Last Updated: June 2025 · Applies to: luckygene.net and all LuckyGene products & services
1. Who We Are
LuckyGene Indie Studio ("LuckyGene", "we", "our", "us") is an independent creative studio registered in England and Wales. We are the data controller for personal information collected through our website, games, digital products, and development services.
This Privacy Policy applies to all personal data we process in connection with: our website at luckygene.net; our games (LuckyMonsters, MadTap, LuckyDice, LuckyQueens, AirWarriors, theBootCamp); our digital products (Gene Watches, $LGene Nexus); and our professional development services.
2. Data We Collect
2.1 Information You Provide
- Contact & enquiry data: name, email address, phone number, company name, and message content when you contact us or submit a form.
- Service agreement data: billing address, payment details (processed securely via Stripe or PayPal — we do not store card numbers), and project-related communications.
- Account data: username, email, and password hash if you register for any LuckyGene platform or game account.
- Support data: information you provide when raising a support request or complaint.
2.2 Data Collected Automatically
- Usage data: pages visited, time on site, clicks, and navigation paths.
- Device & technical data: IP address, browser type and version, operating system, screen resolution, and referring URL.
- Game telemetry: session length, feature usage, in-app events, and crash reports — collected in aggregate and anonymised where possible.
- Cookies & similar technologies: see Section 7 for full details.
2.3 Data from Third Parties
We may receive limited data from third-party platforms such as Google Play, the Apple App Store, or social media platforms when you interact with our products through those channels, subject to their own privacy policies.
3. Lawful Basis for Processing
Under UK GDPR, we process your personal data on the following lawful bases:
- Contract: to fulfil our obligations under a service agreement or product licence.
- Legitimate interests: to improve our products, prevent fraud, and communicate relevant updates — balanced against your rights.
- Consent: for marketing emails and non-essential cookies, which you may withdraw at any time.
- Legal obligation: to comply with applicable laws, tax requirements, or court orders.
4. How We Use Your Data
- Delivering and improving our services, games, and digital products
- Responding to enquiries, support requests, and complaints
- Processing payments and managing service agreements
- Sending transactional communications (invoices, project updates, security alerts)
- Sending marketing communications where you have opted in
- Analysing usage patterns to improve user experience and product quality
- Detecting and preventing fraud, abuse, and security incidents
- Complying with legal and regulatory obligations
5. Data Sharing & Disclosure
We do not sell your personal data. We share it only in the following circumstances:
- Service providers: trusted processors including Stripe (payments), Google Analytics (analytics), Vercel (hosting), and email service providers — all bound by data processing agreements.
- Professional advisers: lawyers, accountants, and insurers under confidentiality obligations.
- Legal requirements: when required by law, court order, or to protect the rights and safety of LuckyGene, our users, or the public.
- Business transfers: in the event of a merger, acquisition, or asset sale, with prior notice to affected users.
6. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law:
- Client project data: 7 years (UK tax and accounting requirements)
- Contact & enquiry data: 2 years from last interaction
- Game account data: for the duration of the account, plus 90 days after deletion request
- Marketing consent records: until consent is withdrawn plus 1 year
- Server logs: 90 days on a rolling basis
7. Cookies & Tracking
We use the following categories of cookies:
- Strictly necessary: required for the website to function (session management, security). Cannot be disabled.
- Analytics: Google Analytics to understand how visitors use our site. Anonymised where possible. Requires consent.
- Preferences: to remember your theme (light/dark) and language settings.
You can manage cookie preferences through our cookie banner or your browser settings. Disabling analytics cookies will not affect your ability to use our Services.
8. International Data Transfers
As a remote-first studio, some of our service providers are based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place — such as UK adequacy decisions, Standard Contractual Clauses (SCCs), or equivalent mechanisms — in compliance with UK GDPR Chapter V.
9. Security
We implement appropriate technical and organisational measures to protect your data, including:
- TLS encryption for all data in transit
- Encryption at rest for sensitive stored data
- Role-based access controls and least-privilege principles
- Regular security assessments and dependency audits
- Incident response procedures with breach notification within 72 hours to the ICO where required
No system is completely secure. If you believe your data has been compromised, please contact us immediately at security@luckygene.net.
10. Your Rights
Under UK GDPR, you have the following rights:
- Access: request a copy of the personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your data where there is no compelling reason for continued processing.
- Restriction: request that we limit processing of your data in certain circumstances.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests or for direct marketing.
- Withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior processing.
To exercise any of these rights, contact us at privacy@luckygene.net. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
11. Children's Privacy
Our Services are not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly. For users aged 13–16, parental consent may be required depending on jurisdiction.
12. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via our website or email at least 14 days before taking effect. The "Last Updated" date at the top of this page reflects the most recent revision.
