Privacy Policy

1. Who we are

Playables Limited ("Playables", "we", "us") is the data controller for personal data collected through https://www.playables.com. We are based in London, UK and process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

• Trading name: Playables
• Legal entity: Playables Limited
• Company number: 06342659 (registered in England & Wales)
• Registered address: Gascoyne House, Moseleys Farm Business Centre, Fornham All Saints, Bury St Edmunds, Suffolk, IP28 6JY
• Email: hello@playables.com

2. What we collect and why

We do not sell personal data, we do not buy marketing lists, and we do not use your data for automated decision-making that has a legal or similarly significant effect on you.

3. Who processes data on our behalf

We use a small number of suppliers. Each acts as a processor under a written agreement and only on our instructions.

• Vercel (hosting and edge network) – serves the website and processes request logs.
• Supabase (database) – stores newsletter subscribers and article content.
• Resend (email delivery) – sends confirmation, newsletter and notification emails, including delivering your contact enquiry to our mailbox.
• Google Analytics 4 (analytics) – aggregate usage statistics with IP addresses anonymised. We do not use it for advertising or cross-site tracking.

Some suppliers store data outside the UK, principally in the United States or the EU. Where that happens we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK–US Data Bridge, as applicable.

4. Cookies and similar technologies

We use a consent banner and load analytics only when you choose to allow it. Before you choose, and if you decline, Google Analytics runs in "consent mode": it sets no cookies and sends only anonymous, aggregated signals that cannot identify you. You can change your choice at any time using the "Cookie settings" link in the footer.

5. Email tracking

Newsletter emails contain a tiny image and rewritten links so we can see open and click rates. This tells us which topics are worth writing more about. It is tied to your subscription record and you can opt out by unsubscribing. Confirmation and transactional emails are not tracked.

6. How long we keep data

• Contact enquiries: your enquiry is emailed to us and is not stored in a database. We keep the email while we are in contact with you and for the life of any client relationship that follows, plus the period required for tax and contract records, then delete it.
• Newsletter subscribers: until you unsubscribe. An address that never confirms receives nothing beyond the confirmation email and is deleted on request. Unsubscribed addresses are retained only so we do not email you again.
• Analytics: for the retention period configured in our Google Analytics property, which is at most 14 months, after which only aggregated reports remain.
• Server logs: held by our hosting provider for a short period under its own retention policy, measured in days rather than months.

7. Your rights

Under UK GDPR you can ask us to:

• tell you what personal data we hold about you and give you a copy (access);
• correct inaccurate data (rectification);
• delete your data (erasure), subject to legal retention duties;
• stop or limit processing (restriction or objection), including any direct marketing;
• give you your data in a portable format (portability);
• withdraw consent at any time, without affecting processing that has already happened.

Email hello@playables.com with the subject line "Data request". We respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve it first.

8. Security

Data is encrypted in transit (TLS) and at rest with our hosting and database providers. Access to enquiry and subscriber data is limited to named staff with password-protected, session-limited admin accounts. We keep our dependencies patched and review access regularly.

9. Children

Our services are for businesses. We do not knowingly collect data from anyone under 18.

10. Changes to this policy

We will post any changes here and update the date at the top. If a change is material and you are a subscriber, we will tell you by email. See also our Terms of Service.