This Privacy Policy explains how ArcadeOn Studios (“we”, “us”, “our”) — an independent studio operating from the United Kingdom that builds games and software — collects, uses, stores and protects personal data when you visit arcadeonstudios.co.uk (the “Site”).
1. Who we are
ArcadeOn Studios is the data controller for the personal data processed through the Site unless we state otherwise. You can reach us at hello@arcadeonstudios.co.uk.
2. Data we collect
This is an informational website, so we collect very little. Depending on how you interact with us, this may include:
- Enquiry & correspondence data: your name, email address, and the content of any message you send us by email;
- Device & usage data: browser type, operating system, device identifiers, pages viewed, timestamps;
- Network data: IP address (used for security and abuse prevention; Google states that Google Analytics 4 does not log or store IP addresses).
3. Why we collect it
- To operate, maintain and improve the Site;
- To respond to enquiries and support messages you send us;
- To keep the Site secure and prevent abuse;
- To measure how pages are used in aggregate so we can prioritise improvements;
- To comply with legal and regulatory obligations.
4. Lawful bases for processing (UK GDPR)
- Legitimate interests: to keep the Site secure, prevent abuse, respond to enquiries, and improve our products (balanced against your rights);
- Consent: for optional cookies (analytics and marketing) and any marketing emails where applicable. You can withdraw consent at any time;
- Legal obligation: where we are required to process data to comply with UK law.
5. Who we share data with
We never sell your personal data. We share data only with carefully selected processors who help us run the Site:
- Cloud hosting, infrastructure and email providers used to run the website and deliver our email correspondence.
- Google Analytics 4 (Google Ireland Ltd.) — website analytics. Loaded in Google Consent Mode v2 with analytics denied by default, so no analytics cookies are set on your device until you accept analytics cookies via the cookie banner. Google states that Google Analytics 4 does not log or store IP addresses.
- Professional advisers (legal, accounting) under confidentiality, where strictly necessary.
We may also disclose data where required by law, court order, or to protect the rights, property or safety of users or the public.
6. International transfers
Some of our processors — most notably Google for analytics — may process data outside the United Kingdom. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses (with UK Addendum), or an adequacy decision by the UK Government, depending on the destination country.
7. How long we keep data
We keep personal data only for as long as necessary for the purposes for which it was collected:
- Server logs and access records — typically 30 days, longer for security incidents under investigation;
- Enquiry & support correspondence — up to 24 months after the last reply, then archived or deleted;
- Records we are legally required to keep (for example, to satisfy UK tax and accounting requirements) — for the period the law requires.
8. Cookies and similar technologies
We use strictly necessary storage to keep the site working — for example, remembering your cookie choices. Optional cookies (preferences, analytics and marketing) are only set after you accept them via our cookie banner. You can change your choices at any time using the “Cookie settings” link in our footer. Full details of each cookie are in our Cookie Policy.
The site uses Google Analytics 4 (measurement ID G-9HX1MZ0TMP) to help us understand how pages are used. Google Analytics loads in Consent Mode v2 with all storage categories denied by default — no analytics cookies are set on your device until you accept analytics in the cookie banner, and the Site does not set any advertising cookies. Google states that Google Analytics 4 does not log or store IP addresses. You can opt out at any time by reopening the cookie settings or installing Google's browser opt-out add-on.
9. Your rights
Under UK GDPR and the Data Protection Act 2018, you have the right to:
- Access the personal data we hold about you;
- Ask us to correct inaccurate or incomplete data;
- Ask us to erase your data (the “right to be forgotten”);
- Object to or restrict certain kinds of processing;
- Withdraw consent at any time, without affecting the lawfulness of earlier processing;
- Request a portable copy of data you have provided to us;
- Complain to the UK Information Commissioner's Office (ico.org.uk) if you believe we have mishandled your data.
To exercise any of these rights, email hello@arcadeonstudios.co.uk and we will respond within one month.
10. Children
The Site is intended for people aged 16 and over and is not directed at anyone under 16. We do not knowingly collect personal data from anyone under 16. If you believe someone under 16 has provided us with personal data, contact us at hello@arcadeonstudios.co.uk and we will remove it.
11. Security
We use industry-standard technical and organisational measures to protect personal data — including TLS in transit, access controls and audit logging. No internet service can be guaranteed 100% secure, but we commit to notifying affected users and the ICO where required in the event of a material personal-data breach.
12. Contact & changes
Questions, requests, or concerns? Email hello@arcadeonstudios.co.uk.
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent version. Material changes will be signposted on the website or by email where appropriate.