Privacy Policy — SlotPal

1. Who We Are

SlotPal is operated by Automated Europe Limited, a company registered in England and Wales (Company No. 16162942), with its registered address in Wales, United Kingdom.

For the purposes of UK data protection law, Automated Europe Limited is the data controller for personal data collected through https://slotpal.co.uk.

If you have any questions about this policy or how we handle your data, contact us at: privacy@slotpal.co.uk

2. What Data We Collect

2.1 Data You Provide Directly

Data Type	When Collected	Purpose
Email address	Sign-up / founding member registration	Account creation, product updates, transactional emails
Payment data	Founding member checkout (via Stripe)	Processing your subscription. We never see or store your card details — these are handled entirely by Stripe.
Name	If provided during checkout	Account identification, correspondence
Contact form messages	Via our contact page	Responding to your enquiry

2.2 Data Collected Automatically

Data Type	How Collected
IP address	Standard server logs; also collected by analytics tools
Browser type & device	Server logs, analytics
Pages visited, session duration, referrer	Google Analytics 4
Clicks, interactions, scroll depth	Google Tag Manager
Cookie identifiers	See Section 6

Important: We do not collect data about your actual casino play, gambling deposits, or balances. The session tracking feature within the Audit product (when launched) stores data you explicitly log yourself — it does not connect to any casino account.

3. How We Use Your Data

To deliver the service — creating and managing your account, processing your subscription payment, and providing access to the Audit product.
To send transactional emails — account confirmation, payment receipts, subscription renewal notices, and product launch updates. These are not marketing emails and cannot be opted out of while you hold an active account.
To improve the site — using anonymised analytics data to understand how pages are used and improve content.
To comply with legal obligations — retaining transaction records as required by UK tax and financial regulations.
To respond to enquiries — using contact form submissions to reply to your messages.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Lawful Basis for Processing

Processing Activity	Lawful Basis (UK GDPR Article 6)
Account creation & subscription management	Contract (Art. 6(1)(b)) — necessary to perform our service
Payment processing	Contract (Art. 6(1)(b))
Transactional emails	Contract (Art. 6(1)(b))
Analytics & site improvement	Legitimate interests (Art. 6(1)(f)) — understanding and improving our platform
Non-essential cookies	Consent (Art. 6(1)(a)) — obtained via cookie banner
Tax & financial record retention	Legal obligation (Art. 6(1)(c))
Responding to contact enquiries	Legitimate interests (Art. 6(1)(f))

5. Third Parties & Data Processors

We use the following third-party processors. Each is contractually bound to handle your data only as instructed by us and in compliance with applicable data protection law.

Processor	Purpose	Data Shared	Privacy Policy
Stripe, Inc.	Payment processing & subscription management	Email, payment details, subscription status	stripe.com/gb/privacy
Resend	Transactional email delivery	Email address, email content	resend.com/privacy
Google Analytics 4	Site usage analytics	Anonymised usage data, cookies	policies.google.com/privacy
Google Tag Manager	Tag & tracking script management	Behavioural events (non-personal)	policies.google.com/privacy
DigitalOcean, LLC	Web hosting & infrastructure	All site data passing through our servers; hosted in the EU	digitalocean.com/legal/privacy-policy

We do not sell your personal data to any third party. We do not share your data with advertisers.

Affiliate links on SlotPal direct you to casino websites. When you follow an affiliate link, the destination site's own privacy policy applies. We have no control over how those sites process your data.

6. Cookies & Tracking

We use cookies to make SlotPal work correctly and to understand how it's being used. You can control non-essential cookies via the cookie consent banner when you first visit the site, and update your preferences at any time via the link in our footer.

Cookie Type	Purpose	Required?
Essential / functional	WordPress session management, login state, security nonces	Yes — cannot be disabled
Analytics (Google Analytics 4)	Anonymous usage statistics — pages visited, session length, device type	No — requires consent
Stripe	Fraud prevention during checkout process only	Yes (checkout pages only)

We do not use advertising cookies or third-party tracking pixels.

7. Data Retention

Active account data — retained for the duration of your subscription plus 30 days after cancellation, to allow for reinstatement.
Financial / transaction records — retained for 7 years in accordance with HMRC requirements.
Analytics data — retained in Google Analytics for 14 months (our configured retention period), after which it is automatically deleted.
Contact form submissions — retained for 12 months unless an ongoing relationship or legal matter requires longer retention.
Server logs — retained for 30 days, then automatically purged.

When data is no longer required and there is no legal basis for retaining it, we will securely delete or anonymise it.

8. Your Rights Under UK GDPR

As a data subject under UK GDPR, you have the following rights:

Right of access — you can request a copy of the personal data we hold about you.
Right to rectification — you can ask us to correct inaccurate or incomplete data.
Right to erasure — you can ask us to delete your data, subject to legal retention requirements.
Right to restriction — you can ask us to limit how we process your data in certain circumstances.
Right to data portability — where processing is based on consent or contract, you can ask for your data in a portable format.
Right to object — you can object to processing based on legitimate interests.
Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact us at privacy@slotpal.co.uk. We will respond within 30 days. We may need to verify your identity before acting on a request.

9. International Transfers

Our primary infrastructure is hosted within the EU (DigitalOcean). However, some of our processors — including Stripe (US) and Google (US) — operate globally. Where data is transferred outside the UK, we rely on:

UK adequacy regulations (where applicable)
Standard Contractual Clauses (SCCs) approved by the ICO
The processor's own UK GDPR compliance framework

Stripe and Google are both enrolled in the UK International Data Transfer Agreement framework.

10. Children

SlotPal is a gambling-adjacent platform. You must be 18 years of age or older to use this site or register for any product. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has provided us with personal data, please contact us immediately at privacy@slotpal.co.uk and we will delete it.

11. Contact & Complaints

For any questions, requests, or concerns about this policy or our data practices:

Automated Europe Limited
Email: privacy@slotpal.co.uk

If you are not satisfied with our response, you have the right to lodge a complaint with the UK's data protection supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113