Privacy Notice

How ChelseaReel collects and uses personal data, the legal basis for each activity, and how to exercise your UK GDPR rights.

Last reviewed: May 2026

1. Controller Identity and Contact Details

The data controller for this website is ChelseaReel ("we", "us", "our"), operated at the domain quartoroom.com. ChelseaReel is an independent editorial publication reviewing UKGC-licensed bookmakers for accumulator bettors in the United Kingdom. We do not hold a financial services licence and do not process financial transactions on this site.

To contact us about your personal data, use the form on our contact page selecting "Data or privacy request" as the subject. We acknowledge all data requests within three business days and respond fully within one calendar month in accordance with UK GDPR Article 12.

2. Data Protection Officer

ChelseaReel is a small editorial operation and is not required to appoint a Data Protection Officer under UK GDPR Article 37 — we do not carry out large-scale systematic monitoring of individuals and our core activities do not require regular and systematic processing of special categories of data. Privacy queries should be directed to us using the contact details in section 1 above.

3. Personal Data We Collect, Purposes, and Legal Basis

We collect and process personal data in three contexts, each with a distinct legal basis under UK GDPR Article 6:

3a. Browsing and Technical Data (Legal basis: Legitimate interests — Article 6(1)(f))

When you visit this website, our hosting infrastructure automatically records your IP address (truncated to the last octet for anonymisation), browser type and version, operating system, referrer URL, and pages visited, together with a timestamp. This data is used solely for security monitoring (detecting DDoS and scraping activity) and aggregate traffic analysis. It is not linked to any individual identity. We have assessed that this processing is necessary for the legitimate interests of maintaining a secure, functional public website, and that it does not override your interests or fundamental rights because the data is anonymised and not used for profiling or marketing.

3b. Cookie Preferences (Legal basis: Legal obligation for strictly necessary; Consent — Article 6(1)(a) for optional)

We store a cookie preference object in your browser's localStorage under the key cr_jnq_consent. This object records whether you have consented to analytics cookies and marketing/affiliate attribution cookies, together with a timestamp of your choice. The strictly necessary session flag (cr_jnq_age in sessionStorage) is required for the age-gate to function and is set without consent. Optional cookie categories are set only if you consent using our cookie panel. You may change your preferences at any time using the "Cookie settings" button in the footer.

3c. Contact Form Submissions (Legal basis: Contract — Article 6(1)(b); or Legitimate interests — Article 6(1)(f))

If you submit our contact form, we collect your name, email address, the subject category you selected, and the body of your message. This data is used exclusively to respond to your enquiry. Where your enquiry constitutes a pre-contractual request (e.g., an affiliate partnership enquiry), the legal basis is Article 6(1)(b). For other enquiries (press, corrections, general), the legal basis is our legitimate interest in providing a responsive editorial service. We do not add contact form submissions to any marketing list. Data from contact form submissions is retained for 24 months from the date of submission, after which it is deleted.

4. Legitimate Interests Assessment Summary

Where we rely on legitimate interests (Article 6(1)(f)), we have assessed that: (i) the processing is necessary for the stated purpose; (ii) it would be reasonably expected by a visitor to a publicly accessible editorial website; and (iii) the impact on individuals is minimal because no profiling, targeting, or sensitive data processing occurs. You may object to legitimate-interests processing at any time — see section 8 below.

5. Recipients of Personal Data

We do not sell personal data. We do not share personal data with the bookmakers listed on this site. The following third-party processors may receive limited data in the course of providing services to us:

  • Hosting infrastructure provider: receives server log data (anonymised IP addresses and request metadata) as an unavoidable function of hosting. Data is processed under a data processing agreement and retained according to standard server log rotation (typically 30 days).
  • Google (analytics and consent management): If you consent to analytics cookies, aggregate usage data (pages viewed, session duration, browser type) is shared with Google Analytics. No personally identifiable information is passed. Google acts as a data processor under a standard data processing agreement. Google's privacy policy is available at policies.google.com/privacy.
  • Google Fonts: Fonts are loaded from Google's CDN. Your browser makes a request to Google's servers which may include your IP address. This is a standard web practice; no cookie is set by Google Fonts and no personal data is retained beyond the immediate CDN request.

Beyond the above, no other third parties receive your personal data.

6. International Transfers

Our hosting infrastructure is located in the United Kingdom or the European Economic Area. Where data is transferred to the United States (e.g., to Google for Analytics), such transfers are made under Standard Contractual Clauses approved by the ICO, supplemented by Google's additional safeguards. You can obtain a copy of the relevant safeguards by contacting us at the address in section 1.

7. Retention Periods

  • Server logs (anonymised): 30 days, then deleted by automatic log rotation.
  • Cookie preference object (localStorage): Stored locally in your browser. Not stored on our servers. Cleared when you clear your browser storage or withdraw consent.
  • Contact form submissions: 24 months from the date of submission, then deleted.
  • Analytics data (if consented): Subject to Google Analytics retention settings, typically 14 months, after which Google automatically deletes the data.

8. Your Rights Under UK GDPR

You have the following rights in relation to personal data we hold about you. To exercise any right, contact us as described in section 1. We will respond within one calendar month (extendable by two months for complex requests with notification).

  • Right of access (Article 15): You may request a copy of the personal data we hold about you and information about how it is used.
  • Right to rectification (Article 16): You may request correction of inaccurate personal data.
  • Right to erasure (Article 17): You may request deletion of your personal data where there is no overriding legal basis for retention.
  • Right to restriction (Article 18): You may request that we restrict processing in certain circumstances (e.g., while a rectification request is assessed).
  • Right to data portability (Article 20): Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
  • Right to object (Article 21): You may object to processing based on legitimate interests at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
  • Right to withdraw consent (Article 7(3)): Where processing is based on consent (analytics and marketing cookies), you may withdraw consent at any time via the "Cookie settings" button in the footer. Withdrawal does not affect the lawfulness of processing before withdrawal.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, if you believe we have not handled your personal data in accordance with UK GDPR. You can contact the ICO at ico.org.uk or by telephone on 0303 123 1113. We would, however, appreciate the opportunity to address any concern directly before you contact the ICO — please reach out to us first using the details in section 1.

Changes to This Notice

We review this privacy notice at least annually and update it when our data practices change. The "last reviewed" date at the top of this page indicates when the current version was checked. Material changes are noted at the top of the page for 30 days following the change.