Game Farm Studios

GDPR Compliance Statement

Effective Date: 13 June 2025
Last Updated: 13 June 2025

At Game Farm Studios Ltd (“Game Farm”), we are committed to protecting personal data and respecting the rights of individuals under the UK General Data Protection Regulation (UK GDPR) and the EU GDPR where applicable.

1. Our Role as Data Controller

Game Farm Studios Ltd acts as a data controller for the personal data of:

  • Players who create accounts to access and track game progress
  • Customers who license our games and use our management dashboards

We determine the purposes and means of processing this personal data.

2. Our Lawful Basis for Processing

We process personal data based on the following lawful grounds under Article 6 of the GDPR:

  • Contractual necessity – to create and manage user accounts and fulfill licensing agreements
  • Legitimate interests – to maintain platform security, track performance, and improve our services
  • Consent – for any optional features, communications, or future cookie-based analytics (if introduced)

3. Types of Personal Data We Process

We process the following categories of personal data:

  • Email address and/or mobile number
  • Gameplay activity data (e.g., time spent, moves made, scores)
  • Business contact information (for customer accounts)
  • Authentication metadata (via Auth0)

4. Data Security

We implement appropriate technical and organizational measures to ensure the security and confidentiality of personal data. These include:

  • Secure login via Auth0
  • Access controls and encryption
  • Regular review of third-party processor compliance

5. International Data Transfers

Where personal data is transferred outside the UK or EU (e.g., via Auth0), we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs)
  • Ensuring our vendors are GDPR-compliant

6. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected:

  • Active accounts: while in use
  • Inactive accounts: up to 12 months
  • Upon request: deleted promptly in line with our privacy policy

7. Data Subject Rights

All individuals whose data we process have the right to:

  • Access their personal data
  • Correct or update inaccurate information
  • Request deletion of their data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent (if applicable)
  • Lodge a complaint with the UK Information Commissioner’s Office (ICO)

8. Contact Information

To exercise your GDPR rights or for any data protection concerns, contact us at:
Email: farmers@gamefarm.ing