GDPR

GDPR Notice

Last updated: 2026-04-30.

This page summarises your rights under the EU General Data Protection Regulation (GDPR) and the UK GDPR when you use barrymachinwin.com. It supplements our Privacy Policy.

Data Controller

Barry Machin Win acts as the controller of personal data processed through the Site. Contact: privacy@barrymachinwin.com.

Lawful bases we rely on

  • Consent — non-essential cookies, optional communications.
  • Contract — running your parlor tab when you create one.
  • Legitimate interests — site security, abuse prevention, basic analytics.
  • Legal obligation — record-keeping where required.

Your rights

  1. Access — request a copy of personal data we hold about you.
  2. Rectification — correct inaccurate or incomplete data.
  3. Erasure — request deletion ("right to be forgotten") subject to legal limits.
  4. Restriction — limit how we process your data.
  5. Portability — receive your data in a machine-readable format.
  6. Objection — object to processing based on legitimate interests.
  7. Withdraw consent — at any time without affecting prior lawful processing.
  8. Complaint — to your national data protection authority.

How to exercise your rights

Email privacy@barrymachinwin.com with your request and enough information for us to verify your identity. We respond within 30 days. We do not charge for routine requests.

International transfers

If we transfer personal data outside the EEA / UK, we use Standard Contractual Clauses or an equivalent safeguard.

Automated decision-making

We do not use automated decision-making with legal or similarly significant effects.