From the desk of Lucky Bulletin
Privacy Policy
This page explains what personal data Lucky Bulletin collects, why we collect it, who we share it with, and how to exercise your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1 · Who we are
Lucky Bulletin is an independent editorial title published by Northvale Media Ltd. For any data-protection matter, write to [email protected].
2 · What we collect
We process a deliberately small amount of data:
- Email address — only if you subscribe to our nightly pick, and only after you confirm the subscription
- Click data — when you tap a Visit Site button, we record the operator brand, the timestamp, and an opaque short code that identifies your subscriber record (never your email address itself)
- Basic request data — your approximate country (from your IP address) and browser type, used to keep the page working and to spot abuse
We do not collect any payment, financial, or identity-document data. We do not ask for your name, address, date of birth, or telephone number.
3 · How we use it
- Send you a single email per day with our nightly operator pick — only if you opted in
- Measure which operators our readers find most relevant, so we can refine our rankings
- Keep the page fast and secure, and fix broken links
4 · Legal basis
- Consent (UK GDPR Art.6(1)(a)) — for the email newsletter, processed only after you confirm
- Legitimate interests (Art.6(1)(f)) — for click attribution and basic security, balanced against your reasonable expectations
5 · Cookies and analytics
Lucky Bulletin runs no third-party advertising or analytics cookies. We do not use Google Analytics or any cross-site tracking pixel. The only cookie-like data is the short-lived attribution code set by our own redirect host (nryxo.com) at the moment you tap a Visit Site button — that is how an operator credits our editorial recommendation if you choose to sign up.
6 · Who we share data with
We do not sell, rent, or trade personal data. We share narrowly with:
- Brevo (our email delivery provider, Paris) — to send the newsletter, under a GDPR-compliant Data Processing Addendum
- Cloudflare (hosting and security) — serves the page; does not read the content of your interactions
- Operators — only the opaque attribution code is passed when you tap a Visit Site button. They never receive your email address from us.
7 · Data retention
- Newsletter subscribers — until you unsubscribe, plus 30 days to process the request
- Click-attribution data — 24 months, then aggregated and anonymised
8 · Your rights
Under UK GDPR you have the right to access, rectify, or erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time (including a single click via the unsubscribe link in any email). To exercise any right, email [email protected]. We respond within 30 days.
9 · Complaints
If you believe we have mishandled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
10 · Changes
We will update this page if our practices change. The "Last updated" date above reflects the most recent revision.