Privacy Policy
Last updated: 24 June 2026
This Privacy Policy explains how Candyland ("we", "us", the website at candylandcasinoo.com) collects, uses, stores and protects personal information when you visit our site. We are an independent information resource that reviews online casinos for UK players — we are not a gambling operator, and we never hold your casino account, balance or payment details. This policy is written to comply with UK data protection law — the UK GDPR and the Data Protection Act 2018, overseen by the Information Commissioner’s Office (ICO). Cookies are handled in line with the Privacy and Electronic Communications Regulations (PECR). Questions about your data can be sent to [email protected].
1. Who we are
Candyland operates the website candylandcasinoo.com as an editorial review service. The site publishes casino reviews, comparisons and player guides; it does not accept bets, take deposits, or run games for real money. The person responsible for data handling can be reached at [email protected]. Under UK data protection law, you may also contact the Information Commissioner’s Office at ico.org.uk if you believe your information has been mishandled.
2. What personal information we collect
Information you give us directly
When you use our contact form we collect your name, email address, the subject you select and the message you write. That is the full extent of what you actively hand over. We do not ask for, and you should never send us, casino account credentials, passwords, copies of identity documents, or card numbers — we have no use for them and no way to act on them.
Information collected automatically
Like most websites, our servers and analytics record limited technical data on each visit, and each item has a specific purpose:
- IP address — used to infer your country so we can show region-relevant content, and to protect the site against abuse such as DDoS attacks.
- Browser type and version (User-Agent) — lets us render the layout correctly across Chrome, Safari, Firefox and Edge.
- Device type and operating system — helps us prioritise the mobile experience, where most of our readers are.
- Pages viewed and time on page — aggregated analytics that tell us which guides are useful so we can improve them.
- Referrer URL and browser language — shows us where visitors arrive from and which language to present.
Cookies
We use a small number of cookies for analytics and basic site function. Each cookie, its provider and its purpose is listed in full in our Cookie Policy, where you can also learn how to disable them.
3. Why we use your information
We process personal information only for clearly defined reasons. We use analytics (Google Analytics 4, with IP anonymisation) to understand which reviews readers value and to make better content. We use technical logs to keep the site secure and to block spam and bots. We use your contact-form details solely to reply to you. Affiliate networks may set a tracking cookie when you click through to a casino so the partnership is credited correctly — this is explained in our Affiliate Disclosure. We do not build advertising profiles about you, and we do not sell your information to anyone.
4. Legal basis and your consent
Under UK GDPR we collect information only on a lawful basis connected to running an editorial website, and we limit collection to what is necessary (the lawfulness and data-minimisation principles). Non-essential cookies are set only after you consent through our cookie banner, and you can withdraw that consent at any time by adjusting your browser settings or clearing cookies. Where the GDPR applies to you, our bases are consent (cookies), legitimate interest (analytics and security) and contract performance (answering your enquiry).
5. Who we share information with
We share limited data with a short list of processors, never with casinos directly:
- Google Analytics 4 (Google LLC, USA) — anonymised usage analytics; transfers are covered by Standard Contractual Clauses.
- Google Search Console — aggregated search performance (queries, clicks, positions); no individual identification.
- Affiliate networks (for example Income Access, NetRefer, SoftSwiss Affiliates) — the fact and time of a click-through, plus country, so a referral can be credited.
- Hosting / CDN provider (for example Cloudflare) — server logs containing IP and request data for delivery and security.
We do not sell personal information, we do not pass it to advertising networks for targeting, and we do not transmit your details to any online casino. A casino only receives your data if you choose to visit its site and register there yourself.
6. How long we keep it
We keep data only as long as it is needed. Contact-form messages are retained for 12 months after our last exchange, then deleted. Server logs are kept for 90 days for security. Analytics cookies expire on their own schedule (for example _ga after 2 years, _gid after 24 hours — see the full cookie list). Affiliate tracking cookies typically last 30–90 days. After these periods data is deleted or irreversibly anonymised.
7. Your rights
Under UK GDPR you have the right to ask what personal information we hold about you (the right of access) and to request correction of anything inaccurate (the right to rectification). You can also ask us to delete contact-form data, withdraw cookie consent, or object to analytics processing. To exercise any of these, email [email protected]; we acknowledge requests within 72 hours and respond within one month, as required under UK GDPR. If you are unhappy with our response you may complain to the Information Commissioner’s Office (ico.org.uk). Visitors elsewhere may also lodge a complaint with their local supervisory authority.
8. Security
All connections to the site use 256-bit SSL/TLS encryption — the address begins with https://. We keep our CMS and server software patched, restrict personal data to authorised editorial staff, require two-factor authentication on admin accounts, and back up data in encrypted form. No system is ever perfectly secure, but these are reasonable and current safeguards.
9. Children
This site is intended only for people aged 18 or over. We do not knowingly collect information from anyone under 18. If we learn that we have, we will delete it immediately. If you believe a minor has contacted us, please email [email protected] and read our guidance on protecting minors in Responsible Gambling.
10. Changes to this policy
We may update this policy. The date at the top always reflects the latest version, and material changes will be flagged on the site. Continuing to use candylandcasinoo.com after an update means you accept the revised policy. For anything unclear, contact us via our Contact page or read how we use cookies.