Privacy Policy

1. Who we are

This Privacy Policy explains how WHALEFALL GAMES LIMITED (“Whalefall Games”, “we”, “us”, “our”) collects and uses personal data when you visit whalefallgames.online (the “Website”) or contact us. We are the controller of your personal data under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

This policy covers the Website only. Our games have their own privacy notices, available in each game and on its app store page.

2. Data we collect

Information you give us

When you send a partnership request through our form or email us, we collect:

• your name, work email address and the name of your company or studio;
• the type of partnership you are interested in;
• any links you share (for example a build, trailer or pitch deck) and the content of your message;
• your confirmation that you have read this Privacy Policy.

Information collected automatically

Like most websites, our hosting provider automatically records basic technical data when you visit, such as your IP address, browser type, device information, the pages you request and the date and time of your visit. This is used to deliver the Website securely and to prevent abuse.

We do not currently use analytics, advertising or tracking technologies on the Website.

3. How and why we use it

We use your personal data only for the following purposes and on the following legal bases:

• To reply to your request and discuss a potential partnership — our legitimate interest in running and developing our business, and, where you are acting for yourself, taking steps at your request before entering into a contract.
• To keep records of our business communications — our legitimate interest in managing our relationships and defending legal claims.
• To operate and protect the Website, including preventing spam and fraud — our legitimate interest in keeping the Website secure and available.
• To comply with legal obligations, for example responding to lawful requests from authorities.

We do not sell your personal data, use it for automated decision-making or send you marketing messages unless you have asked us to.

4. Who we share it with

We share personal data only with service providers that help us run the Website and our business, under contracts that require them to protect it and use it only on our instructions:

• Form processing — Web3Forms, which delivers the contents of our contact form to our email inbox;
• Email and productivity services that we use to receive and manage correspondence;
• Website hosting providers that store and serve the Website;
• Google Fonts, which delivers the fonts used on the Website; your browser connects to Google's servers to load them, which shares your IP address with Google.

We may also disclose personal data to professional advisers, to a buyer or successor if our business is sold or reorganised, or where required by law.

5. International transfers

Some of our service providers may process personal data outside the United Kingdom. Where this happens, we make sure appropriate safeguards are in place, such as a UK adequacy decision, the UK International Data Transfer Agreement or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

6. How long we keep it

We keep partnership requests and related correspondence for up to 24 months after our last contact with you, unless we enter into an agreement with you — in that case we keep the relevant records for as long as needed for the relationship and for up to six years afterwards to meet legal and accounting requirements. Server logs are kept by our hosting provider for a limited period, typically no longer than 90 days.

7. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to erase your data;
• ask us to restrict how we use your data;
• object to processing based on our legitimate interests;
• receive your data in a portable format, where applicable;
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email partners@whalefallgames.online. We will respond within one month. We may ask you to confirm your identity before acting on your request.

8. Cookies

The Website does not set advertising, analytics or other non-essential cookies. Your browser may store small amounts of data needed for the Website to work, such as cached files. If we introduce analytics or other non-essential cookies in the future, we will update this policy and ask for your consent before setting them.

9. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted (HTTPS) connections, access controls and reputable service providers. No method of transmission over the internet is completely secure, but we work to protect your data and to respond promptly to any incident.

10. Children

The Website is intended for business contacts and is not directed at children under 13. We do not knowingly collect personal data from children through the Website. If you believe a child has sent us personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the date it was last updated. If we make significant changes, we will highlight them on the Website.

12. Contact and complaints

If you have any questions about this policy or how we handle your data, email partners@whalefallgames.online or write to WHALEFALL GAMES LIMITED, Mercury House, 19-21 Chapel Street, Marlow, Buckinghamshire, United Kingdom, SL7 3HN.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or by calling 0303 123 1113. We would, however, appreciate the chance to deal with your concerns first.