Elderworld Studios Ltd - Privacy Notice
This notice tells you how we look after your personal data when you visit our websites at https://www.elderworld.io/, and other our subdomains (together, the Website), access our Stag Alliance platform (Platform), and use any services we provide to you (Services). It sets out what information we collect about you, what we use it for, whom we share it with, and what to do if you have any concerns about your personal data.
We may sometimes need to update this notice, to reflect any changes to the way the Website, the Platform, or the Services are provided, or to comply with new legal requirements. We will notify you of any important changes before they take effect.
Last updated: 05 February 2024
We are Elderworld Studios Ltd, a company incorporated and registered in England and Wales with registration number 14727949, and with its registered office at 15 Newland, Lincoln, England, LN1 1XG (we/us/our).
For all visitors to the Website and users of the Platform or the Services, we are the controller of your information (which means we decide what data we collect and how it is used). We are registered with the Information Commissioner’s Office (ICO), the England and Wales regulator for data protection matters, under number ZB657167.
If you have any questions about this privacy notice or the way that we use your information, please contact us at:
By email: privacy@elderworld.io
Personal data means any information which does (or could be used to) identify a living person. We have grouped together the types of personal data that we may collect from you below:
We may anonymise the personal data we collect (so it can no longer identify you) and then combine it with other anonymous information so it becomes aggregated data. Data protection law does not govern the use of aggregated data and the various rights described below do not apply to it.
We do not collect any Special Categories of Personal Data about you (this includes details about your race, ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, your health data, genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
We use different methods to collect personal data from and about you including through:
We are required to identify a legal justification (also known as a lawful basis) for collecting and using your personal data. There are six legal justifications which organisations can rely on. The most relevant of these to us are where we use your personal data to:
The table below sets out the lawful basis we rely on when we process your personal data. We may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data.
Where we need to collect personal data by law or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we may have to suspect your access to or use of to the Website, the Platform, or the Services, but we will notify you if this is the case at the time.
We share (or may share) your personal data with:
If we were asked to provide personal data in response to a court order or legal request, we would seek legal advice before disclosing any information and carefully consider the impact on your rights.
Some of our external third parties are based outside the EEA so their processing of your personal data will involve a transfer of data outside the EEA. We will only transfer information outside of the EEA where we have a valid legal mechanism in place (to make sure your personal data is guaranteed a level of protection, regardless of where in the world it is located). If you want further information on the specific mechanism used by us when transferring your personal data out of the EEA, please contact us at privacy@elderworld.io
The Website, the Platform, or the Services may include links to third-party websites, platform, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave the Website, the Platform, or the Services, we encourage you to read the privacy policy of every website or platform you visit.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have also implemented up-front age verification systems, put in place specific protections, and incorporated child friendly design into the relevant elements of the Website, the Platform, and the Services. These measures help us assess and mitigate data protection risks to children when their personal data is being processed. We take appropriate actions to enforce any age restrictions we have set, including collecting parental consent when needed.
If there is an incident which has affected your personal data and we are the controller, we will notify the regulator and keep you informed (where required under data protection law). Where we act as the processor (which means we only collect and process information on the instructions of a controller) for the affected personal data, we notify the controller and support them with investigating and responding to the incident.
If you notice any unusual activity on the Website, the Platform, or through accessing the Services, please contact us at privacy@elderworld.io
Where we act as the controller, we will only retain your personal data for as long as necessary to fulfil the purposes we collected it for.
To decide how long to keep personal data (also known as its retention period), we consider the volume, nature, and sensitivity of the personal data, the potential risk of harm to you if an incident were to happen, whether we require the personal data to achieve the purposes we have identified or whether we can achieve those purposes through other means, and any applicable legal requirements.
We may keep Identity Data, Contact Data and certain Communications Data for up to six years after the end of our contractual relationship with you. If you visit the Website or use the Platform or the Services, we keep personal data collected through our analytics tools for only for as long as necessary to fulfil the purposes we collected it for. If you have asked for information from us or you have subscribed to our mailing list, we keep your details until you ask us to stop contacting you.
You have specific legal rights in relation to your personal data. It is usually free to you exercise your rights and we aim to respond within one month (although we may ask you if we can extend this deadline up to a maximum of two months if your request is particularly complex or we receive multiple requests at once).
We can decide not to take any action in relation to a request where we have been unable to confirm your identity or if we feel the request is unfounded or excessive. We may charge a fee where we decide to proceed with a request that we believe is unfounded or excessive. If this happens, we will always inform you in writing.
We do not respond directly to requests which relate to personal data for which we act as the processor. In this situation, we forward your request to the relevant controller and await their instruction before we take any action.
Your legal rights in respect of your personal data include:
If you wish to make any of the right requests listed above, you can reach us at privacy@elderworld.io
We use cookies and similar technologies on the Website, the Platform, and the Services. Cookies are small text files that are downloaded to your device. Cookies contain a uniquely generated references which are used to distinguish you from other users. They allow information gathered on one webpage to be stored until it is needed for use on another, allowing a website to provide you with a personalised experience and provide website owners with statistics about how you interact with their websites. Cookies are not harmful to your devices (unlike a virus), but some individuals prefer not to share their information (for example, to avoid targeted advertising).
We use cookies to:
We can only use cookies with your permission (you will be prompted by a message when you first visit the Website, the Platform, or the Services, also known as a cookie banner, where you can choose to accept or decline our cookies). You can update your settings on the Website.
You can choose to decline cookies but if you turn off necessary cookies, some pages and functions on the Website, the Platform, or the Services may not work properly. You can also manage cookies through your browser settings or device settings (your user manual should contain additional information). You can also delete cookies directly with the relevant third parties (for example, you can disable Google Analytics on their website).
Local storage is similar to the use of cookies. We may use local storage and session storage to keep files associated with your use of the Website, the Platform, and the Services, and to encrypt sign in details when use access the Platform and the Services. Session storage is temporary but local storage is persistent. You can remove any local storage by clearing your browser history.
