Privacy Policy

Last updated: May 2026. This Privacy Policy describes how 3thingsconsulting-marketing.com (“we”, “us”, “our”) processes personal data when you visit or interact with our website and related pages (together, the “Site”). We are committed to handling personal data fairly, lawfully, and transparently in accordance with the UK General Data Protection Regulation (“UK GDPR”) as it forms part of the law of the United Kingdom by virtue of section 3 of the European Union (Withdrawal) Act 2018, together with the Data Protection Act 2018 and related legislation and guidance issued by the Information Commissioner’s Office (“ICO”). This Policy should be read together with our Cookie Policy and Terms of Service, which explain additional practices and contractual terms that apply to your use of the Site.

Who is responsible for your personal data?

For the purposes of UK data protection law, we act as a controller in respect of personal data that we determine the purposes and means of processing through the Site, such as server log data generated when you request pages and, where you contact us directly, the information you choose to include in your email message. Where we provide outbound links to third-party gambling operators, payment providers, or support organisations, those organisations act as separate controllers in respect of any personal data they collect when you visit their sites or apps. We are not responsible for their privacy notices, which you should review carefully before you submit personal data to them.

What categories of personal data do we process?

The categories of data we process depend on how you use the Site. In most cases we process limited technical and usage data automatically when your browser communicates with our hosting infrastructure. This may include your IP address, the date and time of requests, the pages or resources requested, HTTP status codes, bytes transferred, referrer URLs where transmitted by your browser, and user agent strings that typically describe browser type and operating system at a high level. If you email us, we process your email address, any contact details you include in the message, and the content of your correspondence. We do not intentionally collect special category data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, genetic data, biometric data used for identification, health data, or data concerning sex life or sexual orientation) through the Site, and you should not send such information to us unless we explicitly request it in writing for a lawful purpose.

Lawful bases for processing

We process personal data only where we have a lawful basis under Article 6 UK GDPR. For server logs and security monitoring, we rely on our legitimate interests in operating a secure, reliable website, investigating misuse, and defending legal claims, where such interests are not overridden by your rights and freedoms. Where required, we may also process certain data because it is necessary to comply with a legal obligation to which we are subject. If you contact us with a genuine enquiry, we process your contact details and message content on the basis that processing is necessary to take steps at your request prior to entering into a contract or, where no contract arises, on the basis of legitimate interests in responding to correspondence. Where we rely on legitimate interests, you may have a right to object as described below.

Cookies, local storage, and similar technologies

We use cookies and similar browser storage technologies in line with the Privacy and Electronic Communications Regulations (“PECR”) and applicable guidance. Essential technologies may be used to remember your cookie choice and to support session continuity where technically necessary. For more detail about categories, storage duration, and controls, please read our Cookie Policy. You can manage many technologies through your browser settings, including blocking or deleting cookies; however, blocking strictly necessary technologies may affect Site functionality such as whether certain preference prompts can be remembered during your session.

Affiliate tracking and outbound links

Where you click outbound links to third-party operators, those links may include tracking parameters or redirect through affiliate networks so that a partner can attribute a registration or transaction to a referral from the Site. In that situation, the partner’s systems may process identifiers and transaction metadata under their own privacy notices. We do not control those processing activities. If you do not wish to be tracked in this way, you can navigate directly to an operator’s homepage without using our outbound links, bearing in mind that you will not benefit from any editorial routing or disclosures we provide on the Site.

Recipients and processors

We use service providers to host the Site, route traffic, and provide technical support. These providers may process personal data on our instructions as processors under Article 28 UK GDPR, subject to appropriate contractual safeguards. We may disclose personal data to professional advisers (such as lawyers or accountants) where necessary, to law enforcement or regulators where required by law, or to third parties in connection with a proposed or actual corporate reorganisation, merger, or asset sale, subject to confidentiality obligations and applicable legal safeguards.

International transfers

Our hosting and service providers may be located in the United Kingdom, the European Economic Area, or other countries. Where personal data is transferred outside the United Kingdom and not to a country covered by adequacy regulations, we implement appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, or another lawful transfer mechanism recognised under UK law, together with supplementary measures where required by ICO guidance.

Retention

We retain server logs for a limited period consistent with security, troubleshooting, and legal requirements, typically on a rolling basis determined by our hosting provider unless a longer retention period is required to establish, exercise, or defend legal claims. Email correspondence is retained for as long as needed to complete your request and for a reasonable period afterwards to maintain a record of our communications, unless a longer retention period is required by law. Where we rely on consent for any specific processing activity, we will stop that processing if you withdraw consent and we have no other lawful basis to continue.

Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. Measures may include access controls, encryption in transit where supported, patching, monitoring, and staff training. No method of transmission over the internet is completely secure; you should use up-to-date browsers and device security features and avoid submitting sensitive information by email unless you accept the residual risks of email transmission.

Your rights

Subject to conditions and exemptions in UK data protection law, you may have the right to: request access to personal data we hold about you; request rectification of inaccurate data; request erasure in certain circumstances; request restriction of processing; object to processing based on legitimate interests or for direct marketing; request data portability where processing is based on consent or contract and carried out by automated means; and withdraw consent where processing is based on consent. You also have the right to lodge a complaint with the ICO at www.ico.org.uk. We encourage you to contact us first so we can attempt to resolve your concern.

Children

The Site is not directed at individuals under 18, and we do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us and we will take steps to delete such information where required by law.

Automated decision-making and profiling

We do not use the Site to carry out solely automated decision-making, including profiling, which produces legal or similarly significant effects concerning you within the meaning of Article 22 UK GDPR.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or Site functionality. The updated version will be published on this page with a revised “Last updated” date. Where changes are material and we are legally required to notify you, we will provide notice in an appropriate manner.

Contact

Privacy questions and requests: info@3thingsconsulting-marketing.com. To help us respond efficiently, include enough detail for us to verify your identity where required and describe your request clearly. We may need to ask for additional information to protect your data from unauthorised disclosure.