Privacy Policy

This Privacy Policy (Part B) explains how we collect, use, share, and protect your personal data when you use the Platform, in accordance with the UK GDPR and the Data Protection Act 2018. It should be read together with Part A (Terms & Conditions) and Part C (Cookie Policy).

We process personal data only to the extent necessary to support fairness, transparency, user protection, fraud prevention, and legal/regulatory compliance.

CMA Solutions Limited is the data controller responsible for your personal data.

valuegrind.com is operated by CMA Solutions Limited (Company Number 16824488).

Sutherland House, 1759 London Road, Leigh-on-Sea, Essex, SS9 2RZ

Contact for all privacy and data protection queries: support@valuegrind.com

We have not appointed a Data Protection Officer (DPO), as we do not meet the thresholds requiring mandatory DPO appointment under the UK GDPR (Article 37). The contact point for all data protection matters is the address and email above.

We may record acceptance events for compliance/evidential purposes.

You are not required to provide all data, but without certain data some features cannot function.

We use legitimate interests for Platform security, fraud prevention, compliance controls, and referrer-visible reporting for commission verification. Where we rely on legitimate interests, we apply safeguards such as data minimisation, access controls, and pseudonymisation/masking. You have the right to object to legitimate interests processing — see Section 3D above for details.

Partner Operators are independent third parties. If you use their services, they process your data under their own privacy policies and terms. We do not control their KYC decisions, gameplay, or payments/rewards.

We send marketing emails only where you have opted in (or where permitted). You can unsubscribe at any time. We may use an email provider (e.g., Brevo). If email analytics/tracking is enabled, we use consent controls where required by law. We maintain opt-in/opt-out controls and suppression handling for marketing communications. Where applicable to our services, marketing and promotional activity is operated in alignment with applicable legal and regulatory standards in the relevant jurisdictions, including the CAP Code and ASA advertising rules.

We use strictly necessary cookies (e.g. for authentication and security). Where analytics or marketing cookies are enabled (including GA4), we use a cookie consent mechanism and only load non-essential cookies after you have given consent where required by law.

You can manage or withdraw cookie consent at any time via Cookie Settings on the Platform. For full details, see our Cookie Policy at /cookie-policy. This Privacy Policy (Part B) should be read together with our Terms & Conditions (Part A) and Cookie Policy (Part C).

Your data may be processed outside the UK. Where transfers occur, we use appropriate safeguards (e.g., UK IDTA and/or UK Addendum to EU SCCs) or other lawful mechanisms.

We do not sell your personal data. We may share it only as described below.

We retain data only as needed for the purposes above, compliance, fraud prevention, dispute handling, and legal requirements. Typical retention:

For retention purposes, relationship end date means the date your Platform account is closed, terminated, disabled, or otherwise moved into a terminal status.

Under UK GDPR and the Data Protection Act 2018, you may have the following rights: access to your personal data; rectification of inaccurate data; erasure ('right to be forgotten') where legally applicable; restriction of processing; objection to processing (including direct marketing); data portability; and withdrawal of consent at any time where processing is consent-based. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

How to exercise your rights: Submit a request by email to support@valuegrind.com, clearly stating your name, the email address linked to your account, and the specific right(s) you wish to exercise. We may ask you to verify your identity before processing your request. We will respond within one calendar month of receipt. For complex or multiple requests, we may extend this by a further two months and will notify you accordingly.

If your country of residence changes, request an account-country update by contacting support@valuegrind.com from your registered account email. We may request reasonable verification information to protect account security and compliance, and we may temporarily restrict access to affected offers until verification is completed and records are updated.

Right to complain: If you are not satisfied with how we handle your data or your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113. We would, however, appreciate the opportunity to address your concerns before you contact the ICO.

We use reasonable technical and organisational measures including access controls, least privilege, encryption in transit, secure credential handling, monitoring, and anti-abuse processes.

If a personal data breach occurs, we assess it promptly and notify competent regulators where legally required, including the ICO. We also notify affected users where required by law, without undue delay.