This privacy policy describes how tomintoulgallery.co.uk collects, uses and protects the personal information you provide when using our site. We are an independent information portal about Basswin, and this policy covers our own data practices — not those of the operator itself.
Who controls your data
tomintoulgallery.co.uk is the data controller for any personal information collected through this site. We determine how and why your data is processed. You can reach us at [email protected] with questions about how we handle your information.
What information we collect
We collect two categories of data: information you give us directly, and technical information gathered automatically as you browse.
Information you provide: When you contact us through the site, we collect your email address, name (if you give it), and the content of your message. We do not collect payment details, account credentials or identity documents — those are handled by the operator, not by this portal.
Technical information: Like most websites, we collect data about your visit automatically. This includes your IP address, browser type and version, operating system, the pages you view, how long you spend on each, and the site that referred you here. We use cookies and similar technologies for this — see our cookie policy for details.
How we use your information
We process your data for specific, legitimate purposes. Contact-form submissions are used to respond to your enquiry and to improve the information we publish. Technical data helps us understand which parts of the site are useful and which need work, and it powers basic security measures like identifying unusual traffic patterns.
We do not use your information for marketing, and we do not build profiles or make automated decisions about you. Our analytics are aggregated — we see that a page was visited 400 times this week, not that you personally visited it on Tuesday.
Lawful basis for processing
Under UK GDPR, every use of personal data requires a lawful basis. Ours are:
- Legitimate interests — running analytics to improve the site, and maintaining security.
- Consent — for any optional cookies beyond the strictly necessary ones.
- Performance of a service — responding to a contact request you initiated.
Who else sees your data
We share information with a small number of third parties who help us run the site. These include our hosting provider (who stores the site's files and processes server logs), analytics services (who aggregate usage statistics), and email infrastructure (which handles messages sent to [email protected]). Each processor is bound by contract to protect your data and use it only for the purposes we specify.
We do not sell, rent or trade personal information to anyone. We will only disclose data to other parties where required by law — for example, in response to a valid court order or to protect someone from immediate harm.
Your rights under UK GDPR
The UK General Data Protection Regulation and the Data Protection Act 2018 give you control over your personal information. You have the right to:
| Right | What it means |
|---|---|
| Access | Request a copy of the personal data we hold about you. |
| Rectification | Ask us to correct information that is inaccurate or incomplete. |
| Erasure | Request deletion of your data, where we no longer have a valid reason to keep it. |
| Restriction | Ask us to stop processing your data temporarily, while we resolve a dispute or verify its accuracy. |
| Portability | Receive your data in a structured, machine-readable format, or have it transferred to another service. |
| Objection | Object to processing based on legitimate interests, or to direct marketing (though we do not send any). |
| Withdraw consent | Where processing relies on your consent, you can withdraw it at any time. |
How to exercise your rights
Send your request to [email protected]. Include enough detail for us to identify your data — the email address you used to contact us, or the approximate date of your enquiry. We will respond within one month, and we will not charge a fee unless your request is manifestly unfounded or excessive.
If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority. Visit ico.org.uk or call 0303 123 1113.
How long we keep your data
We retain personal information only as long as necessary for the purposes we collected it. Contact-form submissions are kept for two years, then deleted. Server logs and aggregated analytics are retained for one year. If you ask us to delete your data, we will do so within 30 days, unless we are legally required to keep it longer.
Protection of minors
This site is intended for adults aged 18 and over (18+). We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently gathered data about a child, contact us immediately at [email protected] and we will delete it.
Changes to this policy
We review this privacy policy regularly and update it when our practices change or when the law requires it. The current version is dated below. Continued use of the site after an update means you accept the revised terms.
Last updated: 26 November 2025
This site is for players aged 18 and over (18+) only. If gambling ever stops feeling like entertainment, free and confidential support is available at BeGambleAware.org.