Privacy Policy
Last updated: May 2026 · UK-focused readers · 18+
Who we are
EliteBonusPalace.org provides editorial guides and comparisons relating to licensed gambling operators and
associated promotions. This Privacy Policy explains how we collect, use, store, and share personal data when
you browse our website, interact with cookie controls, or contact us by email. We describe processing in
plain language while reflecting obligations under the UK General Data Protection Regulation (UK GDPR) as
supplemented by the Data Protection Act 2018 and related guidance from the Information Commissioner’s Office
(ICO).
Data we may collect
When you visit pages, standard web servers and security tooling may automatically process technical data
including Internet Protocol (IP) address, approximate geographic region inferred from IP, browser type and
version, device category, referring URL, timestamps, requested paths, HTTP status codes, and aggregated
performance metrics. If you email us, we receive your email address, message content, attachments you choose
to send, and delivery metadata generated by mail systems.
We do not intentionally solicit special-category data through this site. Please do not send health
information or other sensitive details unless strictly necessary; if you do, we will process such content
only to handle your enquiry proportionately.
Cookies and similar technologies
We use a minimal set of cookies and comparable storage mechanisms to remember whether you confirmed the age
gate during your browser session, whether you accepted or rejected non-essential cookies via our banner, and
to maintain basic session continuity where required by our hosting stack. Additional detail appears in our
Cookie Policy, which should be read alongside this notice.
Purposes and lawful bases
We process technical data to deliver pages securely, detect malicious traffic, troubleshoot outages,
understand aggregate interest in specific sections, and improve editorial prioritisation. Where processing
is strictly necessary to provide the service you request or to meet legal obligations, we rely on legitimate
interests balanced against your rights, or on legal obligation where applicable. Where consent is required
for non-essential storage (for example certain preference cookies), we obtain it through the banner before
activating those features.
When you email us, we process your message to respond, maintain correspondence records where justified, and
establish or defend legal claims if needed.
Sharing and international transfers
We use infrastructure providers for hosting, DNS, email delivery, and security monitoring. Those providers
act under contractual terms requiring appropriate safeguards. Data may be processed outside the United
Kingdom or European Economic Area only where a valid transfer mechanism applies, such as adequacy
regulations, standard contractual clauses, or other ICO-recognised safeguards.
Retention
Server logs are retained on a rolling basis consistent with security monitoring needs and then overwritten
or aggregated. Email correspondence is kept only as long as necessary to complete the conversation, comply
with legal duties, or defend claims, after which it is deleted or anonymised where feasible.
Security
We implement administrative and technical measures appropriate to the nature of the data we handle,
including transport encryption where supported, access minimisation, patching, and monitoring. No online
transmission is completely risk-free; you should protect your devices and accounts accordingly.
Children
Our content targets adults aged 18 or over. We do not knowingly collect personal data from minors. If you
believe a child has provided information to us, contact us promptly so we can delete it where obligations
allow.
Your rights
Depending on circumstances, you may have rights to access, rectify, erase, restrict processing, object to
processing based on legitimate interests, data portability for information you supplied processed by
automated means under contract or consent, and to withdraw consent where processing was consent-based. You
may lodge a complaint with the ICO; we encourage you to contact us first so we can attempt to resolve
concerns quickly.
Automated decision-making
We do not use automated decision-making that produces legal or similarly significant effects solely by
automated means in relation to visitors described in this policy.
Marketing
We do not sell mailing lists from casual browsing. If we introduce optional newsletters or alerts in future,
we will obtain explicit consent where required and provide granular unsubscribe controls.
Changes
We may update this policy to reflect legal, technical, or editorial changes. Material revisions will be
reflected by updating the “Last updated” date and, where appropriate, publishing an accessible summary of
changes.
