Data Protection Impact Assessments
We carry out Data Protection Impact Assessments (DPIAs) for the areas of our processing that carry the highest risk to the people we work with. Because Gamban is used by people who may be vulnerable, we take this seriously. Below is a summary of each assessment. The full assessments are internal documents and are available to regulators on request.
Table of Contents
- Gambling-related information (special category data)
- Information you give us at signup
- Payments
- Contacting us and your rights
Gambling-related information (special category data)
What this covers
By choosing to install and use Gamban, you are telling us you want help with gambling. Because of this, the fact that you use Gamban is treated as health-related information, the most protected category of personal data under UK and EU law.
Why we hold it
To provide the blocking service that is the whole purpose of Gamban.
Our legal basis
We rely on "substantial public interest" under Article 9(2)(g) UK GDPR, specifically the safeguarding of individuals who may be at risk. We do not rely on your consent. Consent has to be something you can withdraw, and a blocking tool you could switch off in a difficult moment would not protect you. Relying on safeguarding instead means the protection stays in place when you need it most.
How we look after it
Your information is stored securely within the UK and EU, encrypted, and access is strictly limited to the small number of people who need it to run the service. We do not share it with any third party unless you ask us to, or the law requires it.
How long we keep it
Your gambling-related information is deleted when you close your account. Full details are in our Privacy Policy.
Your rights
You can ask to see, correct or delete your data at any time. Contact our Data Protection Officer at info@gamban.com.
Information you give us at signup
What this covers
When you sign up, you can tell us the date you last gambled and a rough idea of what you used to spend. We use this only to power features inside the app that support your recovery, such as showing how much you have saved and how long it has been since you last gambled.
Why we treat it carefully
Because this information is directly linked to your gambling, we protect it with the same care as the health-related information described in the first tab.
How we look after it
Stored securely within the UK and EU, and never shared with third parties. You can update your last gambling date yourself at any time, including resetting it if you have a setback. There is no judgement in doing so, the tool is there to support you.
How long we keep it
Kept while your subscription is active, and deleted when you close your account.
Your rights
You can ask to see, correct or delete your data at any time. Contact our Data Protection Officer at info@gamban.com.
Payments
What this covers
When you pay for Gamban, we handle your name, email address, billing address and payment details.
Your card details never reach us
Payments are handled directly by our payment provider on their own secure page. Your card details never pass through or get stored on Gamban's systems, we only receive confirmation that a payment has been made. Our payment providers never see any information about your gambling.
Why we assessed this
Some of our users may be dealing with gambling-related financial pressure, so we hold payment handling to a high standard, even though payment information is not classed as special category data.
How long we keep it
We keep transaction records for six years, because tax and contract law require us to. This is a legal obligation and applies to financial records only.
Your rights
You can ask to see, correct or delete your data, subject to the legal retention above. Contact our Data Protection Officer at info@gamban.com.
Contacting us and your rights
Data Protection Officer
For any questions about your data, or to ask to see, correct or delete it, contact our Data Protection Officer at dpo@gamban.com.
EU representative
If you are in the European Union, you can also contact our EU representative, appointed under Article 27 UK GDPR:
James Charles Forman
Rua Correia Teles, 28 A, 1350-100 Lisbon, Portugal
Complaining to a regulator
If you are unhappy with how we have handled your personal data, you have the right to complain. In the UK, you can contact the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EU, you can contact your local data protection authority.
The full picture
These summaries sit alongside our Privacy Policy, which sets out in full what data we collect, how we use it, and all of your rights. Please read it at gamban.com/privacy.
Last reviewed: 21 July 2026.