Privacy Policy
This page sets out what personal information Kinghills gathers from visitors, why, where it's held, who it's shared with, and how to exercise your rights under UK privacy law. The technical companion — cookies, analytics, browser storage — lives on the Cookie Policy page; this is the plain-English version of the same arrangement.
Kinghills runs as an independent informational platform; the broader context is on the About page. This privacy policy covers the Kinghills website alone. The moment a reader clicks through to an operator's site, that operator's own privacy policy takes over; Kinghills shares no data with operators beyond the limited form described below.
1. What Kinghills is
Kinghills publishes reviews and guides on online casinos available to UK players. The flagship operator review is the Kinghills Casino homepage. The site hosts no games, runs no player accounts, takes no deposits, holds no funds and processes no withdrawals. There's no signup. There's no login. A default visit involves no data exchange beyond ordinary web traffic. Where Kinghills does collect personal data — for instance, when you write to us through the contact channels — this page spells out exactly what becomes of it.
2. UK privacy law context
Kinghills handles personal information in keeping with the UK GDPR and Data Protection Act 2018 and the UK GDPR principles overseen by the Information Commissioner's Office (ICO). European visitors have their GDPR rights honoured too. Californian visitors have their CCPA rights honoured so far as they apply. Wherever a stricter rule applies under any of these frameworks, the stricter rule prevails.
3. What data Kinghills collects
Three categories: technical traffic data, contact data you submit voluntarily, and aggregated analytics.
| Category | What is collected | Why | Legal basis |
|---|---|---|---|
| Technical traffic data | IP address (anonymised after 24h), browser type, device type, requested page URL, timestamp, referrer. | Serve pages, block abuse, debug performance problems. | Legitimate interest under UK GDPR Article 6 legitimate interest. |
| Voluntary contact data | Name, email address, message text, and any supporting documents you attach. Provided only if you write to us. | Respond to your enquiry. | Consent under UK GDPR consent basis (you provide the data; we use it for the stated purpose). |
| Aggregated analytics | Pseudonymous traffic statistics produced by Google Analytics 4 with IP anonymisation switched on. | See which pages are useful and which aren't. | Consent (you can decline analytics cookies on first visit). |
Kinghills does not collect: financial data (no payment processing happens on this domain), gambling-account credentials (we run no accounts), biometric data, location finer than country level (inferred from an anonymised IP), or special-category data (race, religion, health, sexual orientation, political opinion). Targeted advertising and remarketing aren't used; the funding model behind the site is on the Affiliate Disclosure page.
4. Cookies and similar technologies
The cookies Kinghills uses, the third-party services that drop them, and how to control them are set out in full on the Cookie Policy page. In short: strictly necessary cookies (page loading, consent-banner state, abuse prevention) are always set; analytics and affiliate-tracking cookies are set only with your consent via the cookie banner; and you can revise your choice at any time through the footer link.
5. Affiliate links and operator-side tracking
When you click an outbound operator link on Kinghills, three things happen. First, an internal redirect at /go logs the click for our analytics (whether or not you carry on). Second, your browser is forwarded to the operator's site. Third, the operator may set its own cookies and count the visit as a referral. Kinghills hands the operator no name, email or other identifying personal data. The operator merely learns that "a visitor came from Kinghills". Should you go on to open an account on the operator's site, that registration falls under the operator's own privacy policy, not this one.
6. How long data is retained
- IP addresses: in raw form an IP is kept no longer than 24 hours, purely to guard against abuse; after that the address is stripped — the closing octet on IPv4, the trailing 80 bits on IPv6 — leaving an anonymised version that we then keep for up to 14 months to compile traffic figures.
- Contact correspondence: emails and any attachments are held for 24 months for follow-up and audit, then deleted unless still under active discussion.
- Analytics events: Google Analytics 4 data is retained for 14 months under our settings, then deleted automatically.
- Cookie consent record: the consent record is stored locally in your browser for 12 months, after which the consent banner shows again.
Where the law requires longer retention — for example, tax records under HMRC record-keeping rules for affiliate-related accounting — that data is kept only for the legally required period and used for nothing else.
7. Who Kinghills shares data with
Three controlled categories. Service providers running parts of the Kinghills infrastructure — web hosting, content delivery, email — each bound by a written data-processing agreement that confines their use of the data to delivering the service. Analytics providers (Google Analytics 4): IP-anonymised traffic data only, with no personally identifying information. Law-enforcement bodies and regulators: only on a valid legal demand, and only the data that demand covers. Kinghills never sells, rents or trades personal data to anyone.
8. Where data is stored
Kinghills infrastructure sits on cloud providers in the UK and the European Economic Area. A few service providers — Google Analytics 4 in particular — process data in the United States. Where data leaves the UK, the recipient is bound either by Standard Contractual Clauses or by an equivalent regime the ICO has judged to offer protection at least as strong as UK law.
9. Your rights
Under the UK GDPR and equivalent international laws, you hold the following rights over any personal data Kinghills keeps about you.
- Access: ask what we hold and get a copy.
- Correction: request that inaccurate data be put right.
- Deletion: request deletion of your data, subject to legal retention rules.
- Withdrawal of consent: where processing rests on consent, you may withdraw it at any time without undoing prior lawful processing.
- Complaint: if you think Kinghills has mishandled your data, you can complain to the ICO at ico.org.uk. UK readers should normally contact us first so we get a chance to put it right.
To exercise any of these rights, write to the privacy address given on the Contact page. Kinghills will reply within 30 days, the window the UK GDPR requires.
10. Children's privacy
Kinghills content is meant for adult UK readers. The site is neither directed at nor intended for anyone under 18. We don't knowingly collect personal data from minors. If we learn that data has been submitted by someone under 18, that data is deleted and, where relevant, the parent or guardian is notified.
11. Security
Kinghills applies industry-standard security controls: TLS 1.2+ for all data in transit; access controls and least-privilege rules across internal systems; routine review of who can access what; logging of administrative actions; and periodic third-party penetration testing of the public site. No system is unbreakable; if a personal-data breach likely to cause serious harm occurs, affected individuals are notified directly and the ICO is informed under the ICO breach notification regime within the UK GDPR.
12. Changes to this policy
If this policy changes, the "Last updated" date at the top is amended. Material changes — new categories of data collected, new third-party processors, altered retention periods — carry a banner on the home page for at least 30 days. Minor housekeeping edits (rewording, link updates) don't trigger a banner.
13. Contact
Privacy questions are best sent through the privacy contact given on the Contact page. Editorial questions about Kinghills content go via the editorial channel; correction requests follow the procedure on the Editorial Policy page. Player-safety guidance that applies to anyone reading this site is on the Responsible Gambling page.