Privacy Policy

This page explains what data we collect when you visit Non GamStop Casinos UK, why we collect it, who we share it with, and what your rights are under UK GDPR and the Data Protection Act 2018. The policy is current as of May 2026 and applies to https://projectbritain.com/ and projectbritain.com.

Who we are

Non GamStop Casinos UK is a single-editor audit guide operated by James Smith. The data controller for the purposes of UK GDPR is James Smith, contactable at contact@projectbritain.com.

What data we collect

We collect three categories of data:

1. Server logs. Standard HTTP request logs (IP address, user agent, requested URL, timestamp, referrer). Logs are retained for 14 days and used to debug the site and detect abuse. They are not used to profile individual visitors and are not shared with third parties except as required by law.
2. Analytics. Aggregated, anonymised analytics via a privacy-respecting provider — pageview counts, country (not city), referring source, anonymised IP. We do not use Google Analytics. Analytics data is retained for 18 months and used to inform editorial priorities.
3. Affiliate clicks. When you click a "Play Now" or operator-link on this site, the destination operator receives the affiliate-network identifier in the URL (this is how the network attributes the click to us if you later register). We do not pass any personal data to the operator beyond what your browser includes in the standard referrer header. Once you arrive at the operator's site, that operator's privacy policy applies — not ours.

Cookies

We set the following cookies:

• Session cookie — set by our hosting provider for DDoS protection and edge caching. First-party, expires when you close the browser.
• Analytics cookie — set by our analytics provider for visit-counting. First-party, anonymised, expires after 12 months.

We do not set advertising cookies, tracking pixels, or third-party social-share cookies. We do not have a cookie consent banner because the cookies we set fall under the "strictly necessary" or "low-impact analytics" categories that do not require explicit consent under UK GDPR (per ICO guidance, May 2024).

Lawful basis for processing

Under UK GDPR Article 6, we rely on:

• Legitimate interests for server logs (security, abuse prevention) and aggregated analytics (editorial improvement). The legitimate interest is balanced against your reasonable expectation as a website visitor; no profiling or automated decision-making is performed.
• Consent for any future newsletter sign-up (we do not currently run a newsletter).
• Legal obligation for any data we are required to retain by court order or regulator request.

Third parties

The following third parties process data on our behalf:

• Hosting provider — static site hosting, CDN, edge caching, and DDoS protection. Processes server logs. Refer to our hosting provider's privacy policy for their data handling practices.
• Affiliate networks — operators link through the relevant affiliate network's tracking domain (typically a click-redirect URL). The network sees the click event but receives no personal data from us beyond standard browser headers.

We do not share, sell, or rent personal data to any third party for marketing purposes.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of data we are not legally required to retain
• Object to processing on the basis of legitimate interests
• Lodge a complaint with the Information Commissioner's Office (ico.org.uk) — the UK supervisory authority

To exercise any of these rights, email contact@projectbritain.com with [Privacy] in the subject line. Reply target ten working days.

Changes to this policy

If this policy materially changes we will update the "current as of" date at the top of the page and note the change in the footer of the site for at least 30 days. The current version is May 2026.