Privacy Policy

1. Data Controller Information & Statutory Registration

This Privacy Policy sets out the data processing principles and security commitments of Pickliebet Information Services Ltd ("Pickliebet", "we", "our", or "us"), operating the digital publication accessible at pickliebet.com. We are committed to safeguarding the privacy of our visitors in strict accordance with UK data protection legislation.

2. Scope of Policy & Applicable Legal Framework

This policy applies exclusively to personal data collected, stored, or processed via pickliebet.com, our associated subdomains, contact forms, and email communications. Our operations are governed by and comply with:

• The UK General Data Protection Regulation (UK GDPR) as retained in UK domestic law following the European Union (Withdrawal) Act 2018.
• The Data Protection Act 2018 (DPA 2018).
• The Privacy and Electronic Communications Regulations (PECR) governing cookies and electronic communications.

3. Categories of Personal Data Collected & Processed

We adhere strictly to the data minimisation principle under Article 5(1)(c) of the UK GDPR. We collect only the information necessary to provide an independent informational tournament directory:

• Direct Communication Data: Full name, email address, message subject, and inquiry details provided voluntarily when using our contact forms or emailing our editorial desk.
• Technical Connection Data: Truncated/anonymized Internet Protocol (IP) addresses, browser type and version, operating system, device screen resolution, preferred language settings, and network timestamps.
• Aggregate Telemetry & Usage Data: Non-identifying statistical metrics regarding page views, navigation pathways across tournament schedules (e.g., Manchester BNR or 888 UKPL guides), click patterns, and referral sources.
• Cookie Preference Records: Client-side consent tokens indicating your preferences regarding optional analytical cookies.

4. Methods and Technical Sources of Data Collection

We obtain personal information through three transparent operational channels:

1. Direct User Interaction: Information you intentionally supply when contacting us for tournament inquiries, corrections, or feedback.
2. Automated Server Infrastructure: Standard web server request handshakes and Content Delivery Network (CDN) edge routing logs captured automatically when accessing our website.
3. Client-Side Storage Technologies: Optional cookies and browser LocalStorage tokens deployed in accordance with your explicit consent preferences.

5. Lawful Bases for Processing Under Article 6 UK GDPR

Every data processing activity conducted by Pickliebet is underpinned by a verified lawful ground under Article 6 of the UK GDPR:

• Legitimate Interests (Art. 6(1)(f)): Processing technical logs to safeguard server security, prevent cyber threats and DDoS attacks, optimize site layout, and respond directly to user-initiated correspondence.
• Consent (Art. 6(1)(a)): Collecting aggregate website metrics via optional performance and analytical cookies, which you may grant or revoke at any time.
• Legal Obligation (Art. 6(1)(c)): Retaining necessary records to comply with UK corporate, tax, statutory accounting, and legal disclosure requirements.

6. Specific Purposes of Processing Tournament Data & Inquiries

We process personal and technical information strictly for the following enumerated purposes:

• To deliver accurate, real-time live poker tournament schedules, venue details, and player guides across Great Britain.
• To review, investigate, and respond to feedback, tournament schedule amendments, and general reader inquiries.
• To monitor website uptime, resolve technical errors, and ensure high-availability server performance.
• To analyze aggregated user browsing trends to improve our editorial guides, calendar navigation, and venue directories.
• To enforce our Terms & Conditions and defend against unlawful activities or security breaches.

7. Technical Identifiers, Cookies & Local Storage Policies

Pickliebet.com utilizes technical cookies and browser LocalStorage items strictly necessary for core functionality (such as remembering your consent preferences). Optional analytical tracking cookies are only loaded after obtaining your affirmative consent via our cookie banner.

For a full itemized audit of every cookie, provider, purpose, and expiration lifespan, please consult our dedicated Cookie Policy.

8. Data Sharing, Sub-Processors & Third-Party Service Providers

We do not sell, rent, lease, or commercialize your personal data to any third party, casino operator, or marketing network. We only disclose necessary data to vetted technical sub-processors under binding contractual Data Processing Agreements (DPAs):

• Cloud Infrastructure & CDN Providers: High-performance content delivery and DDoS mitigation networks (e.g., Cloudflare) for secure edge routing.
• Hosting Facilities: UK-based and European data centre operators maintaining ISO 27001-certified server environments.
• Law Enforcement & Legal Authorities: Disclosures made solely where strictly mandated by statutory UK legislation, court orders, or regulatory enforcement bodies.

9. International Transfers & Cross-Border Data Safeguards

Our core processing systems are located within the United Kingdom and the European Economic Area (EEA). If any technical sub-processor routes data through servers outside the UK, we ensure adequate legal protections are enforced:

• Transfers to countries officially recognized by the UK Government as providing an adequate level of personal data protection.
• Implementation of the UK International Data Transfer Agreement (IDTA) or the UK Addendum to European Commission Standard Contractual Clauses (SCCs), accompanied by transfer risk assessments.

10. Data Retention Periods & Scheduled Archiving Protocols

Personal data is retained only for as long as strictly necessary to fulfill the specific purposes for which it was gathered:

• Contact Inquiries: Stored for a maximum of 12 months following complete inquiry resolution, after which messages are permanently purged from mail servers.
• Server Security & Access Logs: Retained for a rolling period of 30 days for forensic security analysis and DDoS mitigation, then overwritten automatically.
• Cookie Preference Flags: Retained in client browser storage for up to 12 months unless manually cleared by the user.

11. Technical & Organisational Security Measures (TOMs)

Pickliebet maintains robust state-of-the-art security safeguards designed to protect personal data from accidental loss, unauthorized access, alteration, or unlawful disclosure:

• Transport Layer Security (TLS 1.3): All communications between your browser and our servers are encrypted end-to-end using modern cryptographic ciphers.
• Security Headers & Content Security Policy: Implementation of HSTS, X-Content-Type-Options, Referrer-Policy, and strict CSP headers to prevent cross-site scripting (XSS) and clickjacking.
• Role-Based Access Control: Strict least-privilege administrative access controls protected by multi-factor authentication (MFA).
• Regular Vulnerability Assessments: Continuous automated vulnerability scanning and firewall protections at the CDN edge.

12. Your Statutory Data Subject Rights Under UK Law

Under Chapter 3 of the UK GDPR and the Data Protection Act 2018, you hold enforceable rights regarding your personal data:

• Right of Access (Art. 15): You have the right to request confirmation of whether we process your personal data and obtain a free copy of your records (Subject Access Request).
• Right to Rectification (Art. 16): You may request the immediate correction of inaccurate or incomplete personal records.
• Right to Erasure / "Right to be Forgotten" (Art. 17): You may request the deletion of your personal data where there is no ongoing legal ground for its retention.
• Right to Restriction of Processing (Art. 18): You may request that we temporarily suspend processing of your data while an accuracy dispute or legal claim is assessed.
• Right to Data Portability (Art. 20): You can request a machine-readable copy of personal data you provided to us on the basis of consent or contract.
• Right to Object (Art. 21): You hold an absolute right to object to processing grounded in our legitimate interests or direct marketing at any time.
• Automated Decision-Making Protections: Pickliebet does not carry out automated decision-making or profiling activities that produce legal effects.

To exercise any statutory right, please submit a written request to privacy@pickliebet.com. We will respond within one calendar month without charge.

13. Policy Review Lifecycle, Data Protection Contact & Supervisory Complaints

This Privacy Policy is reviewed annually or whenever our technological architecture or statutory obligations evolve. Material modifications will be posted directly to this page with an updated revision date.

If you have questions, concerns, or wish to escalate a data protection query, please contact our Data Protection Officer at privacy@pickliebet.com.

You also possess the legal right to submit a formal complaint at any time to the UK supervisory authority for data protection: