1. Who we are
This Card Data notice explains how Pickzy ("we", "us", "our") collects and uses personal data when you visit pickzy.click. Pickzy is the data controller for the personal data described here.
Contact us any time at info@pickzy.click.
2. Personal data we collect
We collect a deliberately limited set of data:
- Technical data — IP address, browser type, device class, operating system, referrer URL.
- Usage data — pages viewed, time spent, scroll depth, clicks on outbound operator links.
- Consent data — the cookie preference you set on first visit (stored in your browser's local storage).
- Communication data — if you email us, we receive the message and your email address.
We do not ask for or collect names, addresses, payment details or account information. We do not sell personal data.
3. Lawful basis for processing
Under Article 6 of the UK GDPR, we rely on the following:
| Purpose | Lawful basis |
|---|---|
| Operating the website (essential functionality) | Legitimate interests |
| Analytics — measuring engagement with our card set | Consent |
| Affiliate click measurement | Consent |
| Replying to your email enquiries | Legitimate interests |
4. How we use your data
- To operate, secure and improve the Pickzy website.
- To measure how readers use our card set — in aggregate, never identifying individuals.
- To comply with our legal obligations, including UKGC affiliate marketing guidance.
- To reply to messages you send us.
5. Cookies
We use cookies in line with the Privacy and Electronic Communications Regulations (PECR). For details, see our Pack Cookies notice.
6. Sharing your data
We share limited data with:
- Analytics providers — only with your consent, for aggregate measurement.
- Hosting and CDN providers — to deliver the site to your browser.
- Affiliate networks and operators — when you click an outbound operator link, the destination receives standard click attribution.
- Public authorities — only where legally required (a valid request from the ICO or law enforcement).
7. International transfers
Some providers may store data outside the United Kingdom. Where this happens we rely on UK-approved transfer mechanisms — the UK International Data Transfer Agreement (IDTA), an adequacy decision, or the appropriate Standard Contractual Clauses with the UK Addendum.
8. How long we keep data
Technical logs: up to 90 days. Analytics data: up to 26 months. Cookie preferences: stored locally in your browser until you clear them. Email correspondence: 2 years from last contact.
9. Your rights
Under the UK GDPR you have the rights to:
- Access — request a copy of the data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data ("right to be forgotten").
- Restriction — ask us to stop processing while a request is resolved.
- Objection — object to processing based on legitimate interests.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent — at any time, where processing relies on consent.
To exercise any of these, email info@pickzy.click. We respond within one calendar month.
Right to complain. If you believe we have mishandled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113. We would, however, appreciate the chance to address your concerns first.
10. Security
We use HTTPS (TLS) for all traffic, restrict log access, and follow data minimisation — collecting only what is necessary. No system is perfectly secure, but we work to protect the limited data we hold.
11. Children
Pickzy is intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has interacted with the site, contact us so we can remove any associated data.
12. Changes
We may update this notice from time to time. The "Last updated" date at the top reflects the most recent change.