This Privacy Policy explains how ArcadeOn Studios (“we”, “us”, “our”) — an independent studio operating from the United Kingdom that builds games and software — collects, uses, stores and protects personal data when you visit arcadeonstudios.co.uk (the “Site”).
1. Who we are
ArcadeOn Studios is the data controller for the personal data processed through the Site unless we state otherwise. You can reach us at hello@arcadeonstudios.co.uk.
2. Data we collect
This is an informational website, so we collect very little. Depending on how you interact with us, this may include:
- Enquiry & correspondence data: your name, email address, and the content of any message you send us by email or through a contact or support form;
- Device & usage data: browser type, operating system, device identifiers, pages viewed, timestamps;
- Network data: IP address (used for security and abuse prevention; anonymised before it reaches our analytics provider).
3. Why we collect it
- To operate, maintain and improve the Site;
- To respond to enquiries and support messages you send us;
- To keep the Site secure and prevent abuse;
- To measure how pages are used in aggregate so we can prioritise improvements;
- To comply with legal and regulatory obligations.
4. Lawful bases for processing (UK GDPR)
- Legitimate interests: to keep the Site secure, prevent abuse, respond to enquiries, and improve our products (balanced against your rights);
- Consent: for optional cookies (analytics and marketing) and any marketing emails where applicable. You can withdraw consent at any time;
- Legal obligation: where we are required to process data to comply with UK law.
5. Who we share data with
We never sell your personal data. We share data only with carefully selected processors who help us run the Site:
- Cloud hosting, infrastructure and email providers used to run the website and deliver our email correspondence.
- Google Analytics 4 (Google Ireland Ltd.) — website analytics. Loaded in Google Consent Mode v2 with analytics denied by default, so no analytics cookies are set on your device until you accept analytics cookies via the cookie banner. IP addresses are anonymised.
- Google AdSense (Google Ireland Ltd.) — advertising. Advertising cookies are governed by the same Consent Mode and are only set after you accept marketing cookies in the cookie banner.
- Professional advisers (legal, accounting) under confidentiality, where strictly necessary.
We may also disclose data where required by law, court order, or to protect the rights, property or safety of users or the public.
6. International transfers
Some of our processors — most notably Google for analytics and advertising — may process data outside the United Kingdom. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses (with UK Addendum), or an adequacy decision by the UK Government, depending on the destination country.
7. How long we keep data
We keep personal data only for as long as necessary for the purposes for which it was collected:
- Server logs and access records — typically 30 days, longer for security incidents under investigation;
- Enquiry & support correspondence — up to 24 months after the last reply, then archived or deleted;
- Records we are legally required to keep (for example, to satisfy UK tax and accounting requirements) — for the period the law requires.
8. Cookies and similar technologies
We use strictly necessary cookies to keep the site working — for example, your login session and CSRF protection. Optional cookies (preferences, analytics and marketing) are only set after you accept them via our cookie banner. You can change your choices at any time using the “Cookie settings” link in our footer.
The site uses Google Analytics 4 (measurement ID G-9HX1MZ0TMP) to help us understand how pages are used. Google Analytics loads in Consent Mode v2 with all storage categories denied by default — no analytics or advertising cookies are set on your device until you accept the relevant categories in the cookie banner. IP addresses are anonymised. You can opt out at any time by re-opening the cookie banner or installing Google's browser opt-out add-on.
We also use Google AdSense to display advertising on some pages. Under the same Google Consent Mode v2, advertising storage is denied by default, so AdSense sets advertising cookies only after you accept marketing cookies in our banner. You can withdraw consent at any time using the “Cookie settings” link in our footer.
9. Your rights
Under UK GDPR and the Data Protection Act 2018, you have the right to:
- Access the personal data we hold about you;
- Ask us to correct inaccurate or incomplete data (most of this is editable from your profile page);
- Ask us to erase your data (the “right to be forgotten”);
- Object to or restrict certain kinds of processing;
- Withdraw consent at any time, without affecting the lawfulness of earlier processing;
- Request a portable copy of data you have provided to us;
- Complain to the UK Information Commissioner's Office (ico.org.uk) if you believe we have mishandled your data.
To exercise any of these rights, email hello@arcadeonstudios.co.uk and we will respond within one month.
10. Children
Our Services are not directed at children under 13. We do not knowingly collect personal data from children under 13. In the UK and EEA, online consent for users between 13 and 16 may require parental approval — please contact us if you have concerns. If you believe a child has provided us with personal data, contact us and we will remove it.
11. Security
We use industry-standard technical and organisational measures to protect personal data — including TLS in transit, access controls and audit logging. No internet service can be guaranteed 100% secure, but we commit to notifying affected users and the ICO where required in the event of a material personal-data breach.
12. Contact & changes
Questions, requests, or concerns? Email hello@arcadeonstudios.co.uk.
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent version. Material changes will be signposted on the website or by email where appropriate.