contact page selecting “Data / privacy request” as the subject. We will respond within one calendar month.

  • Right of access (Article 15): You may request a copy of the personal data we hold about you and information about how it is used.
  • Right to rectification (Article 16): You may ask us to correct inaccurate personal data we hold about you.
  • Right to erasure (Article 17): You may ask us to delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
  • Right to restriction of processing (Article 18): You may ask us to restrict processing while accuracy or lawfulness of processing is contested.
  • Right to data portability (Article 20): Where processing is based on consent or contract and is carried out by automated means, you may receive your data in a structured, commonly used machine-readable format.
  • Right to object (Article 21): You may object to processing carried out on the basis of legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

9. Right to Withdraw Consent

Where we process your data on the basis of consent — specifically, analytics cookies and marketing cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, click “Cookie settings” in the site footer and deselect the relevant categories, then save your preferences. Consent for contact-form enquiries may be withdrawn by contacting us directly; however, if withdrawal makes it impossible for us to respond to your enquiry, we may need to close the file.

10. Right to Lodge a Complaint

If you believe we have processed your personal data unlawfully or have failed to honour your rights under the UK GDPR, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection:

  • Website: ico.org.uk
  • Telephone: 0303 123 1113
  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the opportunity to address your concern directly before you contact the ICO. Please reach out to us first via the contact page.

11. Statutory or Contractual Requirement

Providing your personal data via the contact form is voluntary. However, if you choose not to provide your name and email address, we will be unable to respond to your enquiry. There is no statutory or contractual obligation to provide any information to us.

12. Automated Decision-Making and Profiling

BristolGambit does not carry out automated decision-making that produces legal or similarly significant effects, nor do we create detailed profiles of individual visitors. If you consent to analytics cookies, aggregate (non-personally-identifiable) audience data is collected by Google Analytics to help us understand how readers use the site. This aggregated analysis is used solely for improving editorial content and does not influence any decision about you as an individual.

13. Links to Third-Party Sites

This website contains affiliate links to UKGC-licensed sportsbook operators. When you click one of those links, you leave BristolGambit and enter a third-party website with its own privacy policy. We are not responsible for the privacy practices of linked sites and encourage you to read each operator’s privacy notice before registering or depositing funds.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page reflects the most recent revision. We recommend reviewing this page periodically. Continued use of the site after a revision constitutes acceptance of the updated policy.