Privacy Policy
This Privacy Policy explains what personal data Glitzy Bingo collects, how we use it, and the rights you have over it.
In short: we collect only the information needed to run Glitzy Bingo, respond to you and provide the features you choose to use. We do not sell your personal information, we only send marketing emails when you have opted in, and you can ask to access, correct or delete your information at any time, subject to the conditions explained below.
Glitzy Bingo ("we", "us" or "our") is committed to protecting your privacy and handling your personal data in line with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy applies to the Glitzy Bingo website at glitzybingo.co.uk and explains our practices in plain terms. Please read it alongside our Cookie Policy and our Terms and Conditions.
Who We Are (Data Controller)
The data controller responsible for your personal data is Rachael Bullock, a sole trader based in Derbyshire, England, trading as Glitzy Bingo. We are registered with the Information Commissioner's Office (ICO), the UK's data protection regulator, under registration reference ZC240480.
If you have any questions about this policy or how we handle your data, you can contact us at or through our contact page.
What Personal Data We Collect
We only collect the data we need to run the Website and provide our content and features. We collect most of it directly from you when you sign up, get in touch, submit a review or play the game. We also collect limited technical information automatically when you visit, through our server logs, cookies and similar technologies. Depending on how you use the site, the data may include:
Newsletter data. If you sign up to our Daily Daub newsletter, we collect your email address, and the date and confirmation of your subscription. We use a double opt-in process, so you confirm your subscription before we send you anything. Our newsletter is sent from our own self-hosted system rather than through a third-party email marketing platform. We do not use tracking pixels, open tracking or click tracking in our emails.
Contact data. If you get in touch through our contact page or by email, we collect the details you give us, such as your name, email address and the content of your message.
Reviews and user content. If you submit a review, rating or comment, we collect the content you provide and any display name you choose, along with limited technical data used to verify the submission and guard against spam and fake reviews. Please do not include sensitive personal information, account numbers or payment details in reviews.
Game data. If you play our Dauble word game, we may store limited data needed to run the game, such as scores, progress or a chosen nickname, depending on the features you use.
Technical and usage data. Like most websites, we automatically collect limited information when you visit, such as your device and browser type, the pages you view, and how you arrived at and move around the site. Our analytics are first-party and self-hosted, meaning we run them ourselves rather than sending your data to a third-party analytics provider. Instead of persistent cross-site tracking, the analytics use a limited identifier that changes daily and is not used to follow you across other websites. We do not use IP addresses for analytics, advertising or marketing profiling.
We process IP addresses only to keep the site running and secure and to detect and prevent fraudulent or abusive traffic, such as spam submissions, fake reviews and automated attacks.
The gambling-related parts of the Website are intended for adults only, and our services are not directed at children. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from someone under 18, we will delete it without undue delay.
How and Why We Use Your Data (Lawful Bases)
Under UK GDPR we must have a lawful basis for using your personal data. We rely on the following:
Consent. We send you the Daily Daub newsletter and any marketing emails on the basis of your consent, given through our double opt-in sign-up. We set non-essential advertising cookies on the basis of the consent you give through our cookie banner, and you can withdraw that consent at any time.
Legitimate interests. We rely on our legitimate interests to run and secure the Website, to respond to your enquiries, to moderate and publish reviews, to understand our audience in aggregate through first-party analytics so we can improve the site, and to protect the site against fraud, abuse and misuse. Our analytics are balanced against your privacy rights and we provide a simple opt-out. Where we rely on legitimate interests, we weigh them against your rights and freedoms.
Legal obligation. We may process data where we need to comply with a legal or regulatory obligation, or to establish, exercise or defend legal claims.
Cookies
Full details are in our Cookie Policy. In short: essential cookies, such as your session, your consent choice, your game sign-in if you asked to be remembered, and the analytics opt-out if you set it, work without consent. Anything non-essential asks first via our consent banner, which offers granular categories, honours the Global Privacy Control browser signal, and can be reopened at any time using the "Cookie Preferences" link in the footer.
Affiliate Links and Third-Party Operators
Glitzy Bingo is an affiliate website. Our affiliate links are simply tagged outbound links. When you click one, any tracking that credits a sign-up to us takes place on the operator's or affiliate system's side, once you have left our Website, under their own privacy arrangements, not ours. We do not receive your gambling account details, and any affiliate network involved acts for the operator, not as our processor. Once you leave Glitzy Bingo and arrive on an operator's own website, you are subject to that operator's privacy policy and terms. We encourage you to read them.
Who We Share Your Data With
We do not sell your personal data, and we keep sharing to a minimum. Much of what would ordinarily be handed to third parties is instead handled within our own systems: our newsletter, our analytics and our cookie-consent recording are all first-party and self-hosted, rather than run through a third-party email marketing platform, analytics provider or consent-management platform.
We do rely on a small number of providers to run the Website, including our website hosting provider and technical services used to keep the site secure and available. These providers process data only as needed to provide their service to us. Where we need to investigate suspected fraudulent or abusive traffic, such as a spam or fake form submission, we may manually use IPinfo to look up the network or rough location associated with the IP address involved. An IP address is sent to IPinfo only when we manually carry out that lookup for this purpose. IPinfo is based in the United States, so this may involve an international transfer, as explained below.
We may disclose data to regulators, law enforcement or other authorities where we are required to do so by law, or to protect our rights, safety or property.
Where any provider we use processes data outside the UK, we take steps to ensure it is protected by an appropriate safeguard recognised under UK data protection law, such as UK adequacy regulations, the International Data Transfer Agreement, or standard contractual clauses with additional safeguards. This applies, for example, to IPinfo, which is based in the United States, where a transfer takes place only when we manually carry out an IP lookup for the security and anti-abuse purposes described above.
How Long We Keep Your Data
We keep personal data only for as long as we need it for the purposes set out in this policy, or as required by law. Form submissions and enquiries are kept for as long as needed to deal with them, then reviewed and deleted in line with our retention procedures. Unverified submissions expire automatically after 24 hours, or 48 hours for reviews. Published reviews remain until they are removed. Game data lasts until you ask us to delete it. Newsletter addresses are kept until you unsubscribe or your subscription becomes inactive. Consent records are kept as compliance evidence for an appropriate period. Rate-limiting data self-destructs within an hour, and server logs follow our host's standard rotation. When we no longer need personal data, we delete or anonymise it.
Your Rights
Under UK data protection law, you have the right to:
- be informed about how we use your personal data;
- ask for a copy of the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data in certain circumstances;
- ask us to restrict how we use your data in certain circumstances;
- object to processing based on our legitimate interests, and to direct marketing at any time;
- receive data you provided to us in a portable format where the law applies; and
- not be subject to solely automated decisions that produce legal or similarly significant effects.
We do not carry out automated decision-making that produces legal or similarly significant effects about you.
You can exercise any of these rights, or withdraw consent, by contacting us at . Withdrawing consent does not affect processing carried out before you withdrew it. You can unsubscribe from our emails at any time using the link in any email or our unsubscribe page.
How to Complain
If you have a concern about how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at the Information Commissioner's Office website, by phone or by post. We would appreciate the chance to address your concerns before you approach the ICO.
Security
We take reasonable technical and organisational measures to keep your personal data secure and to protect it against loss, misuse and unauthorised access. However, no method of transmission over the internet or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the ICO, and you where required, in line with our legal obligations.
Links to Other Sites
The Website contains links to third-party websites, including gambling operators and other resources. This Privacy Policy applies only to Glitzy Bingo. We are not responsible for the privacy practices of any third-party site, and we encourage you to read their privacy policies before providing them with any personal data.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or the law. Any changes take effect once posted on this page, and the date below shows when it was last updated. Please check back periodically.
Contact
Glitzy Bingo is operated by Rachael Bullock, sole trader, based in Derbyshire, England. For any privacy matter, contact us at or through our contact page.
This Privacy Policy was last updated in September 2026.