Privacy Policy

1. Who We Are

UnionStave ("we", "us") operates the website at unionstave.com. We are the data controller for personal data collected through this website. This Privacy Policy explains what data we collect, why we collect it, how we use it and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

• Usage data: Anonymised IP address, browser type, device, OS, pages visited, referral source — collected automatically via analytics tools.
• Cookie data: See our Cookies Policy. We use strictly necessary cookies (age verification, consent preference) and analytics cookies with your consent.
• Affiliate click data: When you click through to a casino, third-party tracking systems may record your visit for commission attribution. Governed by the respective operator’s privacy policy.
• Contact data: Email address and message content if you contact us directly.

3. Legal Basis for Processing

• Legitimate interests (Art. 6(1)(f)): Analytics to understand usage and improve content.
• Consent (Art. 6(1)(a)): Non-essential analytics cookies placed only after you give consent.
• Contract performance (Art. 6(1)(b)): Responding to your contact enquiries.
• Legal obligation (Art. 6(1)(c)): Retaining records where required by law.

4. How We Use Your Data

• To deliver and maintain this website.
• To analyse traffic and user behaviour (with consent).
• To track affiliate referrals for commission purposes.
• To respond to enquiries.
• To detect and prevent fraud or abuse.

We do not sell your personal data and do not use it for automated decision-making producing legal effects on you.

5. Data Retention

• Analytics data: Up to 26 months, then deleted or anonymised.
• Contact form data: 12 months from last contact, then deleted.
• Cookie consent records: 12 months.
• Server/access logs: Up to 90 days for security purposes.

6. Third Parties & Data Sharing

We may share data with analytics providers (e.g. Google Analytics), affiliate tracking networks, hosting providers, and law enforcement where legally required. We do not transfer data outside the UK/EEA without appropriate safeguards in place.

7. Your Rights Under UK GDPR

You have the right to access, rectify, erase, restrict or object to processing of your data, to withdraw consent at any time, and to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk (Tel: 0303 123 1113). To exercise any right, contact us via the website. We respond within 30 days.

8. Security

We implement appropriate technical and organisational measures including HTTPS encryption, access controls and regular security reviews to protect your personal data. No method of internet transmission is 100% secure.

9. Children’s Privacy

UnionStave is not directed at anyone under 18. We do not knowingly collect data from under-18s. If you believe a child has submitted data to us, contact us immediately and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “last updated” date at the top of this page will reflect any changes. Continued use of the website after changes constitutes acceptance of the updated policy.