Privacy Notice

Effective Date: May 21, 2025

1. 1. Commitment to Data Protection

   At gamegrass.it.com, we treat your personal information with the utmost care. This Notice explains what data we collect, how we use it, and the measures we take to protect it.

2. 2. Information We Gather

   In order to provide and improve our services, we collect:

   • Account Information: username, email address, date of birth, and gaming preferences.
   • Purchase Records: transaction details, license keys, purchase dates, and encrypted payment information.
   • Technical Details: device type, operating system, browser version, IP address, and session duration.
   • Usage Data: in-game statistics, achievements, forum posts, and support tickets.
   • Cookies & Tracking: preferences saved via cookies and local storage to personalise your experience.
3. 3. How We Use Your Data

   Your information is processed to:

   • Improve Performance: optimise page load times and site navigation.
   • Personalise Content: suggest games and promotions tailored to your interests.
   • Secure Accounts: detect unauthorised access and prevent fraud.
   • Support Services: streamline customer support by referencing your account and order history.
   • Marketing Communications: send relevant notifications and offers, with opt-out options available at any time.
4. 4. Security Practices

   We employ industry-standard safeguards, including:

   • Encryption: SSL/TLS for data in transit and AES-256 for data at rest.
   • Access Control: strict permissions ensuring only authorised personnel can access personal data.
   • Vulnerability Assessments: routine audits and penetration tests to identify and mitigate risks.
   • Incident Management: a dedicated team that monitors and addresses security events around the clock.
5. 5. Data Sharing & Disclosure

   We never sell your personal data. We share it only with:

   • Service Providers: such as hosting, payment processors, and email platforms, all bound by confidentiality agreements.
   • Affiliates: to synchronise information across our network.
   • Legal Authorities: when required by law or to enforce our rights and agreements.

   All recipients are contractually obligated to use your data solely for the purposes specified.

6. 6. Your Rights

   Under applicable law, you may have the right to:

   • Access: request a copy of the personal data we hold about you.
   • Rectify: correct any inaccurate or incomplete information.
   • Erase: request deletion of your personal data, subject to legal requirements.
   • Restrict: limit certain types of processing, such as marketing communications.
   • Portability: receive your data in a structured, machine-readable format.

   To exercise any of these rights, please contact us at [email protected] or use your account dashboard.

7. 7. International Data Transfers

   Your data may be stored or processed outside the UK. We implement standard contractual clauses and comply with GDPR requirements to ensure your data remains protected.

8. 8. Children’s Privacy

   We do not knowingly collect data from individuals under the age of 13. If we become aware that such data was obtained without parental consent, we will delete it immediately.

9. 9. Updates to This Notice

   We may update this Privacy Notice periodically. Any material changes will be posted here with a revised date, and if significant, communicated via email.

10. 10. How to Contact Us

    If you have questions or wish to make a privacy request, please reach out:

    Email: [email protected]
    Address: Grand Arcade, St Andrew’s St, Cambridge CB2 3BJ