Privacy Policy
Last updated: 26 August 2025
Registered address: 128 City Road, London EC1V 2NX, United Kingdom
Contact: [email protected]
This Privacy Policy explains how we collect, use, share, and protect personal data when you visit the official website for the game Drop The Boss. It also explains your rights under UK data protection law.
Who we are
We operate the official information site for Drop The Boss. For the purposes of the UK GDPR and the Data Protection Act 2018, we are the data controller for personal data processed through this website.
- Postal address: 128 City Road, London EC1V 2NX, United Kingdom
- Email: [email protected]
Scope
This notice covers personal data collected through this site, our contact forms, and our email inbox. It does not cover third party websites or services that we link to.
Data we collect
Information you provide to us
- Messages sent via contact forms or email
- Your name and email address if you choose to share them
- Any other information you include in your message
Information collected automatically
- Device and browser information
- IP address and general location at a city or country level
- Pages viewed, time on page, and referring pages
- Cookie identifiers and similar technologies such as local storage and pixels
Information from service providers
- Aggregated analytics reports that help us understand how people use the site
- Security logs from hosting and content delivery services
We do not intentionally collect sensitive categories of personal data through this site.
Why we use your data and the legal bases
We process personal data only when we have a lawful basis under UK GDPR. The main purposes and bases are listed below.
| Purpose | Examples | Legal basis | Typical retention |
| Run and secure the site | Load pages, keep sessions secure, prevent abuse | Legitimate interests | Up to 12 months in system logs |
| Respond to messages | Answer questions, handle rights requests | Legitimate interests or performance of a contract where applicable | Up to 24 months after last contact |
| Measure and improve | Basic analytics, page performance, content planning | Consent where required or legitimate interests | Up to 13 months for analytics identifiers |
| Comply with law | Record keeping, regulatory requests | Legal obligation | As required by law |
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing that has already happened.
Cookies and similar technologies
We use cookies and related technologies to keep the site working, remember choices, and measure performance. For full details, see our Cookie Policy. You can change your cookie choices at any time using the controls described there and in your browser settings.
How we share information
We share personal data with trusted service providers that help us operate this site. Examples include hosting, content delivery networks, security tools, and analytics platforms. These providers act on our instructions and must protect the data they process.
We do not sell personal data. We disclose information only when necessary for security, compliance, or if the law requires it.
International transfers
Some service providers may process data outside the United Kingdom or the European Economic Area. When this happens we use lawful safeguards such as Standard Contractual Clauses with the UK Addendum or other approved transfer mechanisms to protect your information.
Data security
We use a range of technical and organisational measures to protect personal data. This includes encryption in transit, access controls, and least privilege practices. No method of transmission or storage is perfectly secure, yet we work to reduce risk and respond quickly to incidents.
Data retention
We keep personal data only for as long as needed for the purposes listed above. When data is no longer required, we delete it or anonymise it.
Your rights
Under the UK GDPR you have the following rights. Some rights apply only in certain situations.
- Right of access to your personal data
- Right to rectification of inaccurate or incomplete data
- Right to erasure where there is no ongoing lawful basis
- Right to restriction of processing in limited cases
- Right to object to processing based on legitimate interests
- Right to data portability where technically feasible
- Right to withdraw consent at any time
- Right to lodge a complaint with the Information Commissioner’s Office
Contact us to exercise your rights
Email [email protected] with your request and enough information to identify you. We may ask for limited additional details to verify your identity. We aim to respond within one month as required by law.
Complain to the regulator
You can contact the Information Commissioner’s Office if you are unhappy with how we handle your data. Visit their website or write to the ICO at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Children’s privacy
This site is intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided personal data to us, please write to the address above and we will take appropriate steps.
Third party links
Our content may link to other websites. Those sites have their own privacy policies. We are not responsible for their practices.
Changes to this policy
We will update this notice when our practices change. The date at the top shows the most recent update. Material changes will be explained in a summary at the start of this page.
Contact
Questions about privacy or this policy:
Email: [email protected]
Post: Privacy Team, 128 City Road, London EC1V 2NX, United Kingdom
Document owner: Editorial and Operations Team for the game Drop The Boss
Last updated: 26 August 2025
