1. Who we are
palmy.buzz runs as a standalone review outlet covering online casinos, published at the domain palmy.buzz. In GDPR terms (both UK and EU), we act as the data controller for everything described on this page. No casino sits behind our brand, no player profiles are kept, and nothing involving a deposit, a wager or a cash-out passes through our infrastructure.
2. What personal information we gather
Our collection is restricted to the bare minimum required to keep the website online and to respond when readers message us. Here is the full picture:
- The sole personal details on file come from whatever you decide to include in the contact form or in an email. Never write to us and you stay completely anonymous to us.
- Light, de-identified traffic data shows us which articles get read and gives a broad hint of which country the visitor is in, without ever identifying a specific person.
- Routine server log files record IP addresses for a short period so we can keep the site secure.
- A tiny handful of cookies remembers your consent answer along with a couple of simple display preferences.
No payment details ever reach us, we request no identity paperwork, no advertising profile is built around individual visitors, and personal information is never sold, rented out or passed to third parties for their own use.
3. Data retained, reasons, and storage periods
| Category of information | Why we hold it | Retention period |
|---|---|---|
| Contact form submissions and emails (sender name, email address, body of the message) | So we can respond and, when useful, refine the site | Removed 24 months after the last reply in the conversation |
| Grouped analytics (page visits, referring URL, country or region, device category) | To see which articles perform and where the site needs work | Maximum of 14 months, afterwards kept purely in summary form |
| Server access logs (IP, time stamp, URL requested) | Defence against attacks, blocking spam, and fixing technical issues | A moving 30-day period |
| Cookie preference record | So the consent banner does not reappear once answered | 12 months, or whenever you wipe your browser storage |
4. Lawful bases under GDPR
According to Article 6 of the UK GDPR and EU GDPR, exactly two lawful bases apply to our processing, and no others:
- Consent (Art. 6(1)(a)) powers the functional and analytics cookies. Outside the strictly necessary ones, no cookie fires until you click accept on the banner, and your agreement can be pulled back at any moment.
- Legitimate interest (Art. 6(1)(f)) covers answering the enquiries you choose to send, operating the strictly necessary cookies, and holding brief server logs that safeguard the site.
5. Cookies and site tracking
Only a small number of cookies are in use. The strictly necessary group runs on every page view because the website relies on them to work, while the analytics and functional group fires only once you opt in via the banner. For the full list, cookie by cookie, head over to our Cookies page.
6. Third parties with access to your information
Several site functions depend on vetted processors. Each one gets only the data it genuinely needs, and all of them are tied down by GDPR-compliant contractual clauses or by comparable legal protections.
- Hosting provider. The site runs on a European host that keeps routine server logs for a short window to protect the service.
- Email provider. Every message addressed to hello@palmy.buzz is processed by a Europe-based email host operating under a signed data-processing contract.
- Analytics. Aggregated, de-identified traffic measurement runs only after you have agreed to it (IP anonymisation stays on at all times).
- Affiliate networks. Clicking an outbound casino link may let the operator or its affiliate network drop a cookie of their own so any later sign-up is credited to palmy.buzz. That happens on their website, where their privacy policy applies the instant you arrive.
7. GDPR rights you can exercise
Residents of the UK, the EEA or any region with equal safeguards have the following entitlements:
- Access to the personal records we store about you.
- Correction of anything that is inaccurate or missing.
- Erasure, better known as the "right to be forgotten". Simply drop a line to hello@palmy.buzz asking us to delete whatever personal information we have on file; verified requests are processed within the statutory 30-day window.
- Restriction or objection regarding the way we process it.
- Withdrawal of consent for analytics cookies whenever you like, with no knock-on effect anywhere else.
- Portability of data, allowing you to receive your information in a structured, machine-readable format.
- Filing of a complaint with the supervisory authority where you live (for UK residents, that is the ICO at ico.org.uk).
8. Get in touch
Got a privacy question, a data-subject access request or a concern about how your information is handled? Send a message to hello@palmy.buzz. Add enough context so we can locate your record, usually the email address used earlier plus any relevant dates, and spell out exactly what action you want us to take.
9. Changes and revisions
This page gets a review each time the tools we use change or the relevant regulations shift. Any substantial update bumps the last-updated date shown above, and the earlier edition is kept in our internal archive. The copy currently published carries the date 31 July 2026.