Privacy policy
Game Town (“we”, “us”, “our”) is committed to protecting your privacy. This policy describes how we collect, use and protect personal data when you use our website and buy from us, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data controller
The data controller responsible for your personal data is:
Game Town Retail Ltd
Unit 4, Brick Lane Arcades, E1 6QL London, United Kingdom
Email: hello@gametown.uk
Website: gametown.uk
For general data protection questions, contact us using the details above. We will respond within a reasonable time and at least within one month where the law requires it.
2. What personal data we collect
Depending on how you use our services, we may process:
- Identity and contact data: name, billing and delivery address, email address, phone number.
- Transaction data: order details, items purchased, payment status (payment card details are processed by our payment providers — we do not store full card numbers on our servers).
- Account and technical data: IP address, browser type, device information, and similar technical data when you browse the site.
- Communications: messages you send us (e.g. contact form, email, order notes).
- Marketing preferences: whether you have subscribed to our newsletter and related choices.
- Cookies and similar technologies: as described in our Cookie policy.
3. Why we use your data (lawful bases)
We only process personal data where we have a lawful basis under UK GDPR. These include:
- Performance of a contract — to process and deliver your orders, take payment, and provide customer support.
- Legitimate interests — to operate and improve our website, prevent fraud, and understand how our services are used (where not overridden by your rights).
- Legal obligation — to comply with tax, accounting, consumer and other applicable UK law.
- Consent — where required (for example, certain marketing emails or non-essential cookies), which you may withdraw at any time.
4. How we share your data
We may share data with:
- Service providers who help us run the business (e.g. payment processing, hosting, email delivery), under contracts that require them to protect your data and use it only for the purposes we specify.
- Professional advisers where necessary (e.g. accountants, lawyers).
- Authorities when required by law or to protect our rights and the safety of others.
We do not sell your personal data. We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
5. International transfers
Where personal data is processed outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR (for example, adequacy regulations or standard contractual clauses).
6. How long we keep your data
We retain personal data only as long as necessary for the purposes described in this policy, including to meet legal, accounting and reporting requirements. Typical examples: order and invoice records for the period required by UK tax and company law; marketing data until you unsubscribe or withdraw consent; correspondence for a reasonable period after your last contact with us.
7. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No transmission over the internet is completely secure; we encourage you to use strong passwords and protect your devices.
8. Your rights
Under UK GDPR you may have the right to:
- Access a copy of your personal data.
- Rectify inaccurate or incomplete data.
- Erase your data in certain circumstances (“right to be forgotten”).
- Restrict processing in certain circumstances.
- Object to processing based on legitimate interests or for direct marketing.
- Data portability for data you provided, where processing is automated and based on consent or contract.
- Withdraw consent at any time where processing is based on consent, without affecting lawfulness of processing before withdrawal.
- Lodge a complaint with the UK supervisory authority.
To exercise these rights, contact us using the email address above. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection: ico.org.uk/make-a-complaint/.
9. Children
Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us and we will delete it.
10. Links to other websites
Our site may link to third-party websites. We are not responsible for their privacy practices; please read their policies before providing personal data.
11. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Material changes may be highlighted on the site or by email where appropriate.
12. Related documents
Cookie policy · Terms of sale · Legal information · Refunds & returns