Understanding Your Data Rights

The General Data Protection Regulation gives you substantial control over how your personal information gets handled. These aren’t just theoretical rights—they’re practical tools you can use whenever you need them.

Whether you’re using our WordPress plugins, managing your account, or just browsing our website, these protections follow you around automatically. No special setup required, no fine print to worry about.

How We Handle Your Information

Legal Basis for Processing

European law requires us to have valid reasons for processing your personal data. Here’s what we rely on:

What Data We Actually Process

Let’s be specific about what information we handle and why:

Account Management: Your email, name, and license details help us verify you’re authorized to use the plugins and provide support when you need it. We keep this stuff as long as your account exists, plus seven years for business records.

Plugin Operations: When you generate casino reviews, we temporarily process website URLs and content through our AI services. This data doesn’t stick around on our servers—it gets processed and deleted.

Customer Support: Support conversations and technical logs help us solve problems and improve the plugin experience. We hold onto these for three years to maintain service quality.

International Data Transfers

Some of our service providers operate outside Europe, which means your information occasionally travels internationally. Here’s how we keep it protected during these transfers:

Adequacy Decisions

When possible, we work with companies in countries that the European Commission has already approved as having strong data protection standards. Think of it as pre-approved destinations for your data.

Standard Contractual Clauses

For other destinations, we use legally binding contracts that require the same level of protection as if your data never left Europe. These contracts are standardized by the European Commission and regularly updated.

Service Provider Oversight

Every company that handles your data on our behalf signs comprehensive agreements covering data security, breach notification, and compliance monitoring. We don’t just hope they’ll do the right thing—we make it contractually required.

Making Privacy Requests

Need to exercise one of your rights? The process is straightforward:

No Hidden Costs

Privacy requests don’t cost you anything. We’ve never charged fees for these requests and don’t plan to start. The only exception would be truly excessive requests (which we’ve never encountered), and even then we’d discuss it with you first.

Data Security Measures

Protecting your information isn’t just a legal requirement—it’s fundamental to running a trustworthy business. Here’s what we do to keep your data secure:

Technical Protections

• Encryption everywhere: Your data gets encrypted when it travels between systems and when it sits in our databases
• Access controls: Only team members who actually need access to specific data can get to it
• Regular security audits: We test our systems regularly to find and fix potential vulnerabilities
• Automated monitoring: Our systems watch for suspicious activity around the clock

Organizational Safeguards

• Team training: Everyone on our team learns about data protection and security best practices
• Privacy impact assessments: New features get evaluated for privacy implications before they go live
• Incident response procedures: Clear protocols for handling any security issues that might arise
• Vendor due diligence: We carefully vet any company that processes data on our behalf

Data Breach Response

Despite our best efforts, data breaches can happen to any company. If one affects your personal information, here’s what we’d do:

Immediate Response

Within 72 hours of discovering a breach, we’d notify the relevant European data protection authorities with details about what happened, how many people were affected, and what we’re doing about it.

User Notification

If the breach poses significant risk to your privacy or security, we’d contact you directly without delay. You’d get a clear explanation of what happened, what information was involved, and specific steps you could take to protect yourself.

Remediation

Beyond legal notifications, we’d focus on fixing the underlying problem, strengthening our security measures, and preventing similar incidents from happening again.

Changes to Our Practices

Privacy practices evolve as technology and regulations change. When we update how we handle your data:

• Significant changes get announced via email to all account holders
• We post clear notices on our website explaining what’s different
• You get reasonable time to review changes before they take effect
• For major changes that affect your rights, we might ask for renewed consent

We don’t make changes lightly, and we always prioritize your privacy interests when considering modifications to our data practices.