Privacy Policy

Last updated: November 2025

This Privacy Policy explains how Huff N’ More Puff collects and uses personal data when you visit our website and read editorial content related to Huff N’ More Puff and other casino-style games. We are established in the United Kingdom and process personal data in accordance with the UK GDPR (the retained version of Regulation (EU) 2016/679), the Data Protection Act 2018 and applicable ePrivacy/PECR rules. For details on cookies and similar technologies, please also read our Cookie Policy. By using the Site, you acknowledge that you have read and understood this Privacy Policy.

Types of data we process

We collect and process only the information needed to operate, secure and improve the Site and to respond to your communications.

Browsing and technical data. When you visit the Site, your browser automatically sends certain information, such as IP address, date and time of access, requested URL, referrer, user-agent (browser and device information) and technical logs related to security and performance. This data is typically stored in server and security logs.

Cookies and similar technologies. We use strictly necessary cookies to deliver the Site, and, where you consent, additional cookies or similar technologies (for example for audience measurement). The exact categories, purposes and storage periods are described in our Cookie Policy and in any cookie banner or settings panel on the Site.

Data you provide voluntarily. If you contact us by email or through a contact form, we will process the personal data you choose to provide, such as your name, email address and the content of your message. Depending on your message, this may include any additional information you decide to share.

Aggregated or statistical data. We may create aggregated or statistical information about use of the Site (for example number of visits, popular pages, general traffic patterns). Where possible, such data is anonymised so that it can no longer be linked to an identified individual.

We do not create user accounts, do not manage player wallets and do not collect payment card details via this Site.

Purposes and legal bases for processing

We process personal data for the following purposes and under the following legal bases:

Providing and securing the Site. We use browsing data and technical logs to deliver web pages, maintain security, monitor performance, prevent abuse and ensure the proper functioning of the Site. The legal basis is our legitimate interests in operating a secure and functional website and the technical necessity of these operations (Article 6(1)(f) UK GDPR).

Responding to your enquiries. If you contact us, we use the data you provide (e.g. name, email, message content) to read your enquiry and send you a response. The legal basis is, depending on the context, the performance of pre-contractual steps at your request and/or our legitimate interests in communicating with users (Article 6(1)(b) and/or 6(1)(f) UK GDPR).

Statistics and audience measurement. We may analyse how the Site is used in order to improve our content and technical setup (for example which pages are read most often, general trends in traffic). Where data is fully anonymised, we rely on our legitimate interests in improving the service. Where analytics requires the use of non-essential cookies or similar technologies that can identify or profile users, we do so only with your consent via the cookie banner/settings (Article 6(1)(a) UK GDPR).

Compliance with legal obligations and protection of rights. We may process and retain certain data to comply with legal obligations, respond to requests from public authorities, or to establish, exercise or defend legal claims. The legal basis is compliance with legal obligations (Article 6(1)(c) UK GDPR) and our legitimate interests in protecting our rights (Article 6(1)(f) UK GDPR).

Third-party marketing tools (if implemented). If we integrate third-party marketing, advertising or profiling tools in the future, these will be activated only where you have given explicit consent via the cookie banner/settings (Article 6(1)(a) UK GDPR).

Where processing is based on consent, you may withdraw that consent at any time using the tools provided (for example, the “Cookie Settings” panel) or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Nature of data provision

Technical data required for browsing (such as IP address and basic connection details) is inherent in using the internet and is necessary for accessing the Site. Without this data, the Site cannot be delivered.

Supplying your personal data when contacting us is voluntary; however, if you do not provide the minimum information needed (for example an email address and basic details of your enquiry), we may not be able to respond.

Non-essential cookies (for analytics, marketing or similar purposes) are optional and controlled via the cookie banner or settings panel. Refusing non-essential cookies does not prevent you from using the basic functions of the Site, although some features may be limited.

How we process and protect your data

We process personal data primarily using electronic systems and, where necessary, limited manual procedures. We implement appropriate technical and organisational measures to protect data against unauthorised access, accidental loss, alteration or disclosure. These measures may include access controls, encryption in transit, security logging, system hardening and regular maintenance.

We do not carry out decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 UK GDPR.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or to meet legal, accounting or reporting requirements. In general:

Technical and security logs are typically kept for up to 12 months, unless extended in specific cases (for example to investigate security incidents or comply with legal obligations).
Communications received by email or contact form are stored for the time needed to handle your request and, where appropriate, for a reasonable period (for example up to 24 months) to maintain a record of correspondence.
Cookies and similar technologies are stored according to their individual lifetimes, as explained in the Cookie Policy and the cookie banner/settings.
Aggregated or anonymised statistics may be retained for longer periods, as they no longer identify individual users.

Retention periods may be extended where required by law or where necessary for the establishment, exercise or defence of legal claims.

Recipients of personal data

Personal data may be accessed by:

Members of our team or authorised personnel who need it to operate the Site or respond to enquiries.
Service providers who provide technical, hosting, security, maintenance, email, analytics or consent management services. These providers act as processors on our behalf and are bound by contractual obligations to handle data securely and only according to our instructions.
Public authorities or law enforcement agencies, where we are legally required to disclose data or where disclosure is necessary to protect our rights and those of others.

We do not sell or publish your personal data.

International transfers

Some of our technical service providers may operate or store data outside the United Kingdom or the European Economic Area. Where this results in transfers of personal data to countries that may not provide the same level of protection as the UK, we ensure that such transfers are made in compliance with Chapter V UK GDPR and relevant UK data protection rules.

This may involve using:

UK adequacy regulations/decisions (where applicable),
Standard Contractual Clauses or similar contractual safeguards, and/or
Additional technical and organisational measures to protect the data.

More detailed information on specific third-party tools and their locations may be available in our Cookie Policy, in the cookie settings panel and/or on request by contacting us.

Children and vulnerable persons

The content on huffandpuff.uk relating to gambling and casino-style games is strictly intended for adults (18+). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can assess the situation and, where appropriate, delete the data.

Your data protection rights

Under the UK GDPR, and subject to the conditions and exemptions set out in the law, you have the following rights in relation to your personal data:

Right of access: to obtain confirmation as to whether we process your personal data and, if so, to receive a copy and certain information.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of your personal data in certain circumstances (for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis).
Right to restriction of processing: to request that we limit processing in certain situations (for example while the accuracy of data is being verified).
Right to object: to object, on grounds relating to your particular situation, to processing carried out on the basis of our legitimate interests. You also have an absolute right to object to processing for direct marketing purposes, where applicable.
Right to data portability: where processing is based on consent or on a contract and carried out by automated means, you may request to receive your personal data in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where technically feasible.
Right to withdraw consent: where processing is based on your consent, you can withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, please contact us at [email protected] and provide enough information for us to identify you and process your request. We may need to ask for additional information to confirm your identity and ensure your rights are respected.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK data protection supervisory authority, if you believe your data protection rights have been infringed. Further information is available on the ICO website.

Links to third-party sites

The Site may contain links to external websites or resources, including online casinos, game providers, information portals and social networks. Accessing these sites is at your own discretion and is governed by their own privacy policies and terms.

We are not responsible for how third parties process personal data, nor do we control their content, security practices or compliance. We recommend that you read the privacy and cookie policies of any external sites you visit.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time for legal, technical or operational reasons (for example if we introduce new services, change our providers or if laws and guidance change).

When the Policy is updated, we will post the revised version on this page with a new “Last updated” date at the top. Your continued use of huffandpuff.uk after such changes have been published will be taken as acknowledgement of the updated Policy. We encourage you to review this page periodically.

Contact

For questions about this Privacy Policy, to exercise your rights or to raise any privacy-related concern, you can contact us at:

Email: [email protected]
Аddress: 30 St Mary Axe, London EC3A 8BF, United Kingdom