This Privacy Policy explains how Hatwedid, operating at whatwedid.co.uk, collects, uses, and protects your personal data when you visit our website. Hatwedid acts as the data controller for all personal information processed through whatwedid.co.uk. By using our site — which provides independent reviews and information about Mecca Casino and related gambling services in Great Britain — you acknowledge the practices described in this policy. This policy is effective from 1 January 2026 and complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information We Collect
Information You Provide
- Contact form submissions: your name and email address when you contact the Hatwedid team directly.
- Newsletter sign-ups: your email address if you opt in to receive updates from whatwedid.co.uk.
- Comments or feedback: any information you voluntarily submit through interactive features on the site.
- Correspondence: records of any communications you send to us regarding our Mecca Casino reviews or other content.
Information Collected Automatically
- IP address and approximate location: collected to understand our audience's geographic distribution and maintain site security.
- Browser type and operating system: used to optimise the whatwedid.co.uk experience across devices.
- Pages visited and time spent: behavioural data that helps us improve our casino review content.
- Referral sources: information on how you arrived at whatwedid.co.uk, including search engines or affiliate links.
- Cookie identifiers: unique IDs stored in your browser, detailed in the section below.
Cookies We Use
Whatwedid.co.uk uses cookies to ensure the website functions correctly, to understand how visitors engage with our Mecca Casino review content, and to support our affiliate partnerships. You can manage cookie preferences through your browser settings or our consent banner at any time.
| Cookie Type | Purpose | Retention |
|---|---|---|
| Essential | Enables core site functionality, security, and page navigation on whatwedid.co.uk. | Session / up to 1 year |
| Analytics | Collects anonymised data on visitor behaviour (e.g., Google Analytics) to help us improve our review pages. | Up to 26 months |
| Affiliate / Marketing | Tracks clicks on casino operator links so that partners can attribute referrals from whatwedid.co.uk. | Up to 30 days |
| Preferences | Remembers your cookie consent choices and display settings across visits. | Up to 12 months |
| Social Media | Supports share buttons and embedded content from third-party social platforms. | Session / varies by provider |
How We Use Your Data
- To deliver and continually improve the casino review content and information published on whatwedid.co.uk.
- To respond to enquiries, feedback, or requests submitted through our contact channels.
- To send newsletters or update emails where you have given explicit consent.
- To analyse site traffic and user behaviour using aggregated, anonymised analytics data.
- To manage and report affiliate referrals to our casino operator partners.
- To comply with applicable UK legal obligations, including responsible gambling guidance.
- To detect and prevent fraudulent activity or unauthorised access to whatwedid.co.uk.
Legal Bases for Processing
Whatwedid.co.uk processes your personal data under the following legal bases established by the UK GDPR and the Data Protection Act 2018. Where you provide your email address for newsletters or accept non-essential cookies, we rely on your freely given consent (Article 6(1)(a) UK GDPR), which you may withdraw at any time without affecting prior processing. For analytics, site improvement, and affiliate tracking activities, we rely on our legitimate interests (Article 6(1)(f) UK GDPR) as a publisher of gambling review content, provided those interests are not overridden by your rights and freedoms. Where we are required to retain certain information by law, we process it on the basis of a legal obligation (Article 6(1)(c) UK GDPR).
Third Parties & Affiliate Links
Whatwedid.co.uk contains affiliate links to licensed casino operators, including Mecca Casino. When you click these links, you may be directed to third-party websites that operate under their own privacy policies, for which Hatwedid accepts no responsibility. We earn a commission on qualifying referrals, and affiliate cookies may be set at the point of click. We also use third-party analytics providers such as Google Analytics; these providers may process data on our behalf as data processors under appropriate data processing agreements. We do not sell your personal data to any third party.
Your Privacy Rights
- Right of Access: request a copy of the personal data whatwedid.co.uk holds about you.
- Right to Rectification: ask us to correct any inaccurate or incomplete personal data.
- Right to Erasure: request deletion of your personal data where there is no lawful reason for us to continue processing it.
- Right to Data Portability: receive your data in a structured, machine-readable format and transfer it to another controller.
- Right to Object: object to processing based on legitimate interests, including direct marketing.
- Right to Restrict Processing: ask us to limit how we use your data in certain circumstances.
- Right to Withdraw Consent: withdraw consent for newsletter emails or non-essential cookies at any time.
- Right to Lodge a Complaint: contact the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your rights have been infringed.
To exercise any of the above rights, please contact the Hatwedid team via the details provided in the Contact section below. We will respond within 30 days in accordance with UK GDPR requirements.
Data Security & Retention
Hatwedid implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Whatwedid.co.uk is served over HTTPS encryption, and access to personal data is restricted to authorised personnel only. We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy or to comply with legal obligations. Email addresses collected for newsletters are retained until you unsubscribe. Analytics data is retained in anonymised or aggregated form for up to 26 months. Contact form submissions are reviewed and deleted within 12 months unless ongoing correspondence requires otherwise.
Contact
If you have any questions, concerns, or requests relating