This Privacy Policy explains how Thystle ("we", "us", or "our"), operating at thystle.co.uk, collects, uses, and protects your personal data when you visit our casino and gambling review website. Thystle.co.uk acts as the data controller for all personal information processed in connection with your use of this site. We are committed to handling your data responsibly and in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By continuing to use thystle.co.uk, you acknowledge the practices described in this policy.
Information We Collect
Information You Provide
- Name and email address submitted via contact or enquiry forms
- Feedback, comments, or messages sent directly to the Thystle team
- Newsletter subscription preferences and opt-in consent records
- Any other information you voluntarily submit to thystle.co.uk
Information Collected Automatically
- IP address and approximate geographic location (country/region level)
- Browser type, version, and operating system
- Pages visited on thystle.co.uk, time spent, and navigation paths
- Referring URLs and search terms used to find our site
- Device identifiers and screen resolution data
- Affiliate click-through data linked to outbound casino operator links
Cookies We Use
Thystle.co.uk uses cookies and similar tracking technologies to ensure the site functions correctly, understand how visitors interact with our content, and support our affiliate partnerships. You can manage your cookie preferences at any time through your browser settings or our on-site consent tool.
| Cookie Type | Purpose | Retention |
|---|---|---|
| Essential | Enables core site functionality, security, and page load performance on thystle.co.uk | Session / up to 12 months |
| Analytics | Collects anonymised usage data (e.g. via Google Analytics) to help us improve content and user experience | Up to 26 months |
| Affiliate / Marketing | Tracks clicks on casino operator links to attribute referrals and measure campaign performance | Up to 30 days |
| Preferences | Remembers your site settings, consent choices, and display preferences across visits | Up to 12 months |
| Third-Party | Set by embedded tools or partner platforms; subject to those providers' own cookie policies | Varies by provider |
How We Use Your Data
- To deliver, maintain, and improve the content and functionality of thystle.co.uk
- To respond to enquiries and communications submitted by users
- To send newsletters or updates where you have given explicit consent
- To analyse site traffic and user behaviour in order to optimise our casino reviews and editorial content
- To manage and report on affiliate referral activity to our partner casino operators
- To comply with applicable legal obligations under UK law
- To detect and prevent fraudulent or abusive activity on the site
Legal Bases for Processing
Thystle.co.uk processes your personal data under the following legal bases as defined by the UK GDPR. Where we send marketing communications or place non-essential cookies, we rely on your freely given consent (Article 6(1)(a)), which you may withdraw at any time without affecting the lawfulness of prior processing. For operational activities such as site analytics, fraud prevention, and affiliate reporting, we rely on our legitimate interests (Article 6(1)(f)) in running a lawful and commercially sustainable review platform, provided those interests are not overridden by your rights. In limited circumstances, processing may also be necessary for compliance with a legal obligation (Article 6(1)(c)).
Third Parties & Affiliate Links
Thystle.co.uk contains links to third-party casino operators and gambling platforms. When you click an affiliate link, you will be directed to an independently operated website, and we may receive a commission for qualifying referrals. We are not responsible for the privacy practices of those operators, and we encourage you to review their own privacy notices before registering or depositing. We also work with analytics providers, including Google Analytics, which may process data on our behalf under appropriate data processing agreements. These providers are prohibited from using your data for their own independent purposes.
Your Privacy Rights
- Right of Access: Request a copy of the personal data thystle.co.uk holds about you
- Right to Rectification: Ask us to correct inaccurate or incomplete personal data
- Right to Erasure: Request deletion of your personal data where no overriding legal basis applies
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or direct marketing
- Right to Restrict Processing: Request that we limit how we use your data in certain circumstances
- Right to Withdraw Consent: Withdraw previously given consent at any time without penalty
To exercise any of these rights, please contact us using the details in the Contact section below. We will respond to all verified requests within 30 days in accordance with UK GDPR requirements.
Data Security & Retention
Thystle.co.uk implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include encrypted data transmission (HTTPS), access controls, and regular security reviews. We retain personal data only for as long as is necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Contact form submissions are typically retained for no longer than 24 months, after which they are securely deleted. Anonymised analytics data may be retained for longer periods for statistical purposes.
Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or the way thystle.co.uk handles your personal data, please contact the Thystle team by email at privacy@thystle.co.uk. You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk, if you believe your data protection rights have not been respected.
```