Legal
Privacy Notice
How Elutor Limited, the company behind InTarget, collects, uses, shares and protects personal data on intarget.space, who receives it, how long it is kept and your rights.
Version published: 2.0
Effective date: 22 September 2026
This Privacy Notice explains how we collect and process personal data when you visit our website https://intarget.space/ (the “Website”), request a demo, send us a message or book a meeting with our team, on any device.
The data controller responsible for this processing (“we”, “us” or “our”) is Elutor Limited, 113, Georgiou Griva Digeni, Astromeritis, 2722, Nicosia, Cyprus. We process personal data in line with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”).
When iGaming operators use the InTarget platform, we process their players’ data on the operator’s behalf, under a data processing agreement with that operator. This notice does not cover that processing; the operator’s own privacy notice does.
If you have any questions, contact us at info@intarget.space.
Content
Who receives your personal data
How long we keep your personal data
How we secure your personal data
Changes to this Privacy Notice
Definitions
Data controller means a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Personal data means any information about an identified or identifiable individual.
Processor means a service provider that processes personal data on our behalf and on our instructions.
What personal data we collect
Information you give us:
| Who | What we collect |
|---|---|
Demo request (/demo/) |
Full name, work email, phone number (optional), company, country, website, monthly active players range, and your confirmation that you have read this notice. |
Contact message (/about/) |
Name (optional), email and your message. |
| Meeting booking | The name, email and time you enter in the booking calendar on the confirmation page (Google Calendar) or on the exhibition booking page (Cal.com). |
Information sent together with a form you submit:
| What | Details |
|---|---|
| How you found us | Traffic channel and source, campaign parameters (UTM tags), advertising click identifiers, the referring website, and the landing page and time of your first visit and of your latest visit from another website or campaign in the last 30 days. This is stored in your browser and sent to us only with a form you submit; see the Cookie Notice. |
| Technical context | The page of the form, browser language, time zone, time of submission and, if analytics cookies are allowed, your Google Analytics client identifier. |
| Security check | A Cloudflare Turnstile token confirming that the form was sent by a person, not a bot. |
Information we collect automatically:
| What | Details |
|---|---|
| Access logs | Our hosting and content delivery providers record technical data such as IP address, browser type and operating system to keep the Website secure and available. |
| Cookies and similar technologies | Analytics and advertising cookies and browser storage, described in the Cookie Notice, together with the way to switch them off. |
Purposes and legal bases
| Purpose | Personal data | Legal basis (GDPR) |
|---|---|---|
| Responding to your demo request or message and arranging the call | Information you give us, meeting booking | Steps taken at your request before entering into a contract (Art. 6(1)(b)); for messages not related to a contract, our legitimate interest in answering you (Art. 6(1)(f)) |
| A few follow-up emails about your request | Name, email, company | Our legitimate interest in following up on a request you made (Art. 6(1)(f)). Every email has an unsubscribe link, and you can object at any time by writing to info@intarget.space |
| Understanding which channels and campaigns bring requests | How you found us, technical context | Our legitimate interest in measuring our marketing (Art. 6(1)(f)) |
| Website analytics and advertising | As described in the Cookie Notice | As stated for each cookie in the Cookie Notice |
| Protecting the Website and forms from abuse | Access logs, security check | Our legitimate interest in keeping the Website and forms secure (Art. 6(1)(f)) |
| Complying with the law and defending legal claims | Any of the above, as needed | Legal obligation (Art. 6(1)(c)) and our legitimate interest (Art. 6(1)(f)) |
We do not sell personal data and do not use it for automated decisions that have legal or similarly significant effects on you.
Who receives your personal data
We share personal data only with the providers we need to run the Website and to handle requests, and only as far as each of them needs it:
| Provider | Role | Where the data may be processed |
|---|---|---|
| Hostinger | Website hosting | Depending on the data center |
| Cloudflare | Content delivery, security and the Turnstile check on forms | Worldwide, including the United States |
| DigitalOcean | Servers for our workflow automation (n8n), which receives form submissions and passes them to the tools below | Depending on the data center |
| HubSpot | Customer relationship management: storing requests and our correspondence | United States and European Union |
| Reply.io | Sending follow-up emails about your request | United States |
| Email and documents (Google Workspace), the booking calendar on the confirmation page, Google Analytics and Google Ads | United States and other countries | |
| Telegram | Instant notifications to our sales team about a new request | United Arab Emirates and other countries |
| Cal.com | The meeting booking calendar for exhibitions | United States |
We may also share personal data with professional advisers where needed, and with public authorities when the law requires it.
Transfers outside the EEA
Some of these providers process data outside the European Economic Area. Where the destination country does not have an adequacy decision of the European Commission, we rely on safeguards permitted by the GDPR, such as the EU-U.S. Data Privacy Framework for certified U.S. providers or the European Commission’s standard contractual clauses. You can ask us for more information about the safeguard used for a particular provider.
How long we keep your personal data
| Data | How long |
|---|---|
| Demo requests, contact messages and our correspondence | As long as we are in contact about your request and for up to 24 months after our last contact; if we start working together, for the duration of the contract and as long as the law requires afterwards |
| Follow-up email preferences | If you unsubscribe or object, we keep your email address on a suppression list so that we do not write to you again |
| Cookies and browser storage | For the periods stated in the Cookie Notice |
| Access logs | For the limited period our hosting and security providers need to keep the Website secure |
When a retention period ends, we delete the data or make it anonymous.
Your rights
Under the GDPR you have the right to:
- access your personal data and receive information about how we process it;
- rectify inaccurate or incomplete data;
- erase your data;
- restrict processing;
- data portability: receive your data in a structured, machine-readable format or have it sent to another controller;
- object to processing based on our legitimate interests, including follow-up emails and marketing;
- withdraw consent at any time where processing is based on consent, without affecting processing before the withdrawal;
- lodge a complaint with a supervisory authority.
To exercise your rights, email info@intarget.space. There is no fee, and we will answer within one month.
Our lead supervisory authority is the Commissioner for Personal Data Protection of Cyprus (dataprotection.gov.cy). You can also complain to the authority in the country where you live or work; the list of data protection authorities in the EEA is on the EDPB website.
How we secure your personal data
We use appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration and loss, and we require the same of our providers.
Children
The Website is not intended for children. We do not knowingly collect personal data from anyone under 18. If you believe we have collected data from a minor, contact us and we will delete it.
Links to other websites
The Website links to other websites that have their own privacy practices. Data you share with them is handled under their privacy policies.
Changes to this Privacy Notice
We may update this Privacy Notice. The current version is always on this page, and the effective date above shows when it last changed. If a change is material, we will also show a notice on the Website.