Defne Studio

Privacy Policy

Last updated: 2026-05-06

Defne Studio Ltd ("we", "us", "our") respects your privacy. This policy explains what personal data we collect when you visit defnestudio.com or use any of our products and services, why we collect it, how we use it, and what rights you have.

1. Who Is Responsible for Your Data

The data controller for the purposes of UK and EU data protection law is:

Defne Studio Ltd, Company No. 17176367
Registered office: Suite 10772, 5 Brayford Square, London, United Kingdom, E1 0SG

You can reach our privacy team via the contact form.

2. What We Collect

  • Account data — name, email address, username, encrypted password.
  • Order data — billing name, billing address, products purchased, transaction identifiers. We do not store full payment card numbers; payment processing is handled by regulated third parties (e.g. Stripe).
  • Communication data — messages you send via the contact form, support tickets, or email.
  • Technical data — IP address, browser type, device identifiers, pages visited, referrer URL, and cookies.
  • Game data — for our games, scores, progression, and in-game choices linked to your account.

3. Why We Collect It

  • To create and maintain your account.
  • To deliver the products, licenses, and services you purchase.
  • To provide customer support.
  • To prevent fraud, abuse, and protect the integrity of our platforms.
  • To comply with legal obligations (taxation, accounting, response to lawful requests).
  • To send service announcements and, with your consent, marketing communications.

4. Legal Basis for Processing

Depending on the activity, we rely on one of the following bases under UK GDPR:

  • Contract — to perform the contract you enter into when registering or buying a product.
  • Legitimate interests — to keep our service safe, prevent fraud, and improve our products.
  • Legal obligation — to retain transaction records as required by tax law.
  • Consent — for optional marketing emails and non-essential cookies.

5. Who We Share Data With

We share data only when necessary, with vetted processors:

  • Hosting and infrastructure providers (servers, backups, CDN).
  • Payment processors (Stripe and similar; subject to their own policies).
  • Email delivery and support tools.
  • Analytics providers (only with your consent and in aggregated form where possible).
  • Law enforcement, when legally required.

We do not sell your personal data.

6. International Transfers

Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or adequacy decisions.

7. Data Retention

We keep account data for as long as your account is active and for a reasonable period afterwards to handle disputes, refunds, and legal obligations. Transaction records are retained for at least seven years to comply with UK accounting and tax law.

8. Your Rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request erasure ("right to be forgotten") where applicable.
  • Object to or restrict certain processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time.
  • Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us via the contact form. We respond within 30 days.

9. Cookies

We use cookies that are strictly necessary for the site to work (session, CSRF, language preference). With your consent we also use analytics and preference cookies. You can withdraw consent at any time through your browser settings.

10. Children

Our products are not directed at children under 13 (or under 16 where required by local law). We do not knowingly collect data from children. If you believe we have, please contact us and we will delete the data.

11. Changes to This Policy

We may update this policy. Material changes will be announced on this page with a new "last updated" date.

12. Contact

Questions or concerns about this policy or your data? Reach us via the contact form.