Privacy Policy and Cookie Notice

• Risk Signal responses: the answers you select and the resulting risk level, stored against a random session ID generated in your browser. No name, no account, no IP address.
• Email address (optional): only if you ask us to send your reflection by email, or you contact us directly.
• Open Room posts: the words you submit, with a timestamp. Posts are shown publicly and anonymously — please do not include details that identify you or anyone else.
• Anonymous usage events: which sections and buttons are used, so we can improve the site.

Responses are used in aggregate to understand patterns of gambling-related harm, improve the Risk Signal reflection, and shape education and prevention work. We do not sell data, and we do not use it for advertising or profiling of individuals.

Our lawful basis is your consent, which you give before the Risk Signal check begins. You can complete the check without consenting to data collection.

Odds calculations and PDF downloads run on your device. If you choose an email report, you consent to sending your email address and entered figures securely to prepare it; this optional service is not anonymous and is separate from the Risk Signal screening.

We do not save odds-report inputs or recipient addresses in application records. The email service processes your address for delivery and maintains its operational delivery records. Your report figures are encrypted in a private download link that expires after 7 days. Anyone with that link can download the report, so do not share it. The link cannot be revoked individually before it expires.

The report is sent only at your request and is not used for marketing. Contact Partnerships@dutyofcareuk.org about personal-data requests.

There are no advertising or tracking cookies on this site. Essential storage holds your random session ID, your Risk Signal progress so it can be resumed, and your cookie choice. Optional storage covers anonymous usage measurement, which you can switch off below.

Identifiable request data (such as an email you send us) is kept no longer than 30 days unless you ask us to keep it. Anonymous survey and usage records are retained in aggregate for research.

To request deletion, email Partnerships@dutyofcareuk.org with your session ID (shown at the end of the Risk Signal check) and we will remove the matching records.

Under UK GDPR you can ask for access to, correction of, or deletion of personal data we hold about you, and you can withdraw consent at any time. Because most of what we store is anonymous, we may need your session ID to locate anything at all.

DUTYOFCAREUK LIMITED, England, United Kingdom — Partnerships@dutyofcareuk.org

See also our Trust and Security page.