GDPR Compliance

1. Introduction

This GDPR compliance statement explains how DodgySpins complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

DodgySpins is the data controller for personal data processed through our website. We are committed to protecting your privacy and ensuring compliance with UK GDPR.

3. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Legitimate Interest: For website analytics and affiliate tracking
• Consent: For cookies and marketing communications
• Contract: For providing our services
• Legal Obligation: For compliance with applicable laws

4. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

4.1 Right of Access

You can request a copy of the personal data we hold about you.

4.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

4.3 Right to Erasure

You can request deletion of your personal data in certain circumstances.

4.4 Right to Restrict Processing

You can request limitation of processing in certain circumstances.

4.5 Right to Data Portability

You can request transfer of your data to another controller.

4.6 Right to Object

You can object to processing based on legitimate interests.

4.7 Rights Related to Automated Decision Making

You have rights regarding automated decision-making and profiling.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy:

• Analytics data: 26 months
• Affiliate tracking data: 2 years
• Cookie data: As specified in cookie settings
• Legal compliance data: As required by law

6. Data Security

We implement appropriate technical and organizational measures to protect personal data:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection
• Incident response procedures

7. Data Transfers

We may transfer personal data to third countries outside the UK. When we do so, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the UK government
• Standard contractual clauses
• Binding corporate rules
• Certification schemes

8. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our data protection compliance. You can contact our DPO at:

Email: dpo@dodgyspins.com

9. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with UK GDPR.

ICO Contact Information:

Website: ico.org.uk

Phone: 0303 123 1113

10. Exercising Your Rights

To exercise any of your rights under UK GDPR, please contact us at:

Email: gdpr@dodgyspins.com

We will respond to your request within one month of receipt.

11. Updates to This Statement

We may update this GDPR compliance statement from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes.