GDPR Compliance
Our commitment to processing your personal data lawfully, transparently, and in accordance with the General Data Protection Regulation.
Last updated: April 2026
1. Overview
GamblingBacklink.com is fully committed to compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the UK General Data Protection Regulation (“UK GDPR”), as supplemented by the Data Protection Act 2018.
This page sets out our GDPR compliance statement, describes how and why we process personal data, explains the lawful bases we rely on, and outlines the rights available to you as a data subject.
We have implemented appropriate technical and organisational measures to ensure that personal data is processed securely, minimally, and only for the purposes described in our Privacy Policy.
2. Data Controller
GamblingBacklink.com acts as the data controller for all personal data processed through our website and in connection with our services. As data controller, we determine the purposes and means of processing.
Where we engage third-party processors (e.g., Stripe for payment processing, Google for analytics), we act as the data controller and those parties act as data processors under a Data Processing Agreement (DPA).
3. Lawful Basis for Processing
We always identify a lawful basis under Article 6 GDPR before processing personal data. The table below sets out the bases we rely on and the processing activities to which they apply:
| Lawful Basis | Article | When We Use It | Note |
|---|---|---|---|
| Consent | Art. 6(1)(a) | Marketing emails, optional cookies (analytics, advertising) | You may withdraw consent at any time. |
| Contract | Art. 6(1)(b) | Delivering link building services, invoicing, client reporting | Necessary to perform our contractual obligations. |
| Legal Obligation | Art. 6(1)(c) | Accounting records, tax compliance, regulatory reporting | Required under UK/EU law. |
| Legitimate Interests | Art. 6(1)(f) | Responding to enquiries, improving our services, fraud prevention | Balanced against your interests and rights. |
4. How We Process Data
We adhere to the six data protection principles set out in Article 5 GDPR:
As data controller, we are also responsible for demonstrating compliance with these principles — the accountability principle (Article 5(2) GDPR). We maintain internal records of processing activities as required under Article 30 GDPR.
5. International Transfers
Some of our third-party service providers are based outside the UK or EEA. Where we transfer personal data internationally, we ensure adequate safeguards are in place as required by Chapter V GDPR:
- Google LLC (USA): Google Analytics data — transfers covered by Standard Contractual Clauses (SCCs) and Google's DPA.
- Stripe Inc (USA): Payment processing — transfers covered by SCCs and Stripe's DPA.
- Mailchimp / Intuit (USA): Email delivery — transfers covered by SCCs.
We only transfer data to countries with an adequacy decision from the UK ICO or European Commission, or where Standard Contractual Clauses or other appropriate safeguards are in place.
6. Data Subject Rights
As a data subject, you have the following rights under GDPR. We will respond to all verifiable requests within 30 calendar days, free of charge.
7. Data Protection Officer
We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection strategy and ensuring compliance with GDPR. The DPO can be contacted for any data protection matters.
The DPO is independent, reports directly to senior management, and cannot be dismissed or penalised for performing their duties.
8. Supervisory Authority
If you are not satisfied with how we have handled your personal data or responded to your request, you have the right to lodge a complaint with a supervisory authority:
edpb.europa.eu
We would always encourage you to contact us first so we can try to resolve your concern directly before you escalate to a supervisory authority.
Data privacy built into everything we do
Our link building services are designed with compliance at the core — for your regulatory requirements and ours.