Privacy Policy
This Privacy Policy explains how the online casino service operated under the project name Lira Spin and made available via https://liraspini.com ("Lira Spin", "we", "us", "our") collects, uses, stores, shares and protects your personal data. It applies to players, registered account holders, website visitors, and any other individual who interacts with our services, including via mobile devices and mirror sites that point to liraspini.com. By using our website or creating an account, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, you should not use our services. This Privacy Policy is drafted to comply with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, relevant e-privacy rules, and, where applicable, the EU GDPR and Mexican data protection law. Effective date: 01 March 2026. Last updated: 01 March 2026.
Who We Are
Data controller. The primary controller of your personal data for the purposes described in this Privacy Policy is:
Fortuna Lira B.V.
Legal form: besloten vennootschap (B.V.)
Registered seat: Willemstad, Curaçao (full registered address available on request)
Licensing jurisdiction: Curaçao eGaming
Main online gambling license: 365/JAZ (sublicense GLH-OCCHKTW07092023)
Trading name and project: Lira Spin, operated via the website https://liraspini.com.
Fortuna Lira B.V. operates the Lira Spin online casino platform, targeting, among others, experienced players in the United Kingdom who access our offshore gambling services. The company is licensed in Curaçao and does not hold a licence from the UK Gambling Commission. This has implications for your consumer and regulatory protection but does not exempt us from complying with applicable data protection laws, including UK GDPR, when we process personal data of UK-based individuals.
Group and payment entities. Certain payment processing, including Visa and Mastercard transactions, may be handled by our associated entity LiraPay Ltd, a payment processing subsidiary that is likely registered in Cyprus (jurisdiction to be confirmed). LiraPay Ltd acts mainly as a data processor on our behalf, processing your payment-related data according to our instructions and this Privacy Policy.
Data protection contact / DPO. We have appointed a data protection function responsible for overseeing questions related to this Privacy Policy and our data protection practices. You can contact our data protection team using the dedicated privacy contact details indicated from time to time in the "Contact" or "Support" sections of https://liraspini.com, or by writing to "Data Protection Officer - Fortuna Lira B.V., Willemstad, Curaçao". When you contact us, please clearly state that your request concerns "Privacy" or "Data Protection".
What Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with Lira Spin and the services available via liraspini.com. The main categories are set out below.
Identity and contact data
- Account identification data: full name, username, date of birth, nationality, country of residence, language preferences.
- Contact details: email address, phone number (if provided), postal address (where required for verification or withdrawals).
- KYC/AML documents: copies of ID documents (e.g., passport, ID card, driving licence), proof of address (utility bill, bank statement), and, where necessary, proof of funds or source of wealth documentation.
Technical and device data
- Technical identifiers: IP address, device identifiers, operating system, browser type and version, language settings, approximate location derived from IP.
- Usage and log data: access dates and times, pages viewed, clicks, navigation paths, login/logout events, error logs, and interaction with customer support.
- Security and integrity data: device fingerprints, risk scores, and technical logs generated by anti-fraud, anti-money laundering, and security monitoring tools.
Payment and financial data
- Payment instrument details: partial card numbers (tokenised or truncated), card expiry date and cardholder name, or wallet/account identifiers as required for payment processing (e.g., for cards processed by LiraPay Ltd in Cyprus).
- Transaction data: deposits, withdrawals, bonuses credited, chargebacks, disputed payments, payment provider used, currency, and timestamps.
- Compliance data: data generated to comply with anti-money laundering (AML) and counter-terrorist financing (CTF) obligations, including internal risk assessments, flags, and decision logs.
Behavioural and gaming data
- Gaming activity: betting and wagering history, game types played (e.g., slots such as Book of Dead or other titles), stakes, wins and losses, session duration, frequency of play, and bonus usage.
- Behavioural patterns: clicks, time spent on pages, interaction with specific promotions, participation in tournaments or loyalty schemes.
- Responsible gambling data: self-set limits, cooling-off periods, communications about gambling behaviour, and internal insights generated to identify potential problem gambling or abuse.
Communication and support data
- Support interactions: records of chats, emails, and other communications with our customer support and risk teams, including attachments you send.
- Preferences: marketing and communication preferences, consent records, and opt-out choices.
Cookies and similar technologies
- Cookies: small text files stored on your device, including session cookies, persistent cookies and, where applicable, third-party cookies.
- Similar technologies: tracking pixels, tags, local storage, SDKs, and device identifiers used for analytics, security, and advertising.
- Cookie-derived data: information about your visits, such as pages viewed, referral sources, and interactions with banners and promotions.
Legal Basis for Processing
We process your personal data only when we have a valid legal basis under UK GDPR and, where applicable, EU GDPR and Mexican data protection law. Depending on the context, one or more of the following bases will apply:
Contractual necessity
- Account creation and servicing: we process identity, contact, technical and payment data to create and manage your account, provide games, process deposits and withdrawals, and deliver customer support.
- Performance of our Terms: this includes enforcing our Terms and Conditions, applying bonus rules, resolving disputes about bets or payouts, and maintaining platform functionality.
Compliance with legal obligations
- KYC/AML and sanctions screening: we process identity, KYC documents, transaction data and behavioural data to comply with anti-money laundering, counter-terrorist financing, fraud prevention and sanctions laws applicable to Fortuna Lira B.V. in Curaçao and to related entities, and, where relevant, obligations under UK and EU law.
- Accounting and record-keeping: we retain transaction and financial records for tax, audit and regulatory reporting purposes.
- Regulatory cooperation: we may process and disclose your data to regulators (including Curaçao eGaming) and law enforcement when required by applicable law.
Legitimate interests
- Platform security and integrity: we use technical, behavioural and device data to protect our platform from fraud, abuse, bonus misuse, money laundering, cyber-attacks and other security risks. We balance these interests against your rights and expectations.
- Service improvement and analytics: we analyse aggregated and pseudonymised data to understand how our games and features are used, improve performance, and develop new offerings.
- Internal business operations: including risk management, internal reporting, corporate governance, and potential corporate transactions (e.g., mergers or asset sales), where such processing is compatible with your rights.
Consent
- Marketing communications: we rely on your consent (or on soft opt-in where permitted by UK e-privacy rules) to send you electronic marketing about promotions, bonuses and news from Lira Spin. You can withdraw consent or opt out at any time via your account settings or the unsubscribe link.
- Non-essential cookies and advertising: we use analytical, personalisation and advertising cookies, as well as similar technologies, only with your consent where required by law (e.g., under UK Privacy and Electronic Communications Regulations (PECR)).
- Sensitive or high-risk data: in limited cases, and where required by local law (including Mexican law), we may ask for your explicit consent to process certain categories of data or to use data for specific additional purposes.
Protection of vital interests and legal claims
- Vital interests: we may process data where necessary to protect your vital interests or those of another person, for example, in the context of serious incidents reported to us.
- Legal claims: we process data to establish, exercise or defend legal claims, in courts, in arbitration, or before regulators and supervisory authorities in relevant jurisdictions.
Purpose of Processing
We use your personal data for clearly defined purposes. Depending on your relationship with Lira Spin and your use of liraspini.com, we may process your data for the following:
Providing and managing our gambling services
- Account management: to register and administer your account, verify your age and identity, ensure you meet eligibility requirements, and provide core functionality such as login and password management.
- Game access and operation: to allow you to access and play casino games, place bets, participate in tournaments and promotions, and to calculate and credit winnings or apply losses.
- Payments: to process deposits and withdrawals through our payment partners, including LiraPay Ltd and other processors, and to manage any payment disputes or chargebacks.
Risk management, compliance and fraud prevention
- KYC and AML controls: to verify your identity, assess risk, monitor transactions and detect potential money laundering, terrorist financing or other financial crime.
- Fraud and abuse monitoring: to detect and prevent collusion, bonus abuse, multi-accounting, chargeback abuse, account takeover and other fraudulent behaviour.
- Responsible gambling: to monitor for patterns of excessive or harmful gambling, apply self-exclusion or limits you request, and communicate relevant information or warnings.
Service improvement, analytics and personalisation
- Analytics: to understand how players use our website and games, analyse performance, diagnose technical issues and optimise user experience.
- Personalisation: to tailor content, bonuses, recommendations and offers based on your gaming preferences and past behaviour, where permitted by law and consistent with your choices.
Marketing and communications
- Marketing messages: to send you news, promotions, tailored bonuses and information about new games or features, via email, SMS, in-site messages or push notifications, in line with your preferences and applicable law.
- Surveys and feedback: to request feedback about our services and conduct surveys to improve our offerings.
Legal, regulatory and business purposes
- Legal compliance: to comply with licensing, regulatory, tax and other legal obligations in Curaçao and other relevant jurisdictions.
- Dispute resolution: to investigate and resolve complaints, disputes and claims, including those concerning bets, payouts, or bonus terms.
- Business continuity: to conduct internal audits, business planning, corporate restructuring, or potential acquisitions or disposals, subject to appropriate safeguards.
Disclosure & Sharing
We do not sell your personal data. However, we may share your data with carefully selected third parties for the purposes set out in this Privacy Policy, always subject to appropriate contractual and security safeguards.
Within our group and related entities
- Fortuna Lira B.V. group: internal sharing with departments and teams within Fortuna Lira B.V. that need access to your data (e.g., customer support, risk, finance, compliance and IT) to provide services and meet legal obligations.
- Payment subsidiary: sharing with LiraPay Ltd in Cyprus (jurisdiction to be confirmed) for card and payment processing, fraud checks, and chargeback management, acting as our processor or, in certain cases, joint controller.
- Related brands: limited sharing with related brands such as SpinMeridian and TurkaSlots, which are operated by or affiliated with Fortuna Lira B.V., where necessary for group-level risk management, fraud prevention or to manage self-exclusion and duplicate accounts, and always in compliance with applicable law.
Service providers and partners
- Game providers: software suppliers that provide casino games, who may receive pseudonymised player identifiers and gameplay data to run games, verify game integrity and calculate outcomes.
- Payment and banking partners: payment gateways, banks, card schemes and financial institutions used to process deposits and withdrawals.
- KYC/AML and fraud prevention providers: third-party tools for identity verification, document authentication, sanctions and PEP checks, fraud scoring and transaction monitoring.
- IT, hosting and security providers: cloud hosting services, data centres, security monitoring and technical support providers that host data or help us maintain our systems.
- Analytics and marketing partners: providers of analytics, email delivery, SMS, push notifications and, where you have consented, advertising networks and affiliate partners who help us deliver or measure campaigns.
Regulators, authorities and dispute bodies
- Regulators and law enforcement: Curaçao eGaming, financial intelligence units, courts, police and other governmental or regulatory authorities in Curaçao, the UK, the EU and other relevant jurisdictions where required by law or reasonably necessary to protect our rights or the rights of others.
- Tax and administrative authorities: where we are legally obliged to do so. As of January 2025, Lira Spin does not operate any routine automated reporting to HM Revenue & Customs (HMRC); however, we may still respond to lawful requests or obligations that arise, and you remain responsible for complying with your own tax obligations.
- Alternative dispute resolution or legal representatives: external lawyers, auditors, consultants and dispute resolution bodies, where needed to establish, exercise or defend legal claims or handle complaints.
Corporate transactions
- Business transfers: in connection with any merger, acquisition, sale of assets, financing, reorganisation, or insolvency event involving Fortuna Lira B.V. or its group, your data may be disclosed to prospective or actual purchasers and their advisers, subject to strict confidentiality obligations and continued protection of your rights.
Advertising networks and affiliates (with consent)
- Advertising networks: where you have consented to targeted advertising cookies or similar technologies, we may share pseudonymised identifiers and limited activity data with advertising networks to show you relevant adverts.
- Affiliate partners: we may share aggregated or pseudonymised information with affiliates who referred you to our site for the purpose of calculating commissions and preventing abuse, but we do not disclose your full identity without a clear legal basis.
International Transfers
Because Fortuna Lira B.V. is established in Curaçao and uses service providers in several countries, your personal data may be transferred and stored outside your country of residence, including outside the UK and the European Economic Area (EEA).
Key transfer locations
- Curaçao: core gaming, risk, compliance and customer support operations are managed from Curaçao, where Fortuna Lira B.V. is registered and licensed under Curaçao eGaming license 365/JAZ (sublicense GLH-OCCHKTW07092023).
- Cyprus (to be confirmed): payment processing functions performed by LiraPay Ltd or related entities may involve transfers of payment and transaction data to or from Cyprus.
- Other countries: we may use service providers or infrastructure located in other jurisdictions, including the EEA, Switzerland, the United Kingdom, and countries such as the United States or other third countries, depending on our hosting, support and analytics arrangements.
Safeguards for international transfers
- Adequacy decisions: where your data is transferred from the UK or EEA to a country that has been recognised as providing an adequate level of protection, we rely on that adequacy decision.
- Standard Contractual Clauses (SCCs): for transfers from the UK or EEA to countries without an adequacy decision (such as Curaçao or, in many cases, the United States), we generally use the European Commission's Standard Contractual Clauses, adapted where required for UK transfers via the UK International Data Transfer Addendum or the UK International Data Transfer Agreement (IDTA).
- Additional safeguards: where appropriate, we complement SCCs with technical and organisational measures such as encryption, strict access controls, data minimisation, and internal policies to reduce risks associated with cross-border transfers.
- Mexican data transfers: when processing data of individuals located in Mexico, we apply the requirements of Mexican law for international data transfers, including contractual clauses and privacy notice obligations, so that equivalent protection is maintained.
Where local laws require that you are informed of or consent to particular international transfers, we will provide the relevant information in the registration flow, in our cookie banner, or within your account area on liraspini.com.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting and reporting requirements, and to resolve disputes. Retention periods may vary by data category and jurisdiction, but we apply the following general principles:
General retention rules
- Active account data: as long as your account remains open and active, we retain your core account data, gaming history and transaction records to provide services and comply with legal obligations.
- After account closure: once your account has been closed (either by you or by us), we typically retain your personal data for up to five (5) years, unless a longer period is required by law or needed for legitimate purposes such as resolving disputes or handling investigations. Certain AML and financial records may be kept for up to ten (10) years where legally required.
Category-specific examples
- KYC and identity data: usually retained for five (5) to seven (7) years after the end of the business relationship, in line with common AML requirements in relevant jurisdictions.
- Transaction and payment data: retained for five (5) to ten (10) years, depending on the applicable accounting, tax and AML laws.
- Gaming and behavioural data: kept for the duration of the relationship and for up to five (5) years after account closure to support dispute resolution, responsible gambling analysis and fraud prevention, after which it may be anonymised or deleted.
- Marketing data: email addresses and consent records used for marketing are retained until you withdraw consent or object to marketing, plus a short period (generally up to two (2) years) to evidence compliance with your choice.
- Technical and log data: server logs, security logs and similar technical data are typically kept for six (6) to twenty-four (24) months, unless a longer retention is justified for security investigations or legal claims.
- Cookies: retention of cookies depends on whether they are session or persistent; session cookies expire when you close your browser, whereas persistent cookies are kept from a few days up to two (2) years, as explained in our cookie controls.
Deletion and anonymisation
- Deletion: when data is no longer needed, we will securely delete it or render it irreversibly anonymous. Where deletion is not possible (e.g., because it is stored in backup archives), we will isolate and securely protect your data from further processing until deletion is possible.
- User-initiated requests: if you exercise your right to erasure, we will delete or anonymise your personal data unless we must retain certain elements due to legal obligations or overriding legitimate interests (for example, AML record-keeping or defence of legal claims).
Your Rights
Under UK GDPR, the Data Protection Act 2018, EU GDPR (where applicable), and Mexican data protection law (notably the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations), you have a range of rights in relation to your personal data. We respect these rights and provide mechanisms for you to exercise them.
Rights under UK/EU data protection law
- Right of access: to obtain confirmation as to whether we process your personal data and, if so, to receive a copy of your data along with information about how we process it.
- Right to rectification: to request correction of inaccurate or incomplete personal data. You may be able to update some data directly in your account settings.
- Right to erasure ("right to be forgotten"): to request deletion of your personal data where there is no longer a legal basis for us to continue processing it, for example where you have withdrawn consent and there is no other legal ground.
- Right to restriction of processing: to request that we temporarily restrict processing of your data in certain situations (e.g., while we verify the accuracy of data or our legitimate interests).
- Right to data portability: to receive the personal data you provided to us in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller.
- Right to object: to object at any time to processing based on our legitimate interests, including profiling, and to object to processing for direct marketing. We will stop such processing unless we demonstrate compelling legitimate grounds or are required to continue for legal reasons.
- Right not to be subject to certain automated decisions: to request human review and to express your point of view where we make decisions based solely on automated processing that produce legal or similarly significant effects (e.g., automated account suspension decisions in fraud scenarios).
Rights under Mexican data protection law (ARCO and related rights)
- ARCO rights (Access, Rectification, Cancellation, Opposition): if Mexican data protection law applies to you, you may exercise your ARCO rights to access your personal data, request correction, request cancellation (deletion) when appropriate, or oppose certain processing.
- Consent revocation: you may revoke your consent to processing where consent is the basis, subject to legal and contractual limitations and reasonable notice.
- Limiting disclosure: you may request that we limit disclosure or transfer of your personal data, in line with Mexican regulations and our legal obligations.
How to exercise your rights
- Submission of requests: you can exercise your rights by contacting our data protection team using the channels indicated in the "Complaints & Contacts" section, clearly stating your identity and the right you wish to exercise.
- Verification: we may ask for specific information or documentation to verify your identity before acting on your request, especially when it relates to sensitive data or account-level actions.
- Response time: we aim to respond to all valid requests without undue delay and at the latest within one (1) month from receipt, as required by UK/EU law. For complex or numerous requests, this period may be extended by up to two additional months; if so, we will inform you. Where Mexican law applies, we will also respect the specific timeframes established by that law (typically twenty (20) working days to respond and an additional fifteen (15) working days to implement an approved request).
- Fees: requests are handled free of charge, unless they are manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act on the request.
- Limitations: certain rights may be limited by applicable law, for example where disclosure could adversely affect anti-money laundering investigations, legal privilege, or the rights and freedoms of others.
If you are dissatisfied with our response, you also have the right to lodge a complaint with a supervisory authority, as described in the "Complaints & Contacts" section.
Cookies & Tracking Technologies
Lira Spin uses cookies and similar technologies on liraspini.com to operate the website, enhance your experience, analyse usage and, where permitted, support marketing activities. Use of cookies is subject to UK e-privacy rules (PECR) and UK GDPR, as well as other applicable laws.
Types of cookies
- Strictly necessary (functional) cookies: required for the website to function properly, enabling core features such as page navigation, secure login, session management, and access to protected areas. These cookies cannot be switched off via our cookie banner, but you can block them in your browser (which may affect site functionality).
- Preference cookies: used to remember your settings and choices (e.g., language, region, saved details), making your experience more convenient.
- Analytics and performance cookies: used to collect aggregated information about how visitors use the site, which pages are visited most often, and any errors encountered. This helps us improve the performance and usability of liraspini.com.
- Advertising and targeting cookies: used, where you consent, to deliver relevant advertising and track the effectiveness of marketing campaigns, including in cooperation with selected advertising networks and affiliates.
- Third-party cookies: set by third parties (such as analytics providers or game providers) when you interact with their content embedded on our site.
Cookie management
- Cookie banner and preferences: upon your first visit (and periodically thereafter), you will be presented with a cookie banner that allows you to accept or reject non-essential cookies. You can adjust your preferences at any time through our on-site cookie or privacy settings panel (where available).
- Browser settings: most browsers allow you to block or delete cookies through their settings. Blocking all cookies may impact your ability to log in or use certain features of the casino.
- Opt-out tools: for certain third-party analytics or advertising providers, additional opt-out mechanisms may be available on their own websites or through industry tools (for example, those offered by the Network Advertising Initiative or the European Interactive Digital Advertising Alliance).
More detailed information about specific cookies used by liraspini.com, their purposes, and lifetimes may be provided in a separate cookie table accessible via our cookie banner or within your account area.
Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised or unlawful processing, accidental loss, destruction or damage. While no online service can guarantee absolute security, we continuously work to reduce risks to a level appropriate to the nature of the data and our operations.
Technical measures
- Encryption in transit and at rest: data transmitted between your device and liraspini.com is protected using TLS 1.2 or higher. Where feasible, sensitive data is encrypted at rest using industry-standard encryption algorithms.
- Access controls: access to systems and databases is restricted on a need-to-know basis, protected by strong authentication mechanisms, role-based access control and secure password policies. Administrative actions are logged and monitored.
- Network security: firewalls, intrusion detection and prevention systems, DDoS protection and other security controls are used to safeguard our infrastructure.
- Secure development practices: we aim to follow secure coding practices, vulnerability management and regular security testing to reduce the risk of exploitable weaknesses.
Organisational measures
- Policies and governance: internal data protection and information security policies define how personal data must be handled by staff and contractors.
- Training and awareness: employees with access to personal data receive periodic training on data protection, security best practices, and their confidentiality obligations.
- Vendor management: we select service providers that implement appropriate security measures and require them, via contract, to protect personal data and process it only according to our instructions.
Incident response
- Monitoring and detection: we monitor our systems for unusual activity, security incidents and vulnerabilities.
- Response procedures: in the event of a personal data breach, we follow a defined incident response plan aimed at containing the incident, assessing impact and mitigating harm.
- Notification: where required by law, we will notify relevant supervisory authorities (such as the UK Information Commissioner's Office) and affected individuals without undue delay, providing information about the breach and recommended protective steps.
We endeavour to align our security controls with internationally recognised standards such as ISO 27001 and SOC 2 where appropriate to our size and risk profile. Unless explicitly stated otherwise, this alignment does not imply formal certification.
Complaints & Contacts
We encourage you to contact us first if you have questions or concerns about how we handle your personal data. We will do our best to resolve issues promptly and fairly.
Contacting Lira Spin
- Customer support: for general queries or minor privacy concerns, please use the support options available on https://liraspini.com (for example, live chat or in-site messaging, where available).
- Data protection contact / DPO: for formal data protection requests (such as access, rectification, erasure, or ARCO rights under Mexican law), please contact our data protection team using the dedicated privacy contact channel indicated in the "Contact" section of liraspini.com or by writing to "Data Protection Officer - Fortuna Lira B.V., Willemstad, Curaçao".
Complaint procedure
- Step 1 - Submit your complaint: provide a clear description of your issue, including relevant dates, account details and any supporting evidence. Indicate that your complaint relates to "Privacy" or "Data Protection".
- Step 2 - Acknowledgement: we will acknowledge receipt of your complaint as soon as reasonably practicable and, in any event, typically within seven (7) days.
- Step 3 - Investigation: we will investigate your complaint, which may include reviewing logs, consulting relevant departments and, if necessary, requesting additional information from you.
- Step 4 - Response: we aim to provide a substantive response within one (1) month from receipt of a complete complaint. For complex matters, we may extend this period in line with applicable law, informing you of the reason for the delay and expected timeline.
- Step 5 - Escalation: if you remain dissatisfied with our response, you may escalate your complaint to a relevant supervisory authority as described below.
Supervisory authorities
- United Kingdom - Information Commissioner's Office (ICO): if you are located in the UK or your complaint concerns our processing of personal data subject to UK law, you may lodge a complaint with the ICO.
Website: https://ico.org.uk
Postal address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom. - Mexico - INAI: where Mexican data protection law applies, you may file a complaint with the Mexican data protection authority, the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI).
Website: https://home.inai.org.mx (or its successor site). - EU/EEA supervisory authorities: if EU GDPR applies to your data, you may lodge a complaint with the data protection authority in the EEA Member State of your habitual residence, place of work or place of the alleged infringement.
We will cooperate in good faith with competent supervisory authorities and follow their guidance and decisions, subject to our rights and obligations under applicable law and our licensing framework in Curaçao.
Updates
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, regulatory expectations, or technical and organisational measures. The version published on https://liraspini.com will always indicate the date of the latest update.
How we inform you about changes
- On-site notifications: for non-material updates (for example, clarifications or minor editorial changes), we may simply update the text on the website and change the "Last updated" date.
- Email and in-account messages: for material changes that affect how we process your data or your rights, we will use reasonable efforts to notify you in advance by email and/or in-account notification, using the contact details registered to your account.
- Banners or pop-ups: we may display banner notices or pop-ups on liraspini.com to draw your attention to important changes.
Advance notice and your options
- Advance notice: where a change is likely to have a significant impact on your privacy rights or how your data is used, we will seek to provide at least thirty (30) days' notice before the new version takes effect, unless a shorter period is required by law or necessary to address urgent security or regulatory issues.
- Reviewing changes: we encourage you to review the updated Privacy Policy carefully. Continued use of our services after the effective date of an updated version will constitute your acceptance of the changes, to the extent permitted by law.
- Right to object or close your account: if you do not agree with a material change, you may object to certain processing (where applicable), adjust your privacy settings, withdraw consent for marketing, or close your account. We will handle such requests in line with the "Your Rights" section and applicable law.
Version control: this Privacy Policy for the project Lira Spin on liraspini.com is identified as version 4.0 and was last updated on 01 March 2026.