The writing on stakehorizonuk.com covers online casinos, those outside GamStop among them, and it is meant for readers in Great Britain; no more personal data is handled than an information site requires to function. Two instruments set the rules here, the UK GDPR and the Data Protection Act 2018, and this policy carries out the duty to inform laid down in Article 13 of the UK GDPR.
Controller
Whoever operates stakehorizonuk.com is the controller in the sense of Article 4(7) UK GDPR. The name, address and e-mail address of that body sit at stakehorizonuk.com, and the same route serves for any question touching personal data.
What is processed
A log entry is written by the server whenever a page is requested, holding the IP address, date and time, the address asked for, the quantity of data transferred, the page that led the reader here and the browser in use. Those logs exist for security and for spotting abuse, and once 90 days have passed they are erased or shortened until they no longer identify a person. A reader who gets in touch supplies a name, an e-mail address and the wording of the message, and these serve one purpose only, which is to reply. Reader accounts, deposits and stakes do not exist on this site, so no payment details and no identity documents are gathered.
Lawful bases and purposes
Keeping the site running and secure is the legitimate interest of the controller, and it carries the server logs and the measures against abuse (Article 6(1)(f) UK GDPR). The same interest covers a reply to a message. For any cookie beyond the strictly necessary ones, and for audience measurement, consent is the basis (Article 6(1)(a) UK GDPR read with regulation 6 of PECR), and nothing of the kind runs before that consent arrives; withdrawing it later is always possible, and processing already carried out stays lawful (Article 7(3)). Automated decisions are not taken and no profiling is done.
Recipients and transfers outside the UK
The data is never sold. Hosting, content delivery and e-mail come from processors working on the instructions of the controller (Article 28 UK GDPR), and those processors are the recipients, alongside public authorities where a legal duty demands it. Data leaves the United Kingdom only for a country covered by adequacy regulations, or under appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum (Article 44 onwards).
Retention
No longer than its purpose needs is any data held: the server logs go after 90 days at the latest, and correspondence stays until the matter is closed, plus the stretch required to defend against possible claims. A message may be left unsent, since supplying data is voluntary, though no answer follows without it.
Rights
Access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection to processing that rests on legitimate interests (Article 21) are open to every person. One month from receipt is the deadline for answering a request, without undue delay, and Article 12(3) allows that period to be stretched by two further months where the case calls for it.
Supervision and complaints
The Information Commissioner's Office (ICO) supervises. A person who holds that the handling of their data breaks data protection law may complain to it (Article 77 UK GDPR).
Last updated: 13.11.2026.