Who this policy covers
This privacy notice explains how Boomerang review portal (boomerang.org.gr) collects, uses and protects your personal information when you visit our site. We are an independent information and review portal – we do not operate the casino itself, and this policy concerns only the data handled by our editorial site, not by the operator's own platform.
The data controller for this portal is the team behind boomerang.org.gr. If you register an account or submit payment details to the casino operator, their own privacy policy governs that relationship – ours covers only what happens on this review site.
What information we collect
We gather two broad categories of data: information you give us directly, and information we observe automatically as you browse.
Information you provide: When you contact us through the email address [email protected], we collect your name, email address and the content of your message. We do not ask for payment details, identity documents or account credentials – those belong to the operator, not to us.
Information we collect automatically: Like most websites, we log technical data including your IP address, browser type, operating system, pages visited, time spent on each page, and the site that referred you here. This happens through server logs and analytics scripts, and helps us understand which sections are most useful to readers.
Cookies and tracking technologies
Our site uses cookies – small text files stored on your device – to remember your preferences and measure site performance. For full details on which cookies we set and how to manage them, see our separate Cookie Policy.
We rely on third-party services for analytics (such as Google Analytics) and advertising. Those providers set their own cookies and operate under their own privacy policies. We do not control what they collect or how they use it, though we configure our analytics to anonymise IP addresses where possible.
Why we process your data
We use the information above for the following purposes:
- To respond to your enquiries sent via email.
- To improve the site's content, navigation and layout based on how visitors use it.
- To measure the effectiveness of our editorial work and identify topics readers care about.
- To comply with legal obligations, such as responding to valid requests from law enforcement or regulators.
We do not sell, rent or trade your personal data to third parties. We do not use it for automated decision-making or profiling.
Lawful basis under UK GDPR
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, every use of personal data requires a lawful basis. Ours are:
- Legitimate interests – understanding how the site is used, so we can make it clearer and more useful. This applies to analytics and server logs.
- Consent – where you've agreed to marketing or advertising cookies through the banner that appears on your first visit.
- Contract – when you contact us with a question, processing your email is necessary to answer it.
- Legal obligation – if we're required by law to retain records or respond to a regulator.
Who we share data with
We share personal information only in these limited circumstances:
- Hosting and infrastructure providers – the companies that run the servers this site lives on. They process data on our behalf under contract and cannot use it for their own purposes.
- Analytics providers – services like Google Analytics that help us measure traffic and engagement. They operate under their own privacy policies.
- Advertising partners – if you've consented to advertising cookies, those networks may receive behavioural data to show relevant ads. You can withdraw consent at any time through your browser settings.
- Legal and regulatory authorities – if required by law, court order or valid regulatory request.
We do not transfer personal data outside the United Kingdom or the European Economic Area unless the recipient country offers adequate protection under UK GDPR, or we've put in place appropriate safeguards such as standard contractual clauses.
Your rights under UK data protection law
You have the following rights regarding your personal information, and you can exercise them by contacting us at [email protected]:
| Right | What it means |
|---|---|
| Access | Request a copy of the personal data we hold about you. |
| Rectification | Ask us to correct inaccurate or incomplete information. |
| Erasure | Request deletion of your data where we no longer need it, or you withdraw consent. |
| Restriction | Ask us to stop processing your data temporarily while a dispute is resolved. |
| Portability | Receive your data in a machine-readable format, or have it sent to another controller. |
| Objection | Object to processing based on legitimate interests, including for marketing purposes. |
| Withdraw consent | If processing relies on your consent (e.g. marketing cookies), you can withdraw it at any time. |
We aim to respond to requests within one month. There's no fee unless your request is clearly unfounded or excessive, in which case we may charge a reasonable administrative cost or decline to act.
How to exercise your rights
Send your request to [email protected], stating which right you wish to exercise and providing enough detail for us to locate your data. We may ask for proof of identity to prevent unauthorised disclosure.
If you're not satisfied with how we've handled your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. You can reach them at ico.org.uk or by calling 0303 123 1113.
How long we keep your data
We retain personal information only as long as necessary for the purposes described above, or as required by law. In practice:
- Contact-form submissions and email enquiries are kept for up to two years, then deleted unless there's an ongoing correspondence or legal reason to retain them.
- Server logs and anonymised analytics data are kept for up to 26 months, in line with standard retention periods for web analytics.
- Marketing consent records are kept until you withdraw consent, then archived for a further six months to demonstrate compliance.
Protection of minors
This site is intended for visitors aged 18 and over (18+). We do not knowingly collect personal data from anyone under 18. If you're a parent or guardian and believe your child has provided us with information, contact [email protected] and we'll delete it promptly.
Gambling is restricted to adults. If you share a device with someone under 18, consider using parental-control software such as Net Nanny or Qustodio to prevent access to gambling-related sites.
Security measures
We take reasonable steps to protect your data from unauthorised access, loss or misuse. This includes encrypted connections (HTTPS), secure hosting environments and restricted access to personal information within our team. However, no system is completely secure – if you notice a vulnerability or suspect a breach, let us know immediately at [email protected].
Changes to this policy
We may update this privacy notice from time to time to reflect changes in our practices, legal requirements or the services we use. When we make significant changes, we'll update the date below and, where appropriate, notify you by email or through a banner on the site.
Continued use of the site after changes take effect means you accept the revised policy. If you disagree with a change, stop using the site and contact us to exercise your data rights.
Contact us
For questions about this privacy policy, to exercise your data rights, or to raise a concern, email [email protected]. We'll respond within 48 hours during business days.
Last updated: 25 March 2026
This page is provided for information and marketing purposes only. We are not a casino operator, a bookmaker or an organiser of gambling. Access to this content is restricted to persons aged 18 and over (18+). For free, confidential support with gambling, visit BeGambleAware.org.
Last updated: