Privacy Policy
Last Updated: January 2026
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit crestlinehub.com. It is provided in accordance with the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).
1. Data Controller
The data controller responsible for your personal data is:
Hainan Kangnacai E-commerce Co LTD
Website: crestlinehub.com
Email: contact@crestlinehub.com
As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring your data is processed lawfully, fairly, and transparently.
2. What Personal Data We Collect
We collect and process the following categories of personal data:
2.1 Data Collected Automatically
When you visit our website, we automatically collect:
| Category | Examples | Purpose |
|---|---|---|
| Technical Data | IP address, browser type and version, operating system, device type | Website security and functionality |
| Usage Data | Pages visited, time spent on pages, click patterns, scroll depth | Analytics and site improvement |
| Location Data | Country, region, time zone (derived from IP) | Content localisation |
| Referral Data | Referring website URL, search terms, campaign parameters | Marketing analytics |
2.2 Data You Provide Voluntarily
If you contact us, we collect:
| Category | Examples | Purpose |
|---|---|---|
| Contact Data | Name, email address | Responding to your enquiry |
| Communication Data | Content of your message | Handling your request |
2.3 Data We Do Not Collect
We do not collect:
- Special category data (racial/ethnic origin, political opinions, religious beliefs, health data, sexual orientation)
- Financial data (we do not process payments)
- Criminal conviction data
3. How We Use Your Data
We process your personal data for the following purposes:
| Purpose | Legal Basis (UK GDPR) | Details |
|---|---|---|
| Website operation and security | Legitimate interests (Art. 6(1)(f)) | Ensuring the website functions correctly and is protected from threats |
| Analytics and improvement | Legitimate interests (Art. 6(1)(f)) or Consent (Art. 6(1)(a)) | Understanding how visitors use our site to improve content and user experience |
| Responding to enquiries | Contract (Art. 6(1)(b)) | Processing your request when you contact us |
| Affiliate tracking | Legitimate interests (Art. 6(1)(f)) | Recording when users click through to partner sites for commission purposes |
| Legal compliance | Legal obligation (Art. 6(1)(c)) | Complying with applicable laws and regulations |
| Fraud prevention | Legitimate interests (Art. 6(1)(f)) | Detecting and preventing fraudulent activity |
Legitimate Interests Assessment
Where we rely on legitimate interests, we have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms. Our legitimate interests include:
- Maintaining website security and preventing abuse
- Understanding audience behaviour to improve our services
- Managing commercial relationships with affiliate partners
You have the right to object to processing based on legitimate interests. See Section 9 for details.
4. Cookies and Tracking Technologies
We use cookies and similar technologies on our website. These include:
4.1 Essential Cookies
Required for the website to function. Cannot be disabled.
4.2 Analytics Cookies
Help us understand how visitors interact with our website. We use Google Analytics, which processes:
- Pages viewed
- Session duration
- Geographic location (country level)
- Device and browser information
Google Analytics uses IP anonymisation. You can opt out using the Google Analytics Opt-out Browser Add-on.
4.3 Marketing/Affiliate Cookies
Track clicks to partner websites for commission attribution.
For full details, see our Cookie Policy.
You can manage cookie preferences through your browser settings. Blocking certain cookies may affect website functionality.
5. Data Sharing and Recipients
We share your personal data with the following categories of recipients:
| Recipient | Purpose | Safeguards |
|---|---|---|
| Hosting providers | Website infrastructure | Data processing agreements |
| Analytics providers (Google) | Website analytics | Standard Contractual Clauses |
| Affiliate networks | Commission tracking | Data processing agreements |
| Professional advisers | Legal/accounting services | Professional confidentiality |
| Law enforcement/regulators | Legal compliance | As required by law |
We do not sell your personal data to third parties.
6. International Data Transfers
Your personal data may be transferred to and processed in countries outside the UK, including:
- United States (hosting, analytics)
- European Economic Area
For transfers outside the UK, we ensure appropriate safeguards are in place:
- UK adequacy decisions: Transfers to countries deemed adequate by the UK Government
- Standard Contractual Clauses (SCCs): Approved contractual terms for international transfers
- Binding Corporate Rules: Where applicable with corporate partners
You can request a copy of the safeguards we use by contacting us.
7. Data Retention
We retain personal data only for as long as necessary:
| Data Type | Retention Period | Reason |
|---|---|---|
| Analytics data | 14 months | Industry standard for trend analysis |
| Server logs | 90 days | Security and troubleshooting |
| Contact enquiries | 2 years | Record-keeping and follow-up |
| Affiliate click data | 2 years | Commission reconciliation |
After the retention period, data is securely deleted or anonymised.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- SSL/TLS encryption for data in transit
- Secure hosting infrastructure
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
While we take reasonable precautions, no internet transmission is completely secure. We cannot guarantee the absolute security of data transmitted to our website.
9. Your Rights Under UK GDPR
Under the UK Data Protection Act 2018 and UK GDPR, you have the following rights:
9.1 Right of Access (Article 15)
You can request a copy of the personal data we hold about you.
9.2 Right to Rectification (Article 16)
You can request correction of inaccurate or incomplete personal data.
9.3 Right to Erasure (Article 17)
You can request deletion of your personal data in certain circumstances, including:
- Data is no longer necessary for the original purpose
- You withdraw consent (where consent was the legal basis)
- You object to processing and there are no overriding legitimate grounds
9.4 Right to Restrict Processing (Article 18)
You can request we limit how we use your data while we address your concerns.
9.5 Right to Data Portability (Article 20)
You can request your data in a structured, commonly used, machine-readable format.
9.6 Right to Object (Article 21)
You can object to processing based on legitimate interests. We will stop processing unless we demonstrate compelling legitimate grounds.
9.7 Rights Related to Automated Decision-Making (Article 22)
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
How to Exercise Your Rights
To exercise any of these rights, contact us at:
Email: contact@crestlinehub.com
We will respond to your request within one month. This may be extended by two months for complex requests, in which case we will inform you.
We may request identification to verify your identity before processing your request.
These rights are provided free of charge, except for manifestly unfounded or excessive requests.
10. Right to Complain
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We encourage you to contact us first so we can try to resolve your concerns.
11. Third-Party Links
Our website contains links to third-party websites, including casino operators. When you click these links:
- You leave our website
- The third party's privacy policy applies
- We are not responsible for their data practices
We recommend reviewing the privacy policy of any third-party site before providing personal data.
12. Children
Our website is intended for users aged 18 and over only. We do not knowingly collect personal data from children under 18.
If you believe we have collected data from a child, please contact us immediately and we will delete it.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors.
When we make material changes:
- We will update the "Last Updated" date at the top
- For significant changes, we may provide additional notice on our website
We encourage you to review this policy periodically.
14. Contact Us
For questions about this Privacy Policy or our data practices:
Hainan Kangnacai E-commerce Co LTD
Email: contact@crestlinehub.com
Website: crestlinehub.com
This Privacy Policy is provided in accordance with the UK Data Protection Act 2018 and UK GDPR (the retained EU law version of the General Data Protection Regulation).