Privacy charter

Effective 30 March 2026 · “We” / “us” = Top10ukselection, steward of top10ukselection.co.uk.

Keep this open while you read guides, follow partner exits, or pass the age wall, slider, and cookie ribbon. Plain-language first; GDPR plus Ireland’s Data Protection Act 2018 (as amended) still rule wherever they bite.

1. Controller seat

Top10ukselection remains controller for this host. Privacy post routes via Reach us so humans can separate ham from tickets before answering.

2. Data buckets

• Infra traces. Hits may log IP, user-agent, referrer, timestamp, path. Providers rotate these for security + abuse tracing.
• On-device stash. Cookies / localStorage park age clearance, puzzle clearance, banner choice—micro keys. Clock detail lives in the Cookie atlas.
• Mail you start. Address, narrative, attachments—used to reply or satisfy law, not for side projects.

3. Lawful grounds

Keeping lights on, repelling abuse, and remembering consent lean on legitimate interests (GDPR Art. 6(1)(f)). Optional tags idle until the banner says yes. Inbound messages ride pre-contract / legitimate interest in answering.

4. Who else glimpses it

We don’t broker lists. Hosts, DNS, mail transports may eye logs during ordinary ops. Casinos you open in fresh tabs don’t pipe bet ledgers here by default.

5. Beyond the EEA

Vendors abroad need SCCs, adequacy, or another blessed mechanism—name the ticket if you want the instrument cited.

6. Retention cadence

HTTP logs: vendor defaults (often days–weeks). Mail: until the thread closes or statute demands longer. Browser tokens: until you nuke site data.

7. Your toolkit

Access, correction, erasure, restriction, portability, objection—where statutes allow. Irish DPC (or your local desk) hears appeals if we stumble. Expect identity proof before we unlock folders.

8. Minors

Site is framed 18+; no intentional child modelling. If someone underage slipped past gates, ping us—we’ll purge what’s possible.

9. Revisions

Meaningful edits earn a fresh stamp here. Where permitted, continued browsing after posting signals you’ve noticed the update.