Privacy Policy
This Privacy Policy explains how contenteam OÜ (registry code 16044560, Ahtri tn 12, 10151 Tallinn, Estonia) (“we,” “us,” “the Provider”) processes personal data in connection with the website https://igamingtextlab.com/ (the “Website”). iGamingTextLab is a brand of contenteam OÜ. This Policy is written in plain language in accordance with Articles 12–13 of Regulation (EU) 2016/679 (GDPR).
1. Who we are and what this Policy covers
We are a content production agency working with projects in iGaming, betting, crypto, fintech, SaaS, and IT. We provide services including full-service iGaming media, human copywriting, human-assisted AI content, and localization in 68 languages for 103 markets.
This Policy explains how we process personal data collected through the Website. It covers data you provide when you contact us, when you book a call with us, and when you browse the Website. It also covers cookies and similar technologies used on the Website.
If you use our content production platform (available separately at client.igamingtextlab.com), additional documents apply, including our Terms of Service and Data Processing Agreement.
2. What data we collect
Data you give us:
- Contact data: name, email address, company name, and any other information you provide when you write to us by email or through the contact window on the Website.
- Booking data: when you book a call, we collect your name, email address, time zone, and anything you write in the comment field, together with the date and time of the meeting. Booking runs on our own scheduling service hosted on our servers.
- Communication data: messages you send us by email or through the Website.
Data we collect automatically:
- Log data: IP address, browser type, operating system, pages visited, referrer, timestamps. These are written by our web server.
- Cookie data and advertising marks: only with your consent, as described in Section 8.
Data we do not collect: we do not collect special categories of data (health, biometric, political opinions, etc.) and we do not ask you to provide them.
3. Why we process your data and on what legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to your inquiries and requests | Performance of a contract or steps prior to entering a contract (Art. 6(1)(b)) |
| Arranging, confirming and holding a call you book with us | Performance of a contract or steps prior to entering a contract (Art. 6(1)(b)) |
| Storing and reading cookies and similar identifiers that are not strictly necessary — analytics, advertising marks and measuring our advertising (Section 8.5) | Consent (Art. 6(1)(a)) — you may withdraw at any time |
| Understanding how the Website is used and where visitors come from, and improving the Website | Legitimate interests (Art. 6(1)(f)) — our interest in improving the Website, applied to data collected with your consent |
| Preventing fraud, securing the Website, and detecting abuse | Legitimate interests (Art. 6(1)(f)) — our interest in protecting the Website and its users |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
We do not use your data for automated decision-making that produces legal effects or similarly significantly affects you.
4. How long we keep your data
We keep personal data only as long as necessary for the purposes described above.
| Data | Retention period |
|---|---|
| Contact and communication data | 3 years after the last message |
| Booking data | 3 years after the meeting |
| Record of your cookie choice | Until you change it or clear your browser storage |
| Advertising marks (Section 8.5) | Until you withdraw consent or clear your browser storage. If you refuse or withdraw consent, we delete them immediately |
| Analytics and advertising cookies (Section 8.5) | As listed in Section 8.5 for your device. Data received by Google and Meta is kept according to their retention settings and terms |
| Log data | 12 months |
When a retention period ends, we delete or anonymise the data.
5. Who we share data with
We share personal data only as necessary:
- Hosting provider. The Website, the scheduling service and our mail server run on infrastructure rented from our hosting provider, which acts as our processor.
- Google. If a member of our team has connected their Google Calendar to our scheduling service, the meetings you book are written to that calendar, and the free/busy state of that calendar is read to work out available times. This is processed by Google Ireland Limited.
- Analytics and advertising providers — only if you accept cookies. Google Ireland Limited (Google Tag Manager, Google Analytics 4) receives data about your visit — pages viewed, clicks, device and browser, approximate location from your IP address — to give us statistics about how the Website is used. Meta Platforms Ireland Limited receives data about your visit through the Meta Pixel to measure our advertising on Facebook and Instagram; Meta may link it to your Meta account and use it for its own advertising purposes. For collecting and transmitting data through the Meta Pixel we and Meta are joint controllers under Article 26 GDPR; Meta's terms for this arrangement are available from Meta.
- Our content production platform. If you consent to advertising marks (Section 8.5), the identifiers held in them are passed to our content production platform when you follow a link to it, so that we can tell which campaign brought you. We do not send your name or email to advertising platforms.
- Professional advisers. Accountants, auditors, and lawyers, where necessary.
- Authorities. Tax authorities, law enforcement, or supervisory bodies, where required by law. Where we are legally permitted to do so, we will inform you.
- Business transfers. If we merge, are acquired, or sell assets, data may be transferred to the successor, subject to this Policy.
We do not sell your personal data.
6. International transfers
Some of our service providers may process data outside the European Economic Area (EEA). Where this happens, we rely on:
- an adequacy decision of the European Commission, or
- Standard Contractual Clauses (SCCs) approved by the European Commission, or
- another lawful transfer mechanism under Chapter V of the GDPR.
Google and Meta may process data in the United States; these transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.
You may request a copy of the relevant safeguards by contacting us.
7. Security
We take the protection of your data seriously, but we do not claim certifications or audits we have not obtained. What we do implement:
- Encryption of data in transit (TLS 1.2 or higher).
- Access controls on a strict need-to-know basis, with role-based permissions.
- Two-factor authentication for accounts that manage the Website.
- Confidentiality obligations for all personnel with access to personal data.
- Incident response procedures for detecting, containing, and notifying breaches.
If a personal data breach occurs, we notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it, in accordance with Article 33 GDPR. Where the breach is likely to result in a high risk to your rights and freedoms, we also inform you without undue delay, in accordance with Article 34 GDPR.
Important: no method of transmission or storage is completely secure. We cannot guarantee absolute security.
8. Cookies and similar technologies
This section explains how we use cookies and similar technologies on the Website. It forms an integral part of this Privacy Policy.
8.1 What are cookies and similar technologies
Cookies are small text files stored on your device when you visit a website. They allow the website to remember your actions and preferences over a period of time.
We also use similar technologies such as local storage and session storage. In this Policy, we refer to all of them collectively as “cookies.”
8.2 Types of cookies we use
We use the following categories:
Strictly necessary — without these the Website cannot do what you asked of it. On this Website they are limited to:
- the record of your cookie choice, so that we do not ask you again and can honour a refusal;
- the session of a signed-in administrator — this applies to our own staff, not to visitors.
These do not require your consent.
Analytics — help us understand how the Website is used: which pages are visited and how visitors navigate. We use Google Analytics 4, loaded through Google Tag Manager.
Advertising — the Meta Pixel tells us whether visitors came from our ads on Facebook and Instagram and helps us measure them. It follows you across other websites that use it.
Advertising marks — identifiers that tell us which campaign or channel brought you to the Website, so that we can measure our advertising. They are described in detail in Section 8.5.
Analytics, advertising and advertising marks are loaded, stored and read only with your consent. You may withdraw your consent at any time.
8.3 How we obtain consent
Where required by applicable law (including Article 5(3) of the ePrivacy Directive and the GDPR), we obtain your consent before storing or reading anything that is not strictly necessary.
When you first visit the Website, a banner appears at the bottom of the screen. It offers you:
- Accept — to consent to analytics and advertising marks;
- Reject — to refuse them.
Until you choose, nothing beyond the strictly necessary is stored or read. If you refuse, we also delete any advertising marks already stored on your device.
You may change your choice at any time with the Cookie settings button below — it opens the same banner again — or by clearing your browser storage.
8.4 How to control cookies
You can control and delete cookies through your browser settings. Most browsers allow you to:
- view the cookies currently stored;
- delete individual cookies or all cookies;
- block cookies from specific sites;
- block all cookies from being set.
Please note: if you block the strictly necessary items, we cannot remember that you refused, and the banner will appear again on your next visit.
8.5 What we store on your device
This is the complete list at the date of this Policy. If we introduce anything new, we will update this list before it is placed.
| Name | Type and provider | Purpose | Duration |
|---|---|---|---|
igtl-consent |
Local storage, ours | Remembers whether you accepted or refused. Strictly necessary | Until you change it or clear your browser storage |
igtl_attr |
Local storage, ours | Advertising marks: utm_source, utm_medium, utm_campaign, utm_content, fbclid, gclid from the address you arrived by, and the value of the Meta _fbp cookie if another site has set one in your browser. They are added to the link when you go to our content production platform, so that we can tell which campaign brought you. Consent required |
Until you withdraw consent or clear your browser storage; deleted immediately if you refuse |
_ga, _ga_<ID> |
Cookie, Google (Google Analytics 4) | Distinguishes visitors and sessions for usage statistics. Consent required | Up to 2 years |
_fbp, _fbc |
Cookie, Meta (Meta Pixel) | Identifies your browser and the ad you clicked, to measure our advertising on Facebook and Instagram. Consent required | 90 days |
igtladm |
Cookie, ours | Keeps a signed-in administrator's session in the management area. Not set for visitors. Strictly necessary | Until the browser is closed |
Google Tag Manager, Google Analytics and the Meta Pixel are loaded only after you press Accept. If you later refuse with the Cookie settings button in Section 8.3, we delete their cookies set on this Website and stop loading them. Cookies these providers keep on their own domains are controlled in your browser (Section 8.4) and in your account with them.
8.6 Changes to this section
We may update this section from time to time. If we make material changes, we will notify you through the Website interface or by email before the changes take effect.
9. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data, subject to legal retention obligations.
- Restrict processing in certain circumstances.
- Object to processing based on legitimate interests.
- Data portability — receive your data in a structured, commonly used, machine-readable format.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with a supervisory authority. In Estonia, this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, https://www.aki.ee/). You may also complain to the authority in your country of residence.
To exercise any of these rights, contact us at legal@contenteam.com.
10. Notice for California residents
If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA/CPRA):
- Right to know what categories of personal information we collect, the sources, the purposes, and the categories of third parties with whom we share it.
- Right to delete personal information we have collected from you.
- Right to correct inaccurate personal information.
- Right to opt out of the sale or sharing of personal information.
- Right to non-discrimination for exercising your rights.
We do not sell personal information. We share personal information for cross-context behavioural advertising (the Meta Pixel) only if you have accepted cookies in the banner described in Section 8.3; you can withdraw that choice at any time with the Cookie settings button in Section 8.3, which also deletes the cookies and marks already stored on this Website.
To exercise these rights, contact legal@contenteam.com. We will verify your request using the information associated with your inquiry.
The categories of personal information we collect are: identifiers (name, email, IP address, advertising identifiers), commercial information (service inquiries and bookings), and internet activity (log data). We disclose these categories to service providers for business purposes as described in Section 5.
11. Children
The Website is not intended for persons under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will notify you by email or through a prominent notice on the Website at least 30 days before the changes take effect. The effective date at the top of this document indicates the current version.
13. Contact
For any questions about this Policy or your personal data:
contenteam OÜ
Ahtri tn 12, 10151 Tallinn, Estonia
Email: legal@contenteam.com