Privacy Policy

Last updated: 30 April 2026

Fortunica Online takes privacy seriously, and this Privacy Policy explains in plain terms what data we collect from visitors to fortunicacasino-online.co.uk, why we collect it, how we use it, and what rights you have under UK data protection law.

1. Who we are

The data controller for fortunicacasino-online.co.uk is the editorial team trading as Fortunica Online. Contact: [email protected] for any data-related query.

2. Legal basis

This Privacy Policy is written under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR). Where this policy uses terms like "personal data", "processing" and "controller", they have the meanings set out in those regulations.

3. What data we collect

Server log data. Standard web server logs record the IP address of each visit, the browser user agent string, the page requested, the timestamp, and the referrer where present. This is collected automatically by the hosting provider; we use it for security monitoring and aggregate analytics. Logs are retained for 30 days then purged.

Analytics data. We use a privacy-respecting analytics service (currently Plausible Analytics) that collects no personal data, sets no cookies, and aggregates traffic patterns without identifying individual visitors. Aggregate metrics (page views, country of origin at country level only, referrer source) are visible to the editorial team for content prioritisation.

Affiliate click tracking. When you click an outbound link to a recommended operator, the click is logged with a timestamp and the source page. The affiliate platform run by the operator may then set its own cookies on your browser to attribute the click to a registration. Our involvement ends at the click; the operator's privacy policy applies from the point you arrive at their site.

Email correspondence. If you write to any of our editorial inboxes (editorial, partnerships, privacy, legal), we receive your email address, the message content, and any attachments. We don't run a contact form; email-only contact gives you visible control over what you send.

What we don't collect. We don't run user accounts on this site. We don't have a newsletter sign-up. We don't use Facebook tracking pixels, LinkedIn Insight tags or third-party advertising trackers. We don't sell, rent or share data with anyone for marketing purposes.

4. Why we process the data

Site operation and security — keeping the service running, protecting against attacks, debugging issues. Analytics — understanding which articles readers find useful so we can prioritise content updates. Editorial improvement — aggregated reading patterns inform the content calendar. Communication — replying to messages sent via the contact addresses. Affiliate accounting — verifying conversions reported by partner programmes.

5. Lawful bases under UK GDPR

• Server logs and security monitoring: legitimate interest (Article 6(1)(f))
• Analytics via Plausible: legitimate interest (the service collects no personal data, so consent under PECR cookie law isn't engaged)
• Email correspondence: contract or legitimate interest, depending on context
• Affiliate click tracking: legitimate interest, with the partner's processing covered by their own policy

6. Cookies

The site uses no first-party cookies. Affiliate links set third-party cookies on the destination sites, governed by those operators' policies. Browser storage and session storage are not used. Cookie Policy for the full inventory.

7. Data sharing

We share data only with the processors that operate the technical infrastructure of the site:

• Hosting provider — for server log storage and DDoS protection
• Plausible Analytics — for aggregate traffic measurement (no personal data)
• Email service provider — for editorial inbox handling

We do not share data with marketing networks, data brokers, or any third party for the purpose of profiling, advertising, or commercial use beyond the technical operation of the site.

8. International transfers

Some of our processors are based in the European Economic Area or the United States. Where data is transferred outside the UK, the transfer is covered by adequacy decisions where available, or by Standard Contractual Clauses incorporating UK-specific addenda where adequacy doesn't apply. Plausible operates from EU infrastructure.

9. Retention

• Server logs: 30 days then purged
• Analytics aggregates: indefinite (no personal data)
• Email correspondence: 24 months from last reply, then deleted
• Legal correspondence: retained per professional standards (typically 6 years)

10. Your rights

Under UK GDPR you have the following rights:

• Access — request a copy of any personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data, subject to legal retention requirements
• Restriction — limit the processing of your data while a query is investigated
• Objection — object to processing based on legitimate interest
• Data portability — receive your data in a structured, machine-readable format
• Withdrawal of consent — where consent is the lawful basis (rare on this site)

To exercise any of these rights, write to [email protected]. We acknowledge within five working days and respond substantively within 30 days, extendable by a further 60 days for complex cases under UK GDPR Article 12(3).

11. Complaints to the supervisory authority

If you're not satisfied with our handling of your data, you have the right to complain to the UK supervisory authority: Information Commissioner's Office (ICO), ico.org.uk, helpline 0303 123 1113. We'd ask you to raise the issue with us first, but the right to complain to the ICO is yours regardless.

12. Children

This site is for adults aged 18 and over only, consistent with UK gambling-content regulation. We do not knowingly collect data from anyone under 18. If we receive correspondence from a minor we delete the data and reply only to confirm the deletion.

13. Changes to this policy

Material changes to the policy will be flagged at the top of the page with the change date for at least 30 days. The "last updated" line at the top of this page reflects the most recent edit.

14. Contact

For any privacy question or to exercise your rights: [email protected]. To complain to the supervisory authority: Information Commissioner's Office (ICO), or call the ICO helpline on 0303 123 1113.