Legal
Privacy Policy
Draft — review by a solicitor before launch. What personal data this site collects, why, on what legal basis, for how long, who it is shared with and the rights you have under UK data protection law.
On this page
Draft — review by a solicitor before launch. Items marked "to be inserted" must be completed before this policy is published.
1. Who we are
Cheltenham Betting Tips is operated by [legal entity name, company number and registered address — to be inserted], which is the data controller for the personal data described in this policy. Contact for privacy matters: the privacy address on the contact page.
2. What we collect and why
| Data | Why | Legal basis (UK GDPR) | Retention (proposed) |
|---|---|---|---|
| Server logs: IP address, browser and device information, pages requested, time | Security, fault-finding, abuse prevention, rate limiting | Legitimate interests | Up to 90 days |
| Analytics: pages viewed, approximate location, device type, referrer | Understanding how the site is used and improving it | Consent (analytics cookies) | Up to 26 months |
| Email address, if you subscribe to updates | Sending the updates you asked for | Consent | Until you unsubscribe, plus 30 days |
| Questions submitted to the Ask Cheltenham assistant, and the answers | Providing the answer; finding and correcting errors; improving retrieval | Legitimate interests | Up to 12 months |
| Correspondence you send us | Responding; handling corrections and complaints | Legitimate interests; legal obligation where a complaint requires it | Up to 2 years |
| Account data for editorial staff (admin users) | Operating the editorial system | Contract | Duration of role plus 12 months |
We do not collect payment details, and we do not ask for them. We do not knowingly collect personal data from anyone under 18.
3. Cookies and similar technologies
Details, categories and how to manage them are in the cookie policy. Strictly necessary cookies are used without consent; analytics and affiliate-measurement cookies only with your consent.
4. Who we share data with
| Recipient | What | Why |
|---|---|---|
| Hosting and infrastructure providers | Server logs and stored data | To run the site |
| Analytics provider (to be named) | Analytics data, where consented | To measure use of the site |
| Email service provider (to be named) | Subscriber email addresses | To send updates |
| AI model provider (to be named) | Assistant questions and the database records retrieved to answer them | To generate assistant answers; not used by the provider to train models under our agreement (to be confirmed) |
| Affiliate networks | Pseudonymous click and conversion data | To attribute commission; we do not receive your identity |
| Authorities | Data required by law | Legal obligation |
We do not sell personal data. When you follow a link to a bookmaker or any other third party, their privacy policy applies from that point.
5. International transfers
Some providers may process data outside the UK. Where they do, transfers are made under UK-approved safeguards such as the UK International Data Transfer Agreement or adequacy regulations. Provider list and safeguards to be confirmed before launch.
6. Your rights
Under UK data protection law you can:
- ask for a copy of the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete data;
- object to processing based on legitimate interests;
- restrict processing in certain circumstances;
- withdraw consent at any time where consent is the basis;
- ask for your data in a portable format where it was provided by you and processed by automated means.
To exercise any of these, email the privacy address on the contact page. We respond within one month; we may ask you to confirm your identity. You may also complain to the Information Commissioner's Office at ico.org.uk.
7. Security
Data is stored on access-controlled systems, transmitted over encrypted connections, and available only to staff who need it. Editorial systems use individual accounts with role-based permissions and an audit log.
8. Children
This site is for adults aged 18 and over. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.
9. Changes
We will post changes here with the updated date shown at the top of the page. Material changes to how we use your data will be highlighted.
10. Contact
Privacy address: see the contact page. Data controller details: to be inserted.