Data Protection

Privacy Policy

Nuvanta Games is dedicated to handling your personal data transparently, securely, and in strict compliance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

Data Processing Provisions & Transparency Notice

  • 01

    Fundamental Privacy Principles

    Nuvanta Games operates on the core principles of data minimization, purpose limitation, and storage transparency. We process personal information solely to the extent necessary to operate our website, respond to game development project proposals, and maintain the integrity of our interactive web game demonstrations. We do not sell, rent, or trade your personal data to advertisers or third-party marketing brokers.

  • 02

    Identity of the Data Controller

    For the purposes of the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), the Data Controller is Sportix Ltd (trading as Nuvanta Games), registered at 119 Cannon St, London EC4N 5AT, United Kingdom. You may address any questions regarding data protection, access requests, or privacy compliance directly to our designated data lead via email at [email protected].

  • 03

    Categories of Data Collected

    Depending on how you interact with our website, we may collect the following categories of information:

    • Inquiry Information: Name, corporate email address, organization name, and project briefs submitted through our game development RFP forms.
    • Technical Telemetry: Anonymized IP addresses, browser engine user-agents, device screen resolutions, and operating system identifiers.
    • Canvas Session Metrics: WebGL rendering performance, frame latency indicators, and local session preferences.
  • 04

    Lawful Bases for Processing

    We process your personal information strictly under established lawful grounds defined by Article 6 of the UK GDPR:

    • Consent (Art. 6(1)(a)): Explicitly granted when you submit a development inquiry or contact form.
    • Legitimate Interests (Art. 6(1)(f)): Ensuring the technical stability, server security, and anti-abuse safeguards of our web architecture.
    • Legal Obligation (Art. 6(1)(c)): Compliance with statutory British corporate retention requirements and age policies.
  • 05

    Purposes of Processing

    Your data is utilized exclusively for: (a) evaluating project specifications and formulating development proposals; (b) managing ongoing correspondence regarding social game engineering; (c) auditing WebGL client compatibility across desktop and mobile browsers; (d) protecting our systems from automated spam scripts and distributed denial-of-service attempts.

  • 06

    Interactive Game Storage & Local Preferences

    Our embedded in-house demonstration title (Kingdom of Elves) operates within an isolated browser environment. Game state items—such as virtual credit balances, audio volume preferences, and animation settings—are stored strictly within your browser's local storage (localStorage) or IndexedDB partition. This data never leaves your device and is not synchronized to external tracking servers.

  • 07

    Cookie Architecture & Analytics Policies

    We utilize strictly necessary technical session cookies to ensure proper page delivery, asset caching, and form anti-tamper security. We do not use third-party behavioral advertising cookies, re-targeting pixels, or tracking beacons from ad exchanges. You may configure your browser to reject cookies, though doing so may affect certain interface interactions.

  • 08

    Disclosure of Data & Third-Party Processors

    We do not sell, license, or disclose your personal records to third parties. We may disclose information only to vetted technical infrastructure contractors (such as secure mail transfer agents and hosting providers) operating under binding data processing agreements compliant with UK GDPR. We may also disclose records if required by lawful court order or statutory British regulatory authority.

  • 09

    International Data Transfers

    Primary processing occurs within secure data centers located in the United Kingdom and the European Economic Area. In the event that technical support involves transfers beyond these boundaries, we enforce UK International Data Transfer Agreements (IDTAs) and Standard Contractual Clauses (SCCs) to guarantee an equivalent level of protection.

  • 10

    Data Retention & Disposal Protocols

    Client correspondence and project development briefs submitted via our forms are retained for up to twenty-four (24) months to facilitate ongoing commercial dialogue and milestone verification. Technical server logs are automatically purged after thirty (30) days on a rolling schedule. You may request earlier deletion at any time.

  • 11

    Technical & Organizational Security Architecture

    Sportix Ltd maintains enterprise-grade security protocols, including TLS 1.3 cryptographic transit encryption, strict HTTP Strict Transit Security (HSTS) headers, hardened file permissions, and segmented mailbox storage. Internal access to inquiry data is restricted to authorized studio producers on a strict need-to-know basis.

  • 12

    Your Statutory Data Subject Rights

    Under UK GDPR provisions, you enjoy enforceable rights concerning your personal information:

    • Right of Access (Art. 15): Request a copy of all personal records maintained by Sportix Ltd.
    • Right to Rectification (Art. 16): Require prompt correction of inaccurate or incomplete details.
    • Right to Erasure (Art. 17): Request the permanent deletion of your contact records ("Right to be Forgotten").
    • Right to Restrict or Object (Art. 18 & 21): Object to processing based on legitimate studio interests.
  • 13

    Protection of Minors & 20+ Age Verification

    Our website and interactive titles are exclusively engineered for adults aged 20 and over. We do not intentionally collect, store, or process personal data from persons under 20 years of age. If we discover that personal information belonging to an underage user has been transmitted, we will immediately purge the record from our active databases.

  • 14

    Policy Updates, Contact & Regulatory Recourse

    This Privacy Policy may be revised periodically to reflect evolving regulatory frameworks or studio operations. To exercise any of your data rights or file an inquiry, write to our Data Protection Officer at [email protected]. If you believe your rights have not been respected, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.