Your GDPR Rights

Effective Date: 1st January 2025

Last Updated: 1st January 2025

1. Introduction

Under the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018, you have important rights regarding your personal data. This page explains these rights and how to exercise them when using Block Crush! and our website.

Strategic Forger is the data controller for your personal information. We are committed to protecting your privacy and ensuring you can exercise your rights easily.

2. Data Controller Information

  • Company: Strategic Forger
  • Address: 124 Stratford Road, Derby, DE1 2AB, United Kingdom
  • Contact Email: support@strategicforger.com
  • Data Protection Officer: Available upon request

3. Your Rights Under GDPR

3.1 Right of Access (Article 15)

You have the right to know whether we process your personal data and, if so, to access that data along with specific information about the processing.

What you can request:

  • Confirmation that we are processing your data
  • A copy of your personal data
  • Information about how we use your data
  • Who we share your data with
  • How long we keep your data
  • Your other rights regarding your data

How to request:

Email us at support@strategicforger.com with "Data Access Request" in the subject line. We will respond within one month.

3.2 Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete data completed.

When this applies:

  • Your personal data is inaccurate
  • Your personal data is incomplete
  • You want to add missing information

How to request:

Contact us with details of what needs to be corrected. We will update your information promptly and notify any third parties if necessary.

3.3 Right to Erasure (Article 17)

Also known as the "right to be forgotten," you can request deletion of your personal data in specific circumstances.

When this applies:

  • The data is no longer necessary for the original purpose
  • You withdraw consent and there is no other legal basis
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed
  • Deletion is required for legal compliance

Limitations:

We may not be able to delete your data if we need it for legal obligations, public interest, or legitimate interests that override your rights.

3.4 Right to Restriction of Processing (Article 18)

You can request that we limit how we use your personal data in certain situations.

When this applies:

  • You contest the accuracy of the data
  • Processing is unlawful but you prefer restriction to deletion
  • We no longer need the data but you need it for legal claims
  • You have objected to processing pending verification of our legitimate grounds

What restriction means:

We will store your data but not actively process it without your consent, except for legal claims or protecting others' rights.

3.5 Right to Data Portability (Article 20)

You can request a copy of your data in a structured, machine-readable format and have it transferred to another service provider.

When this applies:

  • Processing is based on consent or contract
  • Processing is carried out by automated means
  • The transfer is technically feasible

What data is included:

  • Game progress and achievements
  • Account information
  • Preferences and settings
  • Communication history

3.6 Right to Object (Article 21)

You can object to certain types of processing, including direct marketing and processing based on legitimate interests.

Direct Marketing:

You have an absolute right to object to direct marketing. We will stop all marketing communications immediately upon request.

Legitimate Interests:

You can object to processing based on our legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds that override your interests.

3.7 Right to Withdraw Consent (Article 7)

Where processing is based on your consent, you can withdraw that consent at any time.

How to withdraw consent:

  • Use the unsubscribe link in marketing emails
  • Adjust cookie preferences in your browser
  • Contact us directly to withdraw specific consents
  • Delete your account through game settings

4. How to Exercise Your Rights

4.1 Contact Methods

4.2 Information We Need

To process your request efficiently, please provide:

  • Your full name and email address
  • Description of your request
  • Account information or game username (if applicable)
  • Proof of identity (may be required for security)

4.3 Response Times

  • Standard Requests: Within one month
  • Complex Requests: Up to three months (we will notify you)
  • Marketing Opt-out: Immediately
  • Account Deletion: Within 30 days

5. Verification and Security

To protect your privacy and prevent unauthorised access, we may need to verify your identity before processing certain requests. This may include:

  • Confirming details from your account
  • Requesting government-issued ID for sensitive requests
  • Asking security questions
  • Using two-factor authentication

6. Fees and Charges

We do not charge fees for most requests. However, we may charge a reasonable administrative fee or refuse to act on a request if it is:

  • Manifestly unfounded or excessive
  • Repetitive in nature
  • Clearly intended to cause disruption

7. Limitations and Exceptions

Your rights may be limited in certain circumstances:

  • Legal Obligations: When we must keep data for legal compliance
  • Legitimate Interests: When our legitimate interests override your rights
  • Public Interest: For tasks carried out in the public interest
  • Legal Claims: For establishment, exercise, or defence of legal claims

8. Cookie Management

You can manage cookies and tracking technologies through:

8.1 Browser Settings

  • Block all cookies
  • Block third-party cookies
  • Delete existing cookies
  • Set cookie preferences

8.2 Our Cookie Preference Centre

Use our cookie banner to:

  • Accept or reject different types of cookies
  • Change your preferences at any time
  • Learn about each cookie category

9. Children's Rights

Children under 16 have the same GDPR rights as adults. For children under 13:

  • Parents or guardians can exercise rights on their behalf
  • We may require parental consent for certain processing
  • Special protections apply to children's data

10. International Transfers

If your data is transferred outside the UK/EEA, you have the right to:

  • Know about the transfer and its legal basis
  • Obtain a copy of safeguards in place
  • Object to transfers in certain circumstances

11. Automated Decision-Making

If we use automated decision-making or profiling that significantly affects you, you have the right to:

  • Know that automated processing is taking place
  • Request human intervention
  • Express your point of view
  • Contest the decision

12. Making a Complaint

If you are not satisfied with how we handle your request, you can:

12.1 Contact Us First

Please contact us first to resolve any issues. We are committed to working with you to address concerns.

12.2 Supervisory Authority

You can lodge a complaint with the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Phone: 0303 123 1113
  • Online: Use the ICO's online complaint form
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

13. Updates to This Information

We may update this information to reflect changes in law or our practices. We will notify you of significant changes through:

  • Email notifications to registered users
  • Prominent notices on our website
  • In-game notifications

14. Quick Reference Guide

Right What It Means How to Exercise
Access Get a copy of your data Email us with "Data Access Request"
Rectification Correct inaccurate data Contact us with corrections needed
Erasure Delete your data Request account deletion
Portability Transfer data to another service Request data export
Object Stop certain processing Unsubscribe or contact us

15. Contact Information

For any questions about your GDPR rights or to exercise them:

  • Email: support@strategicforger.com
  • Subject Line: Include "GDPR Request" for faster processing
  • Response Time: We aim to respond within 72 hours
  • Address: Strategic Forger, 124 Stratford Road, Derby, DE1 2AB, United Kingdom