This Privacy Policy outlines how kellyleonardini.com ("we", "our", or "the Platform") collects, processes, stores, and protects personal data when you browse our educational portal, read our editorial research, interact with technical comparisons, or submit communications via our contact forms.
We operate as an independent informational and research resource focusing on payment technology, banking clearing rails, and digital verification frameworks. We do not offer or conduct real-money gaming activities directly. We treat your personal data in strict compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Privacy and Electronic Communications Regulations (PECR).
1. Data We Collect
Depending on how you interact with our website, we may collect and process the following categories of information:
-
Analytics & Technical Telemetry: Anonymized or pseudonymized technical logs generated automatically when you visit our pages, including truncated IP addresses, user-agent data, browser type and version, referring URL, operating system, and timestamp metrics.
-
Contact & Correspondence Records: Your name, email address, message body, and any supplemental information voluntarily provided if you reach out via our contact form or send correspondence directly to support@kellyleonardini.com.
-
Cookie Consent Preferences: Preference flags recorded locally in your browser storage indicating whether you have consented to non-essential analytics or chosen strictly functional browsing modes.
Data Processing Matrix
The table below breaks down the technical categories of data we process, our legitimate operational purposes, the lawful bases under UK GDPR Article 6, and corresponding retention thresholds:
| Data Category | Data Elements | Purpose of Processing | Lawful Basis (UK GDPR) | Retention Window |
|---|---|---|---|---|
| Server Logs & Traffic Metrics | Truncated IP, timestamp, user agent, request URI, HTTP response code | DDoS prevention, network defense, server health monitoring | Legitimate Interests (Art. 6(1)(f)) | 30 to 90 calendar days |
| Aggregated Analytics | Aggregated session duration, device viewport category, navigation flow | Evaluating content quality and reading experience | Consent (Art. 6(1)(a)) | Up to 14 months (non-identifying) |
| Direct Inquiries & Support | Name, email address, message details | Addressing compliance questions, factual reviews, user assistance | Legitimate Interests / Consent | Up to 12 months following resolution |
| Cookie Preference Flags | Binary consent decision tokens, expiry date | Remembering your stated preference for cookies | Legal Obligation (PECR / Art. 6(1)(c)) | 6 to 12 months |
2. Why We Use Data & Purpose of Processing
We collect and process personal data exclusively for explicit, legitimate purposes that support our portal’s non-commercial operational needs:
-
Improving Content Quality: Assessing which editorial guides and technical breakdowns are most valuable helps our reviewers update stale references and provide helpful coverage of the UK gaming landscape.
-
Protecting Infrastructure & Security: Safeguarding our server environments from malicious scrapers, automated brute-force scripts, injection exploits, and network-level denial-of-service attempts.
-
Providing Reader Support: Responding directly to technical corrections, editorial questions, and data subject requests sent to our team.
3. Storage, Cryptographic Security & Retention
We enforce technical and organizational safeguards designed to prevent accidental loss, unauthorized access, alteration, or disclosure of data:
We retain personal data only for as long as necessary to fulfill the purposes for which it was originally collected. Communications received via our support desk are archived for a maximum of 12 months to maintain an audit trail for regulatory inquiries, after which they are securely purged from our mail servers. Server log files expire and are automatically overwritten within 90 days.
4. User Rights Under UK GDPR
Under the Data Protection Act 2018 and UK GDPR, you hold defined statutory rights regarding your personal data:
-
Right of Access: You can request confirmation of whether we hold personal data relating to you and receive a copy of that data through a formal Subject Access Request (SAR).
-
Right to Rectification: You may ask us to correct inaccurate, outdated, or incomplete records we hold about you.
-
Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data where there is no compelling legal reason for its continued retention.
-
Right to Object & Restrict Processing: You may object to the processing of your data based on legitimate interests or request that we freeze active processing while a dispute is resolved.
-
Right to Complain: If you believe our processing of your personal information infringes statutory privacy standards, you have the right to lodge a formal complaint with the UK supervisory authority: the Information Commissioner's Office (ICO) at ico.org.uk.
5. Cookies and Tracking Technologies
Our website uses lightweight session tokens and functional cookies to ensure page loading reliability, preserve user interface preferences, and protect against bot spam. We do not deploy invasive third-party cross-site profiling trackers without your prior opt-in consent.
For full details regarding the specific cookies we set, their lifespans, and instructions on how to manage or revoke your consent, please consult our dedicated Cookie Policy.
6. Third-Party Disclosures & Infrastructure Partners
We do not sell, rent, trade, or distribute your personal information to third parties. We may share pseudonymized technical logs with carefully vetted technical service providers acting under strict Data Processing Agreements (DPAs):
-
Hosting & Content Delivery Networks: Cloud server facilities and edge-caching providers operating within the UK and European Economic Area (EEA).
-
Legal Compliance Disclosures: We may disclose information if required to do so by applicable UK law, court order, or official request by a competent law enforcement body.
7. Updates to This Privacy Statement
We may update this Privacy Policy periodically to reflect changes in regulatory guidance, statutory amendments to UK data protection legislation, or improvements to our technical setup. The "Last Reviewed" date at the top of this page indicates the most recent revision. Any updates take effect immediately upon publication.