Data protection
Privacy Policy
Last updated: 12 August 2026. This policy explains how Rank7 (rank7.co.uk) handles personal data when you browse our editorial comparison pages. We are not a gambling operator and we do not open player accounts for casino services.
1. Who we are
Rank7 is an independent UK-facing editorial project. For privacy questions contact dataprotection@rank7.co.uk. Where UK GDPR and the Data Protection Act 2018 apply, Rank7 acts as a controller for data collected on this website.
2. Scope of this notice
This notice covers rank7.co.uk pages, including the homepage shortlist, safer gambling materials and legal documents. It does not govern Midnite, Mr Jack Vegas or any other third-party operator. When you leave for an operator site, their privacy rules apply.
3. Data we may collect
We may process technical logs such as IP address, browser type, device class, referring URL and timestamps. If you email us, we process the address and message content you send. Local storage may hold age confirmation and cookie preference flags on your device. We do not ask for payment card data on Rank7 itself.
4. Purposes of processing
We use data to deliver pages securely, remember age and cookie choices, measure aggregated traffic, answer correspondence, improve content clarity and meet legal duties. We do not sell personal data. Editorial scoring of casinos does not require your identity.
5. Legal bases
Depending on the activity we rely on: legitimate interests (running a stable editorial site and understanding aggregate readership), consent (non-essential cookies where the banner applies), contract-like steps when you ask us to reply to a specific request, and legal obligation when regulators or courts require records.
6. Cookies and similar tools
Essential storage keeps the site usable after you confirm age or set cookie preferences. Optional analytics run only after acceptance where configured. Details live in our Cookie Policy. You can clear local storage in browser settings; doing so may re-show the age gate.
7. Affiliate and outbound links
Some links to UKGC-licensed brands are affiliate links. Clicking them may allow partners or networks to know a visit came from Rank7 through standard referral parameters. We do not control how operators process data after you arrive. Read their notices before registering.
8. Recipients and processors
Hosting, email and security vendors may process limited technical data on our behalf under written terms. We share information with authorities when required by law. We do not publish private email threads on the public site.
9. International transfers
Infrastructure may involve servers outside the UK. Where transfers occur we look for appropriate safeguards such as UK adequacy regulations or standard contractual clauses offered by providers. Ask us if you need a current summary for a specific vendor.
10. Retention
Server logs are kept only as long as needed for security and diagnostics, then deleted or anonymised. Email threads are retained while a query is active and for a limited archive period afterward unless a longer legal hold applies. Local storage keys remain until you clear them or they expire by design.
11. Your rights under UK GDPR
You may request access, rectification, erasure, restriction, objection to certain processing and data portability where applicable. Where processing rests on consent, you can withdraw it without affecting earlier lawful use. Rights are not absolute — we may refuse or limit requests when exemptions apply, and we will explain why.
12. How to exercise rights
Email dataprotection@rank7.co.uk with enough detail for us to locate your data. We may ask for reasonable identity checks. We aim to respond within one month, or explain if an extension is needed for complex cases.
13. Children
Rank7 is for adults aged 18+. We do not knowingly collect data from children. If you believe a minor has submitted information, contact us so we can delete it promptly.
14. Security measures
We use HTTPS, access controls on publishing tools and vendor diligence proportional to a small editorial site. No method is perfect. Avoid sending sensitive identity documents to Rank7 unless we expressly request them for a rights request.
15. Complaints
If you are unhappy with our reply, you may contact the Information Commissioner’s Office (ICO) in the United Kingdom. We would appreciate the chance to resolve concerns first via dataprotection@rank7.co.uk.
16. Changes to this policy
We may update this page when products, vendors or law change. The “Last updated” date moves with material edits. Continued use after updates means you should re-read the notice when you return.
17. Categories we do not seek
Rank7 does not ask you to upload passports, bank statements or selfies to browse reviews. We do not run know-your-customer checks. If an email thread somehow includes sensitive identity material you sent unsolicited, we will delete it when it is no longer needed to answer your question, unless a legal hold requires temporary retention.
18. Marketing messages
We do not operate a mass marketing list for casino promotions from Rank7 itself. If that changes, we will request a clear opt-in and provide an unsubscribe path. Affiliate operators may contact you under their own rules after you register with them — that contact is outside Rank7’s control.
19. Automated decisions
Rank7 does not make automated decisions that produce legal or similarly significant effects about you as an individual visitor. Casino ratings on the site evaluate operators, not readers. Search filters on the homepage run in your browser and do not create a durable profile on our servers.
20. Practical examples
Example A: you confirm age — a local storage flag is written so the gate does not flash on refresh. Example B: you decline optional cookies — analytics stay off while essential preference storage may still record that decline. Example C: you email a correction about Midnite’s cashier note — we process your address and message to investigate and reply, then archive or delete according to section 10.