1. Who we are
KensingtonLounge ("we", "us", "our") is an independent editorial review website operated at appendixway.com. We are the data controller for personal data collected through this site. For questions about this policy, contact us at [email protected].
2. What data we collect
2.1 Data you provide directly
When you use our contact form, we collect: your name, email address, and the content of your message. We do not collect payment information — we are an editorial site, not a transactional platform.
2.2 Data collected automatically
When you visit our site, your browser sends information that may be recorded by our analytics system. This can include: your IP address (anonymised after collection), browser type and version, operating system, referring URL, pages visited, and time spent on each page. We use this data solely to understand how visitors use the site so we can improve content quality.
2.3 Cookies and local storage
We use browser local storage to store your cookie consent preference (key: ksl_consent) and session storage to record age-gate confirmation (key: ksl_age_ok). These do not expire with the session except where noted. We may also place analytics cookies if you consent. Full details are in our Cookie Policy.
3. Legal basis for processing
We process personal data on the following legal bases under UK GDPR:
- Legitimate interests: Analytics data used to improve site quality, fraud prevention, and security monitoring.
- Consent: Analytics and advertising cookies placed only after you opt in via the consent banner.
- Contract performance: Data from contact form submissions processed to respond to your enquiry.
- Legal obligation: Data retained where required by applicable UK law.
4. How we use your data
Contact form data is used solely to respond to your message. We do not use it for marketing without separate explicit consent. Analytics data is aggregated and anonymised before any reporting. We do not sell, rent, or trade your personal data with third parties.
5. Data sharing
We may share data with the following categories of third party, all of whom are bound by appropriate data-processing agreements:
- Analytics providers: If you consent, aggregated behavioural data may be processed by a third-party analytics platform. We do not share individually identifiable data.
- Hosting provider: Our website is hosted on infrastructure that processes access logs in the EU/UK. Logs are deleted on a rolling 30-day basis.
- Affiliate networks: When you click an affiliate link, the destination bookmaker's own tracking pixel may fire. We have no control over that operator's data practices — refer to their own privacy policy.
6. International transfers
We process your data in the United Kingdom. Where any data is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK Adequacy Regulations or Standard Contractual Clauses.
7. Your rights
Under UK GDPR, you have the right to: access the personal data we hold about you; correct inaccurate data; request erasure of data we no longer have a legal basis to hold; object to processing based on legitimate interests; restrict processing while a complaint is investigated; and data portability for data you have provided by consent or contract.
To exercise any of these rights, email [email protected]. We will respond within one calendar month. If you are unsatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Data retention
Contact form data is retained for 24 months from the date of submission, after which it is securely deleted. Analytics data is aggregated on a 90-day rolling basis, with raw records deleted after 90 days. Consent preference records are retained for 13 months to satisfy cookie-consent audit requirements.
9. Security
We implement technical and organisational security measures including HTTPS encryption in transit, access controls limiting data access to authorised personnel, and regular security reviews. No transmission over the internet is completely secure; you send data at your own risk, though we take all reasonable precautions.
10. Changes to this policy
We may update this policy when our data practices change. Material changes will be announced via a notice on the homepage. The "last updated" date at the top of this page always reflects the current version. Continued use of the site after a policy change constitutes acceptance of the updated policy.
11. Contact
For privacy enquiries: [email protected]. For general editorial contact: use our contact form.