Your GDPR Data Protection Rights

Last Updated: 1st January 2025

1. Introduction

Under the General Data Protection Regulation (GDPR) and UK data protection laws, you have important rights regarding your personal data. This page explains these rights and how to exercise them with Strategic Fortune Play.

We are committed to respecting your privacy and ensuring you have control over your personal information.

2. Data Controller Information

Data Controller: Strategic Fortune Play
Address: 148 York Gardens, Queensbury, London, United Kingdom
Email: [email protected]
Website: strategicfortuneplay.com

3. Your Data Protection Rights

3.1 Right of Access

What it means: You have the right to request a copy of the personal data we hold about you.

What we provide:

Confirmation of whether we process your personal data
A copy of your personal data in a commonly used format
Information about how we use your data
Details of any third parties we share data with
How long we retain your data
Information about your other rights

How to request: Email [email protected] with "Data Access Request" in the subject line.

3.2 Right to Rectification

What it means: You can request correction of inaccurate or incomplete personal data.

Examples:

Correcting spelling errors in your name
Updating your email address
Adding missing information to your profile
Correcting factual errors in your records

How to request: Contact us at [email protected] with details of the corrections needed.

3.3 Right to Erasure (Right to be Forgotten)

What it means: You can request deletion of your personal data in certain circumstances.

When this applies:

The data is no longer necessary for the original purpose
You withdraw consent and there's no other legal basis
Your data has been processed unlawfully
Deletion is required for compliance with legal obligations

Limitations: We may not be able to delete data if we need it for legal compliance or legitimate interests.

How to request: Email [email protected] with "Data Deletion Request" in the subject line.

3.4 Right to Restriction of Processing

What it means: You can ask us to limit how we use your data while maintaining your account.

When you can request this:

You contest the accuracy of your data
Processing is unlawful but you don't want deletion
We no longer need the data but you need it for legal claims
You've objected to processing pending verification

How to request: Contact [email protected] explaining your reasons.

3.5 Right to Data Portability

What it means: You can receive your personal data in a portable format or have it transferred to another service.

What you receive:

Your data in a structured, commonly used format (JSON/CSV)
Game progress and achievements data
Account preferences and settings
Communication history and preferences

Limitations: Only applies to data you provided and processing based on consent or contract.

How to request: Email [email protected] with "Data Portability Request" in the subject line.

3.6 Right to Object

What it means: You can object to certain types of processing of your personal data.

Types of objection:

Direct Marketing: You can always object to marketing communications
Legitimate Interests: You can object if processing is based on our legitimate interests
Research and Statistics: You can object to processing for research purposes

How to object: Contact [email protected] or use unsubscribe links in emails.

3.7 Rights Related to Automated Decision Making

What it means: You have rights regarding automated processing that significantly affects you.

Current practices: We do not currently use automated decision-making or profiling that significantly affects users.

If we introduce such systems: We will inform you and provide options to request human review.

4. Consent Management

4.1 Withdrawing Consent

Where we process your data based on consent, you can withdraw that consent at any time:

Marketing emails: Use unsubscribe links or contact us
Analytics cookies: Adjust your cookie preferences
Newsletter: Reply "UNSUBSCRIBE" to any newsletter
All consent: Email us at [email protected]

4.2 Cookie Management

You can manage cookies through:

Our cookie banner: Appears on first visit
Browser settings: Block or delete cookies
Cookie preferences: Contact us to update preferences

5. How to Exercise Your Rights

5.1 Making a Request

Step 1: Contact us using the appropriate email address

Step 2: Clearly state which right you want to exercise

Step 3: Provide sufficient information to identify your account

Step 4: Include any specific details about your request

5.2 Information We Need

To process your request efficiently, please provide:

Your full name and email address
Details of your relationship with our services
Specific information about your request
Proof of identity if requested

5.3 Response Times

Standard response: Within 30 days of receipt
Complex requests: May take up to 60 days (we'll inform you)
Acknowledgment: Within 5 business days
Urgent requests: We'll prioritise where possible

6. Contact Information for Data Rights

6.1 Primary Contact

Email: [email protected]
Subject Line: "GDPR Request - [Type of Request]"
Response Time: Within 5 business days

6.2 Alternative Contacts

General Enquiries: [email protected]
Data Protection Officer: [email protected]

6.3 Postal Address

Strategic Fortune Play
GDPR Compliance Team
148 York Gardens
Queensbury, London
United Kingdom

7. Verification Process

To protect your privacy, we may need to verify your identity before processing certain requests:

7.1 Standard Verification

Email verification from your registered email address
Answering security questions about your account
Providing account-specific information

7.2 Enhanced Verification

For sensitive requests (deletion, data access), we may require:

Government-issued photo identification
Additional account verification
Signed declaration of identity

8. Fees and Charges

Standard requests: Free of charge

Excessive requests: We may charge a reasonable fee for:

Multiple requests of the same type within a short period
Requests that are manifestly unfounded
Requests requiring disproportionate effort

We will inform you of any charges before processing your request.

9. Right to Lodge a Complaint

If you're not satisfied with how we handle your data or respond to your requests, you can complain to:

9.1 UK Supervisory Authority

Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

9.2 EU Data Protection Authorities

If you're in the EU, contact your local data protection authority:
Find your local DPA

10. Data Breach Notification

In the unlikely event of a data breach affecting your personal data:

We will notify relevant authorities within 72 hours
You will be informed if there's a high risk to your rights
We will provide clear information about the breach
We will advise on steps you can take to protect yourself

11. International Transfers

When we transfer your data outside the UK/EU, we ensure protection through:

Adequacy decisions for specific countries
Standard contractual clauses
Binding corporate rules
Appropriate safeguards and security measures

12. Children's Rights

Special protections apply to children's data:

Children under 13 need parental consent for data processing
Parents can exercise rights on behalf of their children
We provide age-appropriate information about data processing
Children have the same rights as adults regarding their data

13. Updates to Your Rights

Data protection laws may change, potentially affecting your rights. We will:

Monitor legal developments
Update this page as needed
Inform you of significant changes
Ensure continued compliance with all applicable laws

14. Quick Action Buttons

15. Additional Resources

For more information about data protection:

Remember: Your data protection rights are important. Don't hesitate to contact us if you have questions or want to exercise any of these rights.