Privacy notice
This notice applies to personal data processed when you interact with the Midnite Guide Team publication hosted on this domain. It is distinct from privacy documentation that governs Midnite wagering accounts, payment instruments and in-app behavioural analytics tied to real-money play. If you are both a reader here and a customer there, two parallel notices may apply depending on the activity.
Controller and scope
The site publisher acts as controller for the processing described. Activities limited to purely anonymous browsing may involve minimal personal data; nonetheless, IP addresses and similar identifiers can be personal data under UK law. Contact details for exercising rights sit on the Contact page.
Data categories in detail
Technical telemetry can include IP address, TLS fingerprints where logged by security appliances, HTTP headers, geolocation at city or region granularity, device class, browser engine, screen approximation via CSS queries in some analytics stacks and error stack traces stripped of free-text fields. Communications data comprises email headers, bodies and attachments. We avoid collecting government identifiers unless a rare legal process requires it.
Purposes
We process data to publish journalism-grade guides, to protect infrastructure, to measure aggregated interest in topics, to correspond with readers and to comply with applicable law. We do not operate jackpot pools or KYC databases on this hostname.
Lawful bases mapped to activities
Legitimate interests ground most security and performance processing, balanced against reader rights. Contractual necessity covers fulfilling requests you initiate. Consent covers optional marketing emails if you explicitly opt in and certain non-essential cookies where required. Legal obligation covers retention or disclosure to competent authorities.
Automated decision-making
We do not make decisions that produce legal or similarly significant effects solely by automated means regarding readers. Security tools may auto-block abusive IPs; that is protective filtering, not profiling for editorial punishment.
Processors and onward transfers
Infrastructure vendors, DNS providers, email relays and backup services may process data under contract. We review subprocessors periodically. Transfers outside the UK use appropriate safeguards such as IDTA modules or adequacy decisions.
Retention philosophy
We keep logs long enough to detect delayed attacks, then purge. Email threads follow a pragmatic schedule: open enquiries remain until resolved, then move to an archive with restricted access, then delete unless litigation or regulatory duties require preservation.
Your UK GDPR rights
You may request access, rectification, erasure, restriction, objection to legitimate-interest processing and portability where applicable. You may withdraw consent at any time for processing that relied upon it. You may complain to the Information Commissioner’s Office. We will verify identity proportionately to avoid fraudulent erasure requests.
Breach notification
If a breach risks your rights and freedoms, we will notify regulators and affected individuals as required by law, describing likely impact and mitigation steps without undue delay.
Changes
We will update this notice when processing changes materially. The “last updated” line helps you track revisions.
Questions before you exercise rights
If you are unsure which right fits your situation, email a short description without attaching sensitive documents. We will suggest the appropriate next step under UK GDPR, which might be access first rather than immediate erasure when disputes are open.
Last updated: March 2026.