Privacy Policy
Last Updated: February 2025
Our Commitment to Privacy
GameCraft Studio is committed to protecting your personal data and respecting your privacy rights. This policy explains how we collect, use, protect, and share your information when you use our website and educational services.
This policy applies to all interactions with GameCraft Studio, including our website, course enrollment, and educational services. By using our services, you agree to the collection and use of information in accordance with this policy.
For privacy-related inquiries, contact us at privacy@domain.com
1. Information We Collect
Personal Information
We collect information you provide directly to us:
- Contact Information: Name, email address, phone number, mailing address
- Account Information: Username, password, profile preferences
- Educational Information: Course enrollment details, progress tracking, assignment submissions
- Payment Information: Billing address, payment method details (processed securely by third-party providers)
- Communication Data: Messages sent through contact forms, support requests, course discussions
Automatically Collected Information
We automatically collect certain information when you use our services:
- Usage Data: Pages visited, time spent on site, click patterns, course progress
- Device Information: IP address, browser type, operating system, device identifiers
- Location Data: General location based on IP address (country/region level)
- Cookie Data: Information stored through cookies and similar tracking technologies
Third-Party Information
We may receive information from third-party services:
- Social Media: Profile information if you connect social media accounts
- Analytics Services: Website usage statistics from Google Analytics
- Payment Processors: Transaction confirmation and fraud prevention data
2. How We Use Your Information
Service Delivery
- Provide access to courses and educational materials
- Process enrollment and manage your account
- Track course progress and issue completion certificates
- Facilitate communication between instructors and students
- Process payments and manage billing
Communication
- Send course updates, announcements, and important notices
- Respond to inquiries and provide customer support
- Send marketing communications (with your consent)
- Notify you about new courses and special offers
Improvement and Analytics
- Analyze website usage to improve functionality
- Develop new courses based on user interests
- Optimize learning experiences and course content
- Monitor system performance and security
Legal Compliance
- Comply with applicable laws and regulations
- Respond to legal requests and court orders
- Prevent fraud and ensure platform security
- Maintain tax and financial records as required
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract: To provide educational services and fulfill our contractual obligations to enrolled students
- Consent: For marketing communications and optional data processing activities
- Legitimate Interest: For business operations, website analytics, and service improvement
- Legal Obligation: To comply with tax, financial, and regulatory requirements
4. Data Sharing and Disclosure
Service Providers
We share data with trusted third-party providers who help us deliver our services:
- Payment Processors: Stripe, PayPal for secure payment processing
- Email Services: Mailchimp, SendGrid for course communications
- Analytics Providers: Google Analytics for website usage insights
- Hosting Services: Cloud providers for secure data storage and website hosting
- Learning Management: Educational technology platforms for course delivery
Legal Requirements
We may disclose information when required by law or to:
- Comply with legal processes, court orders, or regulatory requests
- Investigate potential fraud or security violations
- Protect the safety and rights of our users and staff
- Enforce our terms of service and usage policies
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.
5. Data Security and Protection
Security Measures
- Encryption: Data encrypted in transit and at rest using industry-standard protocols
- Access Controls: Limited access to personal data on a need-to-know basis
- Regular Audits: Ongoing security assessments and vulnerability testing
- Staff Training: Regular privacy and security training for all team members
- Secure Infrastructure: Hosted on secure cloud platforms with robust security measures
Data Breach Response
In the unlikely event of a data breach:
- We will notify affected users within 72 hours of discovery
- Supervisory authorities will be notified as required by law
- We will provide clear information about the nature and extent of the breach
- Immediate steps will be taken to contain and remediate the situation
6. Data Retention
We retain your personal data for the following periods:
- Account Information: For the duration of your account plus 3 years after closure
- Course Records: Academic records maintained for 5 years for verification purposes
- Financial Records: 7 years as required by Cyprus tax and accounting laws
- Marketing Data: Until consent is withdrawn or 3 years of inactivity
- Website Analytics: Anonymized data retained for 26 months
- Support Communications: 3 years for service improvement and training
Data may be retained longer if required by legal obligations or legitimate business interests, but will be anonymized where possible.
7. Your Privacy Rights
Access and Portability
- Right to Access: Request a copy of all personal data we hold about you
- Data Portability: Receive your data in a structured, machine-readable format
- Transparency: Understand how your data is processed and shared
Correction and Deletion
- Right to Rectification: Correct inaccurate or incomplete personal data
- Right to Erasure: Request deletion of your personal data (subject to legal requirements)
- Account Closure: Delete your account and associated data
Control and Consent
- Right to Object: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent for marketing and optional processing
- Restrict Processing: Limit how we process your data in certain circumstances
Exercising Your Rights
To exercise any of these rights:
- Email us at privacy@domain.com
- Include your full name and the email address associated with your account
- Specify which right you wish to exercise and provide any relevant details
- We will respond within 30 days of receiving your request
8. International Data Transfers
GameCraft Studio is based in Cyprus (EU). Your data may be transferred to and processed in countries outside the European Economic Area, including:
- United States: For cloud hosting and analytics services
- Other Countries: Where our service providers operate
When we transfer data internationally, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions for countries with equivalent data protection
- Binding Corporate Rules for multinational service providers
- Certification schemes and codes of conduct
9. Children's Privacy
Our services are designed for adults aged 18 and over. We do not knowingly collect personal information from children under 18 years of age.
If we become aware that we have collected personal data from a child under 18:
- We will delete such information immediately
- We will not use the information for any purpose
- We will notify the child's parent or guardian if contact information is available
Parents who believe their child has provided personal information to us should contact us immediately at privacy@domain.com
10. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make significant changes:
- We will update the "Last Updated" date at the top of this policy
- We will notify users by email or through prominent website notices
- We will highlight the specific changes made
- We may request renewed consent where required by law
We encourage you to review this policy periodically to stay informed about how we protect your privacy.
11. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Privacy Contact
- Email: privacy@domain.com
- Business Name: GameCraft Studio
- Address: 47 Makarios Avenue, 1077 Nicosia, Cyprus
- Phone: +357 22 738594
We aim to respond to all privacy inquiries within 30 days. For urgent matters, please indicate this in your subject line.
Supervisory Authority
You have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection if you believe we have not handled your personal data appropriately:
- Website: dataprotection.gov.cy
- Email: commissioner@dataprotection.gov.cy
- Phone: +357 22 818 456