Privacy Policy

Your privacy matters to MobileSpin. This Privacy Notice explains, in plain language, what personal data we collect when you use our website, why we use it, who we share it with, how long we keep it, and the rights you have. We never sell your personal data.

Who is responsible for your data

The data controller responsible for your personal data is Cabot Cove 03 Limited, the company that operates MobileSpin, a company based in Malta licensed and regulated by the Malta Gaming Authority under licence MGA/CRP/178/2009. If you have any questions about this notice or how we handle your data, you can reach us through our contact page.

What data we collect

We collect only what we need to run the website, keep it secure and respond to you. We do not ask you to create a profile simply to read our pages, and we do not build advertising profiles about you. The categories of data we may process are:

• Usage and analytics data — anonymised, aggregated information such as the pages you view, how you arrived, your approximate region (derived from your IP address, not your precise location), and the type of device and browser you use. This is collected only if you accept analytics cookies.
• Your cookie choice — whether you accepted or rejected non-essential cookies, so we can respect your decision on future visits.
• Contact details you provide — if you write to us, the name, email address and message you choose to submit, used solely to answer your enquiry.
• Technical and security logs — IP address, request times and similar technical information, kept briefly to protect the site against abuse, fraud and attacks.

Why we use your data and our legal basis

Under the GDPR we rely on the following legal bases:

• Consent (Art. 6(1)(a) GDPR) — to load analytics cookies after you accept them.
• Legitimate interests (Art. 6(1)(f) GDPR) — to keep the site secure, prevent fraud and abuse, and understand aggregate traffic so we can improve our content.
• Taking steps at your request (Art. 6(1)(b) GDPR) — to respond to enquiries you send us.
• Legal obligation (Art. 6(1)(c) GDPR) — where we are required by law to retain or disclose certain information.

Who we share it with

• Analytics provider — Google (Google Analytics), which processes data on our behalf under its data-processing terms.
• Hosting, CDN and security — our infrastructure and content-delivery provider, which keeps the site fast and protected.
• Authorities — only where we are legally required to disclose information.

We do not sell, rent or trade your personal data to third parties for their own marketing.

International transfers

Some of our service providers may process data outside the European Economic Area (EEA). Where that happens, the transfer is protected by an adequacy decision or by Standard Contractual Clauses approved by the European Commission, so your data receives an equivalent level of protection.

How we protect your data

We use technical and organisational measures to keep your data safe, including encryption in transit (HTTPS), access controls that limit who can see information, and reputable service providers who are contractually bound to protect it. While no website can guarantee absolute security, we work to reduce risk and to detect and respond to any incident promptly. We do not use your data for automated decision-making that produces legal effects about you.

How long we keep it

We keep aggregated analytics data for up to 24 months, after which it is deleted or fully anonymised. Messages you send through the contact form are kept only for as long as needed to deal with your enquiry and any follow-up. Security and technical logs are kept for a short period and then deleted. Where the law requires us to retain certain records for longer, we keep them only for that required period.

Your rights

Depending on where you live, you have rights over your personal data. These include the right to:

• Access — ask for a copy of the data we hold about you;
• Rectification — have inaccurate or incomplete data corrected;
• Erasure — ask us to delete your data where there is no overriding reason to keep it;
• Restriction and objection — limit or object to how we process your data;
• Portability — receive your data in a structured, commonly used format;
• Withdraw consent — change your cookie or other consent choices at any time, without affecting processing already carried out.

To exercise any of these rights, contact us through our contact page. We will respond within one month and will not charge you for a reasonable request. We may need to verify your identity before acting, to make sure we do not disclose your data to anyone else.

You also have the right to lodge a complaint with your data protection supervisory authority. In your region this is Datatilsynet (datatilsynet.no).

Children

Our website and services are intended only for adults aged 18 and over. We do not knowingly collect personal data from anyone under that age; if you believe a minor has provided us data, please contact us and we will delete it.

Changes to this notice

We may update this Privacy Notice from time to time. The latest version always appears on this page, and material changes will be highlighted here.