Privacy Policy

1. Data Controller

8BIT GAMES LTD is the data controller responsible for your personal information. If you have questions about this policy or wish to exercise your data protection rights, contact us at [email protected].

2. Information We Collect

We may collect and process the following personal information:

• Identity Data: Full name, and where relevant, age confirmation.
• Contact Data: Email address, telephone number, delivery address.
• Transaction Data: Details of products purchased and payment information (processed securely by third-party providers — we do not store full card details).
• Technical Data: IP address, browser type and version, time zone setting, operating system.
• Usage Data: Information about how you use our website.
• Marketing Data: Your preferences in receiving marketing from us.

3. Lawful Basis for Processing

• Consent — e.g., subscribing to our newsletter.
• Performance of a contract — e.g., processing and fulfilling your order.
• Legal obligation — e.g., retaining transaction records for HMRC.
• Legitimate interests — e.g., improving our website and preventing fraud, provided this does not override your rights.

4. How We Use Your Information

• To process and fulfil your orders and manage returns.
• To manage your account and provide customer support.
• To send transactional communications (order confirmations, dispatch notifications).
• To send marketing communications (only with your explicit opt-in consent; unsubscribe at any time).
• To improve our website, products, and services.
• To comply with legal and regulatory requirements.

5. Sharing Your Data

• Service Providers: Payment processors (Stripe, PayPal), delivery services (Royal Mail, DPD, Evri), hosting providers, and email platforms — all acting under contract and required to comply with the UK GDPR.
• Analytics Providers: We use privacy-respecting analytics to understand website usage.
• Legal Authorities: Where required by law, regulation, or court order.

We do not sell your personal information to third parties.

6. Your Rights Under UK GDPR

• Right of access — request a copy of the data we hold about you.
• Right to rectification — request correction of inaccurate information.
• Right to erasure — request deletion of your personal data.
• Right to restrict processing — request that we limit how we use your data.
• Right to data portability — request your data in a machine-readable format.
• Right to object — object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, email [email protected]. We will respond within one calendar month.

7. Data Retention & Security

We retain your personal information only for as long as necessary, or as required by law (for example, transaction records are kept for 6 years to comply with HMRC requirements). We protect your information using TLS/SSL encryption, secure server infrastructure, and regular security reviews.

8. Complaints

If you are unhappy with how we have handled your personal information, you may lodge a complaint with the UK supervisory authority:

9. Contact Us