This notice explains how IRIS collects, uses and protects your personal information when you visit this site. We are committed to handling your data responsibly and in line with UK data protection law.
Scope of This Notice
This privacy policy applies to iris-initiative.org.uk and covers all pages you visit here. It describes the data we gather, the legal grounds for processing it, and the choices you have.
IRIS is an independent information portal. We publish guides and articles to help people understand the connection between gambling and mental health, and to signpost support services. We do not provide counselling, medical advice or direct treatment.
Categories of Information We Collect
When you use this site, we may collect the following:
- Technical data – your IP address, browser type, device information, and the pages you view
- Communication data – your email address and the content of messages you send us
- Usage data – how you navigate the site, which links you follow, and how long you spend on each page
We do not collect payment details, account credentials or sensitive personal information such as health records. Any contact you make with us is voluntary.
Lawful Basis for Processing
We process your data under the following legal grounds:
- Legitimate interests – to operate the site, answer enquiries and improve the information we provide
- Consent – where you have actively agreed to receive updates or communications
- Legal obligation – to comply with data protection and other applicable law
You have the right to object to processing carried out on the basis of legitimate interests. Contact us at [email protected] to exercise that right.
How We Use Your Data
The information we collect helps us:
- Respond to questions, corrections and topic suggestions you send
- Understand which parts of the site are most useful and where clarity is needed
- Detect technical problems and keep the site secure
- Meet our legal and regulatory obligations
We analyse anonymised, aggregated data to see how the site is used. Individual visits are not tracked or profiled.
Who We Share Data With
We may share your personal information with:
- Service providers – hosting companies, email platforms and analytics tools that help us run the site
- Legal authorities – where required by law or to protect the rights and safety of others
We do not sell or rent your data to third parties. Processors acting on our behalf are contractually required to handle your information securely and only for the purposes we specify.
Transfers Outside the UK
Some of the services we use may process data outside the United Kingdom. Where this happens, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions recognised under UK GDPR.
Your Rights Under UK GDPR
You have the right to:
- Access – request a copy of the personal data we hold about you
- Rectification – ask us to correct inaccurate or incomplete information
- Erasure – request deletion of your data where there is no compelling reason to retain it
- Restriction – limit how we use your data while a complaint or correction is being resolved
- Portability – receive your data in a structured, commonly used format
- Objection – object to processing based on legitimate interests or direct marketing
To exercise any of these rights, contact us at [email protected]. We will respond within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.
How Long We Keep Your Data
We retain personal information only as long as necessary for the purposes it was collected. Technical logs are typically deleted after 90 days. Email correspondence is kept for up to two years to maintain continuity in our responses.
Once the retention period expires, we securely delete or anonymise your data.
Children and Young People
This site is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently gathered data from a minor, contact us immediately at [email protected] and we will delete it.
Changes to This Policy
We may update this privacy policy to reflect changes in law or how we operate the site. The revised version will be published here with a new effective date. We encourage you to review this page periodically.
Contact
For questions about this privacy policy or how we handle your data, email [email protected]. We aim to reply within 48 hours.
This is an information site. We do not sell goods or services, and we do not act on behalf of any third party.