Privacy notice
Short version: a name and an email if you give them to us, server logs because a web server produces them, and a United States processor called OneSignal that runs the list and the notifications.
Last updated 17 July 2026. Written under the UK GDPR and the Data Protection Act 2018.
Who we are
primavactor is an independent editorial chronicle written by Helena Marchbank in York, England. It is not a company. We have no company number, no registered office and no gambling licence, because we are a publication rather than a business, and we would rather say that plainly than invent credentials. For anything in this notice, write to [email protected]. That address reaches the person responsible for this site and the decisions about your data. We are the controller.
What we collect
- The subscription form. Your email address, which is required, and your name, which is not. Nothing else. There is no phone field on this site and we do not want your number.
- Email to us. Whatever you put in it, which is up to you.
- Server logs. Our host records IP address, user agent, the page requested and a timestamp, because that is how a web server works and how it stays up.
- Push subscription data. If you allow notifications, OneSignal records a device or browser token, plus tags we set: the domain, the name you gave us, and the value "form" to record where the subscription came from.
We do not run analytics, advertising pixels, cookie banners for tracking, fingerprinting or profiling. We do not build a picture of you, we do not score you, and we do not sell, rent or share your data with anyone for their own purposes.
Why, and on what lawful basis
| Purpose | Data | Lawful basis |
|---|---|---|
| Sending you new entries, corrections and web notifications | Name, email, push token, tags | Consent, Article 6(1)(a). You ticked a box. You can untick it whenever you like. |
| Replying to an email you sent | Whatever is in it | Legitimate interests, Article 6(1)(f): answering someone who wrote to us. |
| Keeping the site running and secure | Server logs | Legitimate interests, Article 6(1)(f): operating and defending a website. |
Who processes it
- OneSignal, Inc., United States. Our processor under Article 28 of the UK GDPR. It stores the subscriber list, sends the emails and delivers the web notifications. Its script loads from its content delivery network, registers a service worker on this domain and writes identifiers into your browser's localStorage and IndexedDB. Its privacy policy is at onesignal.com/privacy_policy.
- Our hosting provider, which stores the files and produces the server logs, as a processor.
That is the whole list. There is nobody else.
Transfers outside the UK
OneSignal is in the United States, so subscribing means your name, email and push identifiers leave the UK. That transfer is made under the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, together with the safeguards in OneSignal's data processing agreement. We are telling you this rather than burying it because it is exactly the sort of thing sites in this field pretend is not happening.
How long we keep it
- Subscription data: until you unsubscribe or ask us to remove you, and then it goes. There is no dormant list.
- Email correspondence: up to two years, so that we can follow up a correction.
- Server logs: as long as our host keeps them for operational and security purposes, typically a small number of months.
Your rights
Under the UK GDPR you can ask us for access to your data, correction of it, erasure of it, restriction of processing, portability of it, and you can object to processing based on legitimate interests. Where we rely on consent you can withdraw it at any time, which is as easy as clicking unsubscribe or sending one line to [email protected]. Withdrawing does not undo anything we did lawfully beforehand.
We answer within one month and it does not cost you anything. We will not ask you to justify the request.
Complaints
If we get it wrong, tell us and we will fix it. You can also complain to the Information Commissioner's Office, the UK supervisory authority: ico.org.uk, helpline 0303 123 1113. You do not have to come to us first.
Children
This site is about gambling venues and is written for adults. We do not knowingly collect data from anyone under 18. If you believe we hold data about a child, write to us and it will be deleted.
Changes
If this notice changes in a way that affects you, the date at the top changes and the mailing list is told. We do not make quiet edits to legal pages.