Privacy policy.

Cloan Games is run by two brothers, James and Jon McKenzie. You can contact us by email at james@cloangames.com.

We collect or use the following personal information for dealing with queries, complaints or claims:

• Names and contact details
• The content of the messages you send us

You can look around this website without giving us any personal information, and we don't use analytics or advertising cookies.

When you visit our website, our hosting and security providers may process technical information such as your IP address, browser information, request timestamps and information about requests made to the website. This information is used to deliver the website, maintain its security and identify potentially malicious activity. In particular:

• Cloudflare hosts this website and processes technical data such as your IP address to deliver the site and keep it secure.
• Google Fonts loads the typefaces used on this site, which means your browser contacts Google and shares your IP address with them.
• The News page links to articles on other websites. Those sites have their own privacy policies, which apply once you leave this one.

This website isn't aimed at children, but we know games sites are popular with young people, so we keep things simple. We don't have accounts, sign-up forms or tracking, and we don't ask anyone for personal information. The only personal information we receive is what you choose to send us by email.

If you're under 13, please ask a parent or carer before emailing us. If a child has sent us personal information and you'd like it deleted, email us and we'll remove it.

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights, which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

• Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions, which means you may not receive all the information you ask for.
• Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
• Your right to erasure – You have the right to ask us to delete your personal information.
• Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information.
• Your right to object to processing – You have the right to object to the processing of your personal data.
• Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful basis for collecting or using personal information for dealing with queries, complaints or claims is:

• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.Our legitimate interest is to receive, review and respond to enquiries, complaints and other communications sent to our published email address. Processing the sender’s name, contact details and message content is necessary for us to understand and respond to their communication.We consider this processing to be proportionate and to have a limited impact on individuals’ privacy, as they choose to contact us and we use their information only for the purposes of handling their communication and any necessary follow-up.We do not use this information for unsolicited marketing.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

• Directly from you

We keep emails for as long as we need them to deal with your message and any follow-up, and we normally delete them within 12 months of the last message between us. We may keep them for longer if we need them to deal with a complaint or claim, or if the law requires it.

For more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above.

Data processors

• Cloudflare – this data processor provides email routing services, safely directing messages sent to our website domain over to our primary inbox. It also hosts this website.
• Google (Gmail) – this data processor provides our primary email hosting services and securely stores all incoming and outgoing messages.

Where necessary, our data processors may share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place.

• Google LLC – email hosting and cloud storage provider. Country the personal information is sent to: United States.
• Cloudflare – web infrastructure and email routing provider. Country the personal information is sent to: United States.

For both, the transfer complies with UK data protection law because the country or sector has been assessed as providing adequate protection to data subjects (also known as Adequacy Regulations or the UK data bridge).

If you have any concerns about our use of your personal information, you can make a data protection complaint to us by emailing james@cloangames.com.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the Information Commissioner’s Office (ICO).